Privacy Policy

GoaTech ("we", "us", "our") provides a customer relationship management platform and related services. We act as a data controller for the account information you provide directly to us, and as a data processor for the records you store inside the CRM about your own contacts.

• Account data: name, email, password hash, organisation, billing details.
• Customer records you upload: contacts, companies, deals, communications and any files attached.
• Usage data: pages visited, features used, device and browser information, and approximate location derived from your IP address.
• Cookies: session cookies for authentication and limited analytics cookies that we describe in our cookie notice.

We process personal data to:

• Provide, maintain and secure the CRM and supporting services.
• Authenticate users and prevent fraud or abuse.
• Send service-related communications such as security alerts and product updates.
• Improve features through aggregated, de-identified usage analytics.
• Comply with applicable legal obligations.

We rely on contract performance to deliver the service you've signed up for, legitimate interests for product improvement and security, legal obligation for tax and accounting records, and consent for optional marketing communications.

We share data only with sub-processors who help us run the service — including cloud hosting, email delivery and payment providers — under written agreements that mirror the protections in this policy. We do not sell your personal data.

Account data is kept for as long as your account is active and for up to 90 days after closure to allow recovery. Backups are rotated within 35 days. You can request earlier deletion at any time.

You have the right to access, rectify, port, restrict or erase your personal data, and to object to certain processing. Contact us at privacy@goatech.co.uk to exercise these rights.

GoaTech, United Kingdom. Questions? Email privacy@goatech.co.uk.