Privacy Policy
Last updated: July 2026
1. Who we are
GoorPivot operates the service at goorpivot.com. For privacy questions contact us at hello@goorpivot.com.
2. Data we collect
Account data — name, email address, and a securely hashed password collected when you sign up.
Idea content — the business idea text you submit for analysis, along with generated reports and validation data.
Usage data — credit consumption, analysis timestamps, and feature interactions used to operate and improve the Service.
Billing data — subscription status and payment history managed by Stripe. We never store card numbers; Stripe handles payment processing.
Email address — used to send transactional emails (analysis complete, credit alerts, onboarding nudges) via our self-hosted email infrastructure.
3. How we use your data
- — Provide and operate the Service
- — Process your analyses using AI models (Anthropic)
- — Send transactional and onboarding emails
- — Manage your subscription and credits
- — Detect and prevent abuse
We do not sell your data. We do not use your idea content to train AI models.
Legal bases (RGPD art. 6): We process your data on the basis of (a) performance of contract — to deliver the Service you subscribed to; (b) legitimate interest — to detect abuse and improve the Service; (c) consent — for analytics cookies where you have opted in.
4. Sub-processors
5. Data transfers
Your data is processed by sub-processors in the United States and the European Union. Where required by GDPR, transfers outside the EEA are covered by Standard Contractual Clauses (SCCs) or an adequacy decision. By using the Service you acknowledge these transfers.
6. Retention
We retain your data for as long as your account is active. If you delete your account, your idea content and reports are permanently deleted within 30 days. Billing records are retained for 7 years as required by law.
7. Your rights (GDPR / RGPD)
If you are in the EEA or UK you have the right to access, correct, export, or delete your personal data. You may also object to processing or request restriction. To exercise any right email hello@goorpivot.com. We respond within 30 days.
If you are located in France, the competent supervisory authority is the Commission Nationale de l'Informatique et des Libertés (CNIL). You may lodge a complaint directly at cnil.fr/fr/plaintes. In other EEA countries, contact your local data protection authority.
8. Cookies
We use essential cookies required for authentication and, where you have consented, analytics cookies to help us understand how the product is used. You can review the full cookie inventory and manage your preferences on our Cookie Policy page.
9. Changes
Material changes to this policy will be notified by email at least 14 days before they take effect.
10. French law
This Privacy Policy is also governed by the French Loi Informatique et Libertés (as amended by Ordonnance n°2018-1125 of 12 December 2018 implementing GDPR into French law). We process personal data in accordance with both GDPR and its French implementing legislation.