Privacy Policy

Gosper is operated by 【TODO: legal entity name and address】 (“Gosper”, “we”). This policy explains what personal data we handle when you use gosper.ai, app.gosper.ai and the services built on them, why, who we share it with, and the choices you have.

We play two roles. For your own Gosper account we decide how your data is used (we are the “controller”). When a Shopify merchant uses Shopify AI Support on their store, we process their shoppers’ data on the merchant’s behalf and on their instructions (we are a “processor”); section 5 covers that.

1. What we collect

• Account. When you sign in we receive your email address and, if you provide them, your name and profile picture, plus an internal account ID.
• Your content. Workspaces, chats, instructions, files, apps and results you create, and what your agents produce and remember while working for you.
• Connected services. When you connect a service (for example Google, GitHub, Slack, Notion or Shopify), we store the access it grants so your agents can act on your behalf, and we handle the data your agents read or write through it.
• Usage and billing. A record of each credit charge: when, how much, what kind of work, and which task, agent or model it was for. Your plan, allowance and balance. If you buy something, payment is handled by our payment provider; we never see or store your full card details.
• Technical and diagnostic data. Request logs (such as IP address, browser type and the pages or endpoints used) kept by our hosting provider, and error reports when something fails (the error, where in our code it happened, the page path, and your account ID).
• Website cookies. See section 6.
• Messages to us. What you send through the contact form or by email.

2. How we use it

• To run the service: sign you in, store your work, and carry out what you ask your agents to do.
• To meter and bill usage, and to enforce plan allowances and limits.
• To keep the service secure and reliable: prevent abuse, and find and fix errors.
• To reply to you and to tell you about changes that affect your account.

We do not sell your personal data, and we do not use your content to train AI models.

3. AI models

To carry out a task, the relevant parts of your content are sent to an AI model provider. With the built-in model, that provider is one we choose, under terms that do not allow it to train on your data. If you add your own model provider or API key, your content goes to that provider under your own agreement with them.

4. Who we share it with

Only with service providers that help us run Gosper, and only as much as their job needs; each is bound by contract to protect the data and use it only on our behalf. They provide:

• hosting, storage, request logs and email delivery;
• sign-in;
• plan, balance and credit usage records;
• payments, when you buy a plan or credits;
• error monitoring;
• website analytics, only if you allow it (section 6);
• AI models, as described in section 3.

Business customers can ask us for the list of these providers (our sub-processors).

Services you connect receive data because you directed it; their own terms and privacy policies apply. We may also disclose data when the law requires it, or to protect the rights and safety of our users and of Gosper.

5. Shopify AI Support and shoppers’ data

Shopify AI Support processes the messages a shopper sends to a merchant’s support assistant, and the store information needed to answer them.

The merchant decides to use this service and is responsible for telling its shoppers about them and obtaining any consent the law requires. Shoppers should contact the merchant first; we will help the merchant respond. Merchants can ask us for our list of sub-processors and to be told at least 30 days before a new one starts handling this data, so they can object.

6. Cookies on our website

gosper.ai uses cookies it needs to work, such as the one that remembers your language and your cookie choices. Analytics and advertising tags (loaded through Google Tag Manager: Google Analytics, and Google Ads and Meta conversion measurement) run only if you allow them in the cookie banner. They help us see how the site is used and whether our ads work. You can change your choice at any time.

Change cookie settings

7. International transfers

Our providers process data in the United States, the European Union and other countries. Where the law requires it, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses.

8. How long we keep it

• Account data and content: while your account exists, and deleted within 30 days after you ask us to delete the account.
• Billing records: as long as tax and accounting law requires.
• Request logs and error reports: no longer than 90 days.
• Shopify AI Support conversations: deleted 7 days after the last message.

9. Your rights

Depending on where you live (for example under the GDPR, the UK GDPR, California law or China’s Personal Information Protection Law), you may ask to access, correct, export or delete your personal data, or object to or restrict how we use it. Email us at the address below; we will answer within 30 days. You may also complain to your data protection authority.

10. Security

Data is encrypted in transit, access to it is limited to what running the service requires, and the apps and agents you build run in isolated sandboxes. No system is perfectly secure; if a breach affects your data we will tell you as the law requires.

11. Children

Gosper is not for anyone under 18, and we do not knowingly collect children’s data.

12. Changes

We will post changes here and update the date above. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect.

13. Contact

Gosper.support@gmail.com