Privacy Policy

GoToFlow · gotoflow.io

Effective date: February 19, 2026

Data Controller

Andrey Cherenok, Individual Entrepreneur
Service: GoToFlow — https://gotoflow.io
Email: gotoflow.io@gmail.com

1. Information We Collect

Account Data: email address, name (if provided), and authentication identifiers from third-party login providers (e.g., Google, Telegram).
Usage Data: IP address, browser type and version, device information, operating system, referring URLs, pages visited, feature usage, activity logs, and timestamps.
Payment and Subscription Data: transaction status, payment identifiers, subscription plan, billing period, and renewal status. GoToFlow does not store full credit or debit card details.
Content Data: prompts, topics, links, uploaded materials, and AI-generated outputs that you create or provide while using the Service.
Communication Data: messages, support requests, feedback, and any other correspondence you send to us.

2. How We Use Your Data

Provide, operate, and maintain the Service and its features.
Create and manage your account, subscriptions, and token balances.
Process payments and manage billing.
Provide customer support and respond to inquiries.
Process your prompts, links, and uploaded materials through AI systems to generate content and deliver the Service's core functionality.
Monitor, detect, and prevent fraud, abuse, and unauthorized access.
Analyze usage patterns to improve product performance, reliability, and user experience.
Comply with applicable legal obligations.
Send transactional and service-related messages (e.g., account notifications, security alerts).
Send marketing communications where you have given consent or where otherwise permitted by applicable law. You may opt out at any time.

3. Legal Basis for Processing

Performance of a contract: processing necessary to provide the Service you have signed up for.
Legitimate interests: improving the Service, preventing fraud, ensuring security, and conducting analytics, where these interests are not overridden by your rights.
Consent: where you have given explicit consent, such as for marketing communications or optional data processing.
Legal obligations: where processing is required to comply with applicable laws or regulations.

4. AI and Content Processing

To provide AI-powered features, we process the prompts, topics, links, uploaded materials, and other inputs you provide through the Service.
This content may be sent to third-party AI infrastructure providers for the purpose of generating outputs.
We process this content to provide and improve the Service where permitted by applicable law and our agreements with providers.
GoToFlow may use automated systems and AI models to generate, process, analyze, or improve content. These systems assist in content creation but do not make autonomous decisions with legal or similarly significant effects on users.
AI-generated outputs may be inaccurate, incomplete, or unsuitable for specific purposes. You are solely responsible for reviewing, verifying, and taking responsibility for all generated content before use or publication.

5. Cookies and Analytics

We use cookies and similar technologies on the Service. These may include:
Necessary cookies: required for the basic operation of the Service (e.g., authentication, session management). These cannot be disabled without affecting core functionality.
Analytics and performance cookies: used to understand how visitors interact with the Service, measure traffic, and identify areas for improvement.
Preference and functionality cookies: used to remember your settings and preferences (e.g., language selection, display options).
Marketing and advertising cookies: if used, these help measure the effectiveness of campaigns and may be used to show relevant content. You may opt out of these where applicable.
You can manage or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.
For more details on the specific cookies used, refer to any cookie notice displayed on the Service.

6. Data Sharing and Third Parties

We may share your data with the following categories of third-party service providers, solely as necessary to operate and improve the Service:
Payment processors: to process transactions and manage subscriptions.
Hosting and cloud infrastructure providers: to store data and run the Service.
AI infrastructure and model providers: to process prompts and generate content.
Analytics and performance tools: to measure usage, diagnose issues, and improve the product.
Authentication providers: to enable third-party login (e.g., Google, Telegram).
Email, support, and communication tools: to manage customer communications and service notifications.
Legal, compliance, or governmental authorities: where required by applicable law, regulation, or valid legal process.
We do not sell your personal data to third parties.
The specific providers within each category may change over time as we improve the Service.

7. International Transfers

Your personal data may be transferred to and processed in countries other than your country of residence, including countries that may have different data protection standards.
Where required by applicable law, GoToFlow relies on appropriate safeguards for such transfers, which may include adequacy decisions, Standard Contractual Clauses (SCCs), or other lawful transfer mechanisms recognized under applicable data protection legislation.
By using the Service, you acknowledge that your data may be processed in jurisdictions outside your own.

8. Data Retention

We retain your personal data only as long as reasonably necessary for the purposes described in this Privacy Policy:
Account data: retained while your account remains active and you continue to use the Service.
Billing and payment records: may be retained as required by applicable tax, accounting, or financial regulations.
Analytics and security logs: may be retained for a limited period to detect fraud, troubleshoot issues, and improve the Service.
Content data: retained while your account is active; may be deleted upon account deletion, subject to technical and legal limitations.
You may request deletion of your data at any time by contacting us. Deletion requests are processed subject to applicable legal retention requirements and technical feasibility.
When your data is no longer needed, we will delete or anonymize it in accordance with our internal retention practices.

9. Your Rights

Depending on your jurisdiction and applicable data protection law (including, where applicable, the GDPR), you may have the following rights:
Right of access: obtain confirmation of whether your personal data is being processed and request a copy of it.
Right to rectification: request correction of inaccurate or incomplete personal data.
Right to erasure (right to be forgotten): request deletion of your personal data, subject to applicable legal retention requirements.
Right to restriction of processing: request that we limit the processing of your data in certain circumstances.
Right to data portability: receive your personal data in a structured, commonly used, machine-readable format, where technically feasible and required by applicable law.
Right to object: object to the processing of your personal data where processing is based on legitimate interests.
Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
Right to lodge a complaint: you may have the right to lodge a complaint with a supervisory authority in your jurisdiction, where applicable.
Rights related to automated decision-making: where applicable, you may have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significant effects.
To exercise any of these rights, contact us at: gotoflow.io@gmail.com. We will respond within a reasonable timeframe as required by applicable law.

10. Children's Privacy

The Service is not intended for children under the age of 13 (or a higher age where required by local law).
We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete it.

11. Security

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
No method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law.
The latest version will always be available on the website at https://gotoflow.io/privacy-policy.
We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

Contact

For any questions or requests regarding this Privacy Policy, contact us at: gotoflow.io@gmail.com