Privacy policy

goya24 is a customer-support service. A business puts an assistant on its website and answers its customers from the goya24 dashboard and apps.

For your own goya24 account, we decide what is kept. The conversations in a workspace belong to the business that owns it, and we keep them for that business.

Conversation messages, the name and email a visitor gives, the page where the conversation started, and whatever your site sends about its own signed-in customer.

For each answer, the tokens used and the model that wrote it. That is what your bill is made of.

Your goya24 account: your name, email, password (stored only as a one-way hash), your photo if you add one, your language, and for each session you are signed in with, its device and IP address, so you can see and end them. If you sign in with Google, the name, email and account id Google gives us.

On a phone, the goya24 app keeps: the push token Firebase gives it, so notifications reach that phone; the phone's model name, so you can tell your phones apart in your settings; a photo, only when you choose one from the camera or your library for your profile; and your voice, only while you dictate a reply. The recording is turned into text and not kept.

Payments go through the payment provider (Stripe, or the Houshyar gateway). We keep what was paid and when, never card numbers.

A page's full address with its parameters is not kept, only its path and title. A full address often carries an order number and sometimes a token, and those are not ours to keep.

Your keys and secrets are stored encrypted and are never sent back in an API response.

No advertising trackers, and no selling of data. The apps do not track you across other companies' apps or websites.

Each workspace's data belongs to that business. We do not use it to train any model.

To write an answer, the conversation's text is sent to the model provider chosen in the panel. Which provider that is, is the business's choice, and it shows in the admin panel.

Only the providers the service needs, each with only what its job needs: the AI provider that writes answers, and the speech-to-text provider for dictation; Google Firebase Cloud Messaging, which carries notifications to Android phones and hands them to Apple's push service for iPhones; the email service that sends sign-in codes and notifications; Telegram or Bale, only if you link a chat to get notifications there; the payment providers above; and the hosting, storage and network providers that run the service.

We share nothing with anyone else, unless the law requires it.

As long as the account or the workspace exists. Deleted data is gone from the service at once, and from backups as they are replaced.

You can delete a contact or a whole workspace. Its conversations, contacts, knowledge sources and keys go with it. Backups are cleared on their own schedule.

You can delete your account from the goya24 app (Profile → Delete account) or on the web (Profile → Delete account). Your name, email, photo, password, sessions and notification settings go at once, and so does any workspace you are the only member of. Replies you wrote in other people's workspaces stay there, as that business's record, without your account. A workspace you own that other people use has to be deleted, or handed to one of them, first.

Change your name and photo in Profile. Turn notifications off per event, per workspace or per phone. For a copy of your data, a correction, or anything else about it, write to support@goya24.com.

goya24 is for businesses and the people who work in them. It is not meant for children.

Everything travels encrypted (HTTPS). Passwords are kept only as hashes, and keys and secrets are encrypted at rest. If you find a security problem, write to security@goya24.com.

When this page changes, the date at the top changes with it.

For any question about data: support@goya24.com