1. Introduction

GoDotWebs ("we", "us", "our") respects your privacy. This Privacy Policy describes how we collect, use, store, and share personal data when you use godotwebs.com, the dashboard, browser extension, and related services (collectively, the "Service"). By using the Service, you acknowledge this Policy alongside our Terms of Service.

2. Who We Are

GoDotWebs operates the Service as a trade name. For privacy inquiries, contact us at info@godotwebs.com.

3. Information We Collect

Account information — email address, username, authentication credentials (stored via Supabase; passwords hashed), and Google account details if you sign in with Google.

Profile and application data — personal and professional information you store in profiles (e.g., name, contact details, employment history, skills, summaries) and custom simulation models you create.

Usage and subscription data — plan tier, output and simulation usage counts, billing period, subscription status, and Stripe customer/subscription identifiers. Payment card details are collected and processed directly by Stripe; we do not store full card numbers.

Extension and AI input data — form fields, page context, application text, and related content you submit through the browser extension or dashboard for auto-fill, prediction, or simulation features.

Communications — information you send via our contact form (name, email, optional phone, message).

Technical data — session cookies for authentication, IP address and browser/device information in server logs, and Turnstile verification tokens for fraud prevention.

4. How We Collect Information

• Directly from you (registration, dashboard, extension use, contact form)
• Automatically (session cookies, usage metering, server logs)
• From third parties you authorize (Google OAuth)
• From public URLs you include when generating profiles (we may fetch and extract text from those pages)

5. How We Use Your Information

• Provide, operate, and maintain the Service
• Authenticate you and manage your account
• Auto-fill forms, generate predictions, and run simulations
• Process subscriptions and enforce plan limits
• Send transactional emails (verification, password reset)
• Respond to contact inquiries
• Protect against abuse, fraud, and security incidents
• Improve and develop the Service

6. AI Processing

To deliver AI features, relevant portions of your input (profile data, form context, application content) are transmitted to third-party AI model providers for processing. These providers process data according to their own policies. AI outputs are generated automatically and may be inaccurate — you should review all content before submitting applications elsewhere.

7. Browser Extension

The extension accesses web page content and form fields on sites you actively use it on, solely to provide auto-fill and related features. Extension requests are authenticated with your account token and processed through our servers. You control when the extension runs.

8. How We Share Information

We do not sell your personal data. We share data only:

• With service providers who help us operate the Service (see Section 9)
• When required by law or to protect rights, safety, and security
• In connection with a merger, acquisition, or asset sale (with notice where practicable)
• With your direction or consent

9. Third-Party Services

The Service relies on:

• Supabase — authentication, database, hosting
• Stripe — payment processing
• Third-party AI model providers — AI inference
• Resend — transactional and contact emails
• Cloudflare Turnstile — bot protection
• Google — optional OAuth sign-in

Each provider may process data under its own terms and privacy policies. We encourage you to review them.

10. Cookies and Similar Technologies

We use essential cookies (primarily Supabase session cookies) to keep you signed in. We may also use third-party analytics or advertising cookies over time. Full details, including how to manage your preferences, are in our Cookie Policy.

11. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may delete profiles and your account; residual backups may persist for a limited period.

12. Data Security

We implement reasonable technical and organizational measures to protect your data. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

13. Your Rights and Choices

Depending on applicable law (including Hong Kong's Personal Data (Privacy) Ordinance), you may have rights to:

• Access and obtain a copy of your personal data
• Correct inaccurate data (via dashboard settings)
• Delete your account and associated data
• Withdraw consent where processing is consent-based
• Object to or restrict certain processing

To exercise these rights, contact info@godotwebs.com. We may need to verify your identity.

14. International Data Transfers

Our service providers may process data in countries outside Hong Kong (including the United States and the European Union). Where required, we take steps to ensure appropriate safeguards for cross-border transfers.

15. Children

The Service is not intended for users under 18. We do not knowingly collect personal data from children. Contact us if you believe a child has provided data.

16. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date reflects the latest version. Material changes will be posted on this page. Continued use after changes constitutes acknowledgment.

17. Contact

Questions about this Privacy Policy:

GoDotWebs
Email: info@godotwebs.com