Privacy policy
A specific description of what data is collected, how it is used, how long it is kept and who it is shared with. Written for the product this policy actually covers - not a template.
Scope of this policy
This policy explains how personal data and workspace content are handled by the Goplustive product. It covers three distinct categories: information you provide when creating a workspace, content indexed from sources you connect, and query and usage data generated when the search engine is used.
The policy does not cover websites, tools or services operated by third parties, even when they are linked from within the product.
Data we collect
Account information: name, work email, company name, role, team size, industry and the sources you intend to connect. These fields are collected on the signup and connect forms.
Indexed workspace content: messages, documents and notes retrieved from the sources you connect (for example Slack, email, Drive, CRM and wikis), used only to answer queries from members of your workspace.
Query and usage data: the questions asked within your workspace, which sources were cited in the answer, and the identity of the user who asked.
Technical data: standard request metadata such as IP address, user agent and timestamps required to operate a secure web application.
How we use it
To provision and operate your workspace, including indexing content from connected sources and answering queries from workspace members.
To provide security, prevent abuse, and honour permission boundaries inherited from each connected source.
To surface analytics inside your workspace, such as most-asked questions and where citations came from.
To communicate about your workspace, including login credentials after signup and material product or security updates.
Legal basis
Processing is based on the contractual necessity of delivering the product to your workspace, on legitimate interests in operating a secure and effective service, and on your consent where explicitly requested.
Retention
Indexed workspace content is retained for the life of the workspace and updated as source content changes. When a source is disconnected, its content is removed from the index within 30 days.
Query logs are retained for 90 days by default and configurable up to 24 months on Enterprise engagements, or shorter on request.
When a workspace is closed, indexed content and query logs are decommissioned within 30 days.
Security
Data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256. Access to production systems is restricted, logged and reviewed. See the Security page for more detail.
International transfers
Primary hosting is in AP-South and EU-West regions. Where personal data is transferred across regions, standard contractual clauses or equivalent mechanisms are used.
Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete or restrict processing of your personal data, and to data portability. Requests can be made through the connect form.
How to reach us
For privacy questions, use the connect form on the Contact page. Requests are routed to the team responsible for handling them.