Privacy Policy

Who we are

Goose AI, Inc. (“Goose”, “we”, “us”) runs Goose, a workspace for sales teams that brings meetings, email, calendars and CRM records together.

Goose is a business service. Each account belongs to a workspace that a company sets up for its team.

For the data a workspace brings into Goose, the company that owns the workspace decides what to connect, and we process that data on its behalf. For account, billing and website data, we decide how it is used.

This policy also covers people who appear in a workspace’s data without using Goose, such as meeting participants and email contacts.

What we collect

We collect what the features you use need:

• Account details: your name, work email, profile photo and workspace role. You sign in with Google or GitHub, so we never see your password.
• Google data you connect: calendar events and attendees; Gmail messages, so Goose can find deal activity and draft replies; your Gmail signature; Google Drive documents; and contact names and photos. You or your admin choose which of these to connect.
• Other services you connect: Salesforce records, Slack messages in channels Goose is added to, and meeting notes or transcripts imported from Granola or Clari.
• Meetings you record with the Goose Mac app: the audio, which is saved on your Mac and uploaded for transcription, and the transcript.
• What Goose produces from your data: meeting summaries, notes, tasks, signals, drafts, research answers and a short description of your writing style that Goose uses to draft in your voice.
• Files and web pages you ask Goose to read.
• Usage and device data: pages viewed, features used, performance data, error reports, IP address and browser type.
• Billing details: your plan, billing contact and invoices. Card details go straight to Stripe and never reach our systems.
• What you send us: support requests, feedback and the details you enter in our sign-up form.

How we use it

We don’t sell personal data, and we don’t use it for advertising. We don’t make decisions about you that have legal or similarly significant effects.

We use your data to:

• provide Goose: show your meetings, deals and contacts, and produce summaries, signals, drafts and answers;
• keep Goose secure: sign you in, keep each workspace separate and investigate abuse;
• support you and fix problems you report;
• bill you for your plan and credits;
• improve Goose: learn which features are used and measure performance, never by training AI models on your content;
• send you service, security and billing notices, and product news you can opt out of;
• comply with the law and protect our rights.

AI processing

Goose uses AI models from outside providers to transcribe meetings, write summaries and drafts, answer questions and power search. We send a provider only the text or audio a task needs, and we send it from our servers. Your browser never talks to an AI provider.

We don’t train or fine-tune AI models on your data. Our language-model providers don’t train on your data under their commercial terms. We use our transcription providers only to turn audio into text.

AI output can be wrong. Check it before you rely on it or send it.

Google user data

Goose AI, Inc.’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.

You can remove Goose’s access at any time in Goose’s settings or in your Google Account. In practice:

• We use Google data only to provide and improve the Goose features you can see.
• Goose reads your calendar, and changes events only if you give it permission. It reads Gmail, and sends an email only when you choose to send it. It reads the Drive documents you connect.
• We don’t transfer Google data to advertising platforms, data brokers or resellers, and we don’t use it for advertising or to decide anyone’s creditworthiness.
• People at Goose don’t read your Google data, except with your permission, to investigate a security issue or abuse, to comply with the law, or in aggregated, anonymized form for our operations.
• We don’t use Google data to develop, improve or train general AI or machine-learning models.
• These rules also apply to anything we derive from Google data.

Sharing and subprocessors

We share data with service providers, called subprocessors, that run parts of Goose for us, including AI and transcription providers. They work under contract and only to provide the service. Customers can request our current subprocessor list at privacy@getgoose.ai.

We also share data:

• within your workspace, where your teammates and admins can see workspace data according to your sharing settings;
• with services you connect, such as Salesforce or Slack, when you ask Goose to send data there, under your own agreement with that service;
• with outside AI tools you connect to Goose, within the access you give them;
• when the law requires it, or to protect the rights and safety of our users, the public or Goose;
• in a merger, acquisition or sale of assets. For Google data, only with your prior consent.

How long we keep it

How long we keep each kind of data:

• Workspace data, including transcripts, notes, tasks, signals, drafts and Goose Brain: for as long as the workspace exists, until you or an admin deletes it.
• A deleted workspace: restorable for 30 days after the owner deletes it, then permanently deleted from our live systems. Copies can remain in our encrypted backups for longer.
• Meeting audio: the Mac app keeps your recordings, encrypted, until you delete them. Goose deletes the uploaded audio from its storage and from our transcription provider once transcription finishes. A copy can remain in our encrypted backups for longer.
• Email: Goose reads a message to find what matters for a deal, then removes the message text from processing. It keeps what it found, short quotes, drafts Goose wrote and, if Goose Brain is on, passages from external email threads matched to a deal or account.
• Credentials for connected services: until you disconnect the service or the workspace is deleted.
• Billing records: as long as tax and accounting law requires.
• Backups: data you delete can remain in our encrypted backups for longer than in our live systems.

Your rights

You can ask us to tell you whether we hold personal data about you and give you a copy, to correct it, to delete it, or to give it to you in a portable format.

California and some other US states give residents these rights and the right to opt out of the sale or sharing of personal data and of targeted advertising. We don’t do either. In the European Economic Area and the UK you can also object to or restrict our processing, and complain to your data protection authority. We give these rights to everyone, wherever you live, and we won’t treat you differently for using them.

Workspace owners can export all workspace data and delete the workspace in Settings. You can disconnect any service at any time. For anything else, email privacy@getgoose.ai. We may need to confirm your identity, and we respond within 45 days. If we turn down a request, you can appeal by replying to our answer.

If you belong to a customer’s workspace, we may pass your request to that company, because it controls the workspace’s data.

If you are not a Goose user

If you were in a meeting recorded with Goose, or you exchanged email with someone who uses Goose, your words or details may be in their workspace.

To have that data deleted, ask the Goose user or their company, or email privacy@getgoose.ai with the meeting date and the people involved. We will work with the workspace to delete it.

International transfers

Your workspace data is stored in the United States. If you use Goose from another country, your data is transferred to the US. Goose is not offered in the European Union during the beta.

Where the law requires a safeguard for a transfer, such as the European Commission’s Standard Contractual Clauses, we will agree it with you. Goose is not certified under the EU-U.S. Data Privacy Framework.

Security

We keep each workspace separate with database-level access rules, encrypt data in transit and at rest, and limit who at Goose can reach production systems. Our Security page, getgoose.ai/security, has the details. No system is perfectly secure.

Cookies and session replay

Goose uses cookies to keep you signed in. Our website counts page views without cookies. We don’t use advertising cookies or trackers, and we don’t sell or share personal data, so a Global Privacy Control signal needs no further action from us.

Session replay. When you send us a bug report or feedback from the web app, Goose includes a short replay of the moments before you sent it: page structure, clicks, scrolling and navigation. Before anything leaves your browser, every piece of text and every form input is replaced with placeholder characters, and images, video and other media are blocked, so a replay contains no meeting, email, deal, contact or other customer content. A replay is sent only when you send us a bug report or feedback; at all other times it stays in your browser and is discarded. Network requests are recorded without their contents. Replays are processed by our error-monitoring provider as our subprocessor, kept for that provider’s standard retention period, and used only by Goose staff to fix problems.

Children

Goose is a business service for adults. We don’t knowingly collect personal data from anyone under 16. If you think a child has given us personal data, contact us and we will delete it.

Changes to this policy

We will post changes here and update the date at the top. If a change is material, we will email workspace admins before it takes effect.

Contact

Goose AI, Inc.. Email privacy@getgoose.ai with any privacy question or request, and support@getgoose.ai with anything else.

Mailing address: to be published