Plain language, no fine print. A version of this charter is attached to every client agreement, and we hold ourselves to every line of it.
Leads, contacts, deals, messages your team sends or forwards, reminders, and files you attach. Nothing is captured from sources you haven't connected.
In a database that holds only your business's data, on infrastructure operated by us, in-region where available. Your data is never mixed with another client's — isolation is how the system is built, not a policy promise.
Yours. Every lead, contact, deal and message is your property. Export everything, any time, in open formats (CSV/JSON). On ending the service, we export your data to you and then delete it on a fixed schedule you can see.
Named operators access your data only to run, support and configure your service — and that access is logged. Your data is never sold, never shared, never used to market to your contacts, and never used to train AI models.
Messages are processed by AI models to classify and extract — that is the product. With your own AI keys (recommended), usage runs on your account and is visible to you. With ours, it's billed through transparently. Either way: prompts and outputs are not used to train anyone's models.
The software, prompts, workflows and configurations — including ones built specifically for you — are our licensed product. You license its use; ownership stays with us. That's the other half of the symmetry above, and it's what lets us keep every client's machinery sharp.
Raw message logs are kept for a fixed window (default 90 days, configurable). CRM records stay for as long as you keep them. Deletion requests are honoured within 7 days.
Our compute, database and edge providers, your chosen AI provider, and the chat platforms you use. The full subprocessor list is maintained per client and shared whenever it changes. Formal privacy documentation aligned to India's DPDP Act — and UK GDPR for UK engagements — is available on request.
Any security incident affecting your data: we tell you within 48 hours — what happened, what it touched, what we're doing about it. Nothing is swallowed silently; that is an engineering rule here, not a slogan.
Proof over promises, even here: this website loads no third-party scripts, sets no cookies, and runs no trackers — the fonts are served from our own infrastructure. Questions about the charter: nav@goxero.co.