Privacy Policy

1. Who We Are

AI GO PLAN DO LLC (doing business as "aiGoPlanDo"; "we," "us," or "our") operates the aiGoPlanDo platform and related services accessible at aigoplando.com and app.aigoplando.com. We act as the data controller for the personal information described in this policy.

For questions about this Privacy Policy or your personal data, contact our privacy team at privacy@aigoplando.com.

2. Information We Collect

2.1 Information You Provide Directly

• Account information — name, email address, password (stored hashed), and profile preferences when you register.
• Business profile — business name, industry, and other details you provide when setting up your business profile within the platform.
• User Content — appointments, to-do tasks, journal notes, business plans, application specifications, and any other content you create within the Service.
• Communications — messages you send to our support team or through the in-app contact form.
• Payment information — billing name and address are collected by our third-party payment provider when you purchase a subscription. aiGoPlanDo does not receive or store your full payment card numbers or bank account details; the payment provider handles all payment data under its own privacy policy, which is linked at checkout.

2.2 Information We Collect Automatically

• Usage data — pages visited, features used, timestamps, session duration, and in-app actions within the platform.
• Device and browser data — IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Log data — server logs recording requests to our API, error events, and performance metrics.
• Cookies and similar technologies — described in Section 6 below.

2.3 Information from Third-Party Integrations

If you connect Google or Microsoft 365 accounts through our PIM Sync feature, we access and synchronize the following data on your behalf:

• Google integration — calendar events (Google Calendar), tasks (Google Tasks), and files you designate for sync (Google Drive).
• Microsoft 365 integration — calendar events (Outlook Calendar), tasks (Microsoft To Do), and files you designate for sync (OneDrive).

This data is accessed solely to provide the sync feature you enable and is not used for any other purpose. You may disconnect these integrations at any time from your account settings, at which point we will cease accessing that data. The data synced from these providers is governed both by this Privacy Policy and by Google's and Microsoft's respective privacy policies.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide the Service — operating, maintaining, and improving the platform; processing your subscriptions; synchronizing your data; delivering AI-generated planning and automation features.
• To personalize your experience — tailoring AI outputs, recommendations, and workflows to your business profile and usage patterns.
• To communicate with you — sending transactional emails (receipts, password resets, account notices), service announcements, and, with your consent, product updates and promotional messages.
• To provide customer support — responding to inquiries and troubleshooting issues.
• To ensure security and prevent fraud — monitoring for unauthorized access, abuse, and violations of our Terms of Service.
• To comply with legal obligations — responding to lawful requests from authorities and meeting our legal and regulatory obligations.
• To improve the Service — analyzing aggregated, de-identified usage data to understand how the platform is used and where it can be improved. We do not use your identifiable User Content to train AI models without your explicit consent.

4. Legal Bases for Processing (EEA / UK Users)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data on the following legal bases:

• Performance of a contract — processing necessary to provide the Service you subscribed to (Sections 2.1, 3).
• Legitimate interests — improving the Service, preventing fraud, and ensuring security, where our interests do not override your rights.
• Consent — sending marketing communications and processing third-party integration data. You may withdraw consent at any time.
• Legal obligation — processing required to comply with applicable laws.

5. How We Share Your Information

We do not sell your personal information. We share information only as described below:

• Payment processing — your billing name, email, and address are shared with our third-party payment provider to process your subscription payments and handle applicable tax compliance. That provider is an independent data controller for payment information and is identified to you at checkout.
• Cloud infrastructure providers — we use Amazon Web Services (AWS) to host the platform. Your data is stored and processed on AWS infrastructure, subject to AWS's security and privacy commitments.
• AI model providers — when you use AI-powered features, your inputs may be sent to AI model providers (currently Anthropic) solely to generate the requested output. We use API-based access under data processing agreements that prohibit training on your data.
• Analytics and monitoring — we may use third-party tools to monitor Service performance and reliability. These tools receive aggregated, de-identified technical data, not your User Content.
• Legal requirements — we may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.
• Business transfers — in the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity, subject to equivalent privacy protections.

We require all third-party service providers who process your personal data on our behalf to maintain appropriate security measures and to use your data only for the purposes we specify.

6. Cookies and Tracking Technologies

We use cookies and similar technologies on our marketing website (aigoplando.com). The application (app.aigoplando.com) uses session tokens and local storage to maintain your authenticated session.

• Strictly necessary cookies — required for the Service to function (e.g., authentication session). Cannot be disabled.
• Analytics cookies — help us understand how visitors interact with our marketing website (page views, referral sources). You may opt out via your browser settings.

You can control cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Service.

7. Data Retention

We retain your account data and User Content for as long as your account is active. When you cancel your subscription, your data is retained in a read-only state for 30 days to allow you to export it. After 30 days, your User Content and personal data are deleted from our active systems, except where we are required to retain certain records for legal, tax, or compliance purposes (typically up to 7 years for financial records).

De-identified, aggregated analytics data may be retained indefinitely as it cannot be used to identify you.

8. Data Security

We implement commercially reasonable technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/HTTPS) and at rest (AES-256);
• Row-level security (RLS) in our database, ensuring tenant data isolation;
• Role-based access controls limiting employee access to customer data;
• Regular security reviews and infrastructure monitoring;
• Confidentiality agreements with employees and contractors who access customer data.

No method of electronic transmission or storage is 100% secure. If you discover a security vulnerability, please report it to security@aigoplando.com.

9. International Data Transfers

aiGoPlanDo is based in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. The United States may not provide the same level of data protection as your home jurisdiction.

For users in the EEA or UK, we rely on appropriate transfer mechanisms (such as Standard Contractual Clauses) when transferring personal data to the United States or other countries, to the extent required by applicable law.

10. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information. We honor these rights for all users regardless of location.

California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• Right to Know — the categories and specific pieces of personal information we collect, use, and disclose.
• Right to Delete — request deletion of your personal information, subject to exceptions.
• Right to Correct — request correction of inaccurate personal information.
• Right to Opt Out of Sale / Sharing — we do not sell or share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination — we will not discriminate against you for exercising your privacy rights.

To exercise any of your rights, please email privacy@aigoplando.com with the subject line "Privacy Rights Request." We will respond within 45 days (or as required by applicable law). We may need to verify your identity before fulfilling your request.

EEA and UK users also have the right to lodge a complaint with their local data protection authority.

11. Children's Privacy

The Service is not directed to children under the age of 13 (or 16 in the EEA/UK, where applicable), and we do not knowingly collect personal information from children under these ages. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@aigoplando.com and we will take steps to delete that information.

12. Marketing Communications

We may send you promotional emails about new features, offers, and updates if you have opted in or if you are an existing customer. You may opt out of marketing emails at any time by clicking the "Unsubscribe" link in any marketing email or by contacting us at privacy@aigoplando.com. Opting out of marketing emails does not affect transactional service communications (receipts, account notices).

13. Links to Third-Party Sites

Our marketing website may contain links to third-party websites and services. This Privacy Policy applies only to aiGoPlanDo. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies before providing any personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a prominent notice within the Service at least 30 days before the new policy takes effect. The "Last Updated" date at the top of this page indicates when this policy was most recently revised. Your continued use of the Service after the effective date constitutes your acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

• Entity: AI GO PLAN DO LLC
• Email: privacy@aigoplando.com
• General contact: aigoplando.com/contact

We aim to respond to all privacy inquiries within 30 days.