Privacy Policy
1. Introduction
This Privacy Policy describes how Golden Tech Solutions LLC (“Golden Tech,” “we,” “us,” or “our”) collects, uses, and protects information in connection with GoldenIris, our content operating system (“the Service”). By using GoldenIris, you agree to this policy.
This policy applies to all users of GoldenIris, including individuals and organizations using the Service to create, manage, and publish content.
2. Who We Are
Golden Tech Solutions LLC is a software company headquartered in the United States. GoldenIris is our content operations platform. For privacy inquiries, contact us at [email protected].
3. What Data We Collect
Account Data
Name, email address, password (bcrypt-hashed — we never store plain text passwords), and account preferences.
Content Data
All content you create, capture, or import into GoldenIris — including captures, drafts, published content, voice profile samples, ICP definitions, and knowledge base items. All content data is encrypted at rest using AES-256-GCM with per-user encryption keys.
AI Provider API Keys
If you supply your own API keys for OpenAI, Anthropic, Google, or other providers, those keys are encrypted at rest using per-user envelope encryption. They are never stored in plain text, never appear in logs, and are only used for the specific API calls you initiate.
Usage Data
Log data including IP addresses, browser type, pages visited, and actions taken within the Service. Used to operate and improve the Service. Not sold to third parties.
Payment Data
Payment processing is handled by Stripe. We receive a billing token and subscription status from Stripe. We do not store or have access to your full card number, CVV, or banking details.
4. How We Use Your Data
- To provide, operate, and maintain the Service
- To authenticate you and manage your account
- To process payments through Stripe
- To send transactional emails (account, billing, notifications) through SendGrid
- To improve the Service through aggregated, anonymized usage analysis
- To comply with legal obligations
We do not use your content to train AI models. Your captures, drafts, and knowledge base items are never used to train or fine-tune any AI system, including the models available through GoldenIris.
5. Encryption and Security
GoldenIris implements a multi-layer encryption architecture:
- AES-256-GCM encryption on all content data at rest
- Per-user Data Encryption Keys (DEKs) — each user's data is encrypted with their own unique key
- Envelope encryption — user keys are encrypted with a separate master key, isolated from the data layer
- BYOK (Bring Your Own Key) — enterprise users may supply their own master encryption key
- TLS 1.2+ on all connections
6. Data Retention and Deletion
We retain your data for as long as your account is active. You may request deletion of your account at any time.
Crypto shredding on deletion: When your account is deleted, your Data Encryption Key is destroyed. Without the key, all of your encrypted content is mathematically unrecoverable — not merely marked for deletion, but permanently inaccessible.
We may retain aggregated, anonymized usage statistics (not attributable to any individual) after account deletion.
7. Third-Party Services and Sub-Processors
We share data with the following categories of third parties to operate the Service. A full list is available at goldeniris.ai/sub-processors.
- AI Providers (Anthropic, OpenAI, Google) — receive prompt content when you invoke AI generation. Only what you explicitly submit is transmitted.
- Stripe — payment processing
- SendGrid — transactional email
- Infrastructure Provider — hosting and database services
We do not sell your personal data to any third party.
8. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access — request a copy of the data we hold about you
- Correction — request correction of inaccurate data
- Deletion — request deletion of your account and associated data
- Portability — export your data in JSON or CSV format via Settings → Data → Export
- Objection — object to certain types of processing
To exercise any of these rights, contact [email protected].
9. Cookies
See our Cookie Policy for details on how we use cookies.
10. Contact
For privacy questions or requests: [email protected]
Golden Tech Solutions LLC • goldentechsolutions.com