Privacy Policy
Last updated: February 2025
Summary: We collect minimal data necessary to provide the service. Your content belongs to you. We do not sell your data to third parties.
1. Data We Collect
Account Information
When you create an account, we collect:
- Email address
- Display name (optional)
- Authentication tokens (managed by our OAuth2 provider)
Content Data
When you use the service, we store:
- Documents and text content you upload
- Vector embeddings generated from your content
- Metadata associated with your collections and documents
Usage Data
We automatically collect:
- API request logs (endpoints accessed, timestamps)
- Error logs for debugging purposes
- Quota usage statistics
2. How We Use Your Data
| Data Type | Purpose | Retention |
|---|---|---|
| Account info | Authentication, communication | Until account deletion |
| Content data | Provide search functionality | Until you delete it |
| Usage logs | Service improvement, debugging | 90 days |
| Quota stats | Billing, plan enforcement | Until account deletion |
3. Data Sharing
We do not sell your personal data. We may share data with:
- Infrastructure providers: For hosting and storage (data processing agreements in place)
- Authentication provider: Our OAuth2 server for identity management
- Legal requirements: When required by law or to protect our rights
4. Data Security
We implement industry-standard security measures:
- TLS encryption for all data in transit
- Encrypted storage for sensitive data
- Multi-tenant isolation at the database level
- OAuth2 with PKCE for authentication
- Regular security audits
5. Your Rights
You have the right to:
- Access: Request a copy of your data
- Rectification: Correct inaccurate data
- Erasure: Delete your account and data
- Portability: Export your data in a standard format
- Objection: Object to certain data processing
To exercise these rights, contact us at privacy@goabonga.com.
6. Cookies
We use essential cookies for:
- Authentication session management
- Active tenant/organization selection
- CSRF protection
We do not use tracking or advertising cookies.
7. International Transfers
Your data may be processed in countries where our infrastructure is located. We ensure appropriate safeguards are in place for any international data transfers.
8. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or through the service interface.
9. Contact Us
For privacy-related questions or concerns:
Email: privacy@goabonga.com