Privacy Policy - Gost
Legal

Privacy Policy

Last updated: October 23, 2025

Your privacy matters to us

We're committed to protecting your personal information and being transparent about how we collect, use, and share your data.

1 Overview

Gost ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI agent template platform and related services (collectively, the "Service").

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use the Service.

2 Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us, including:

  • Account Information: Name, email address, password, and company information when you create an account
  • Payment Information: Billing address and payment method details (processed securely through our payment processor)
  • Content and Files: Agent templates, configurations, prompts, and any data you upload or create within the Service
  • Communications: Messages you send to us, including customer support inquiries and feedback

2.2 Information Collected Automatically

When you use the Service, we automatically collect certain information, including:

  • Usage Data: Pages visited, features used, time spent on pages, and interaction with our Service
  • Device Information: IP address, browser type, operating system, device identifiers, and mobile network information
  • Log Data: Server logs, error reports, and system performance data
  • Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar technologies

2.3 Information from Third Parties

We may receive information about you from third-party services you connect to our platform, such as Google Drive, Slack, Notion, or GitHub, in accordance with their authorization procedures.

3 How We Use Your Information

We use the information we collect for the following purposes:

  • Provide and maintain the Service: Create and manage your account, process transactions, and deliver the features you request
  • Improve and optimize: Analyze usage patterns, troubleshoot issues, and enhance the Service's performance and features
  • Communicate with you: Send service announcements, technical notices, updates, security alerts, and support messages
  • Marketing: With your consent, send promotional materials, newsletters, and information about new features (you can opt out anytime)
  • Security and fraud prevention: Detect, prevent, and address security incidents, fraud, and illegal activities
  • Legal compliance: Comply with legal obligations and enforce our terms of service

Important: Model Training

We do not use your content, prompts, or agent configurations to train AI models. Your data remains yours and is never used for model improvement.

4 Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

  • Service Providers: With third-party vendors who perform services on our behalf (hosting, payment processing, analytics) under strict confidentiality agreements
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users
  • Legal Requirements: When required by law, legal process, or to protect rights, property, or safety
  • With Your Consent: When you explicitly authorize us to share information with third parties

5 Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption: Data encrypted in transit using TLS/SSL and at rest using AES-256
  • Access Controls: Role-based access controls and multi-factor authentication
  • Regular Audits: Security assessments, penetration testing, and compliance audits
  • Employee Training: Security awareness training for all personnel with access to data
  • SOC 2 Type II Certified: Independently audited for security controls and compliance

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6 Data Retention

We retain your information for as long as necessary to:

  • Provide you with the Service and fulfill the purposes described in this policy
  • Comply with legal obligations (e.g., tax, accounting requirements)
  • Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes.

7 Your Rights and Choices

You have the following rights regarding your personal information:

Access and Portability

Request a copy of your personal information in a structured, commonly used format.

Correction

Update or correct inaccurate or incomplete information.

Deletion

Request deletion of your personal information, subject to legal obligations.

Opt-Out of Marketing

Unsubscribe from promotional emails using the link in any marketing message.

Object to Processing

Object to certain processing of your information where legally permitted.

To exercise these rights, contact us at privacy@gost.com. We will respond to your request within 30 days.

8 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information and improve our Service:

  • Essential Cookies: Required for the Service to function properly (authentication, security)
  • Analytics Cookies: Help us understand how users interact with the Service
  • Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Note that disabling certain cookies may limit functionality.

9 International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your jurisdiction.

We ensure appropriate safeguards are in place for international transfers, including:

  • Standard Contractual Clauses approved by the European Commission
  • Compliance with applicable data protection frameworks

10 Children's Privacy

Our Service is not intended for children under 13 years of age (or 16 in the European Economic Area). We do not knowingly collect personal information from children.

If you believe we have collected information from a child, please contact us immediately at privacy@gost.com so we can delete it.

11 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

  • Update the "Last updated" date at the top of this policy
  • Notify you via email or a prominent notice in our Service for material changes
  • Obtain your consent where required by law

Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

12 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Mailing Address

Gost, Inc.
123 Innovation Drive
San Francisco, CA 94105
United States

Data Protection Officer: For EU/EEA inquiries, contact our Data Protection Officer at dpo@gost.com