# Privacy Policy

Effective from 19 October 2026.

## 1. Who is responsible for your data

Your data is controlled by Innolex Corp. s.r.o., Budovcova 188/1, Žižkov, 130 00 Praha 3, Czech Republic, company ID (IČO) 03885780. The company is in the EU, so your data is protected by the EU General Data Protection Regulation (GDPR) wherever you live. Questions about data: support@talktogoats.com.

## 2. What we collect

- **Account.** Email and password. The password is stored in protected form; we cannot see it. If you sign in with Google, Google gives us your email, name and profile photo. If you subscribed without signing in, your account is created for the email you entered at Stripe checkout, without a password for now: you can set one in your account. Your account also keeps where you came from before you signed up: a site or an ad link.
- **Emails.** If you ticked “Send me emails about discounts” when you signed up, we keep the date of your consent, which emails we sent and when, and the date you unsubscribed, if you do. Your account also keeps the time of your first visit: the first-month discount runs from it, even if you pay in another browser.
- **Sittings.** Your questions, the advisors at the table, their answers, debates and summaries.
- **Question without an account.** If a legend answers you before you sign in, the text of your question goes to Anthropic only to write the answer. We do not store the question. The answer is kept for one day in an encrypted `ttg_answer` cookie in your browser, so you can read all of it after you subscribe. Once the chat has shown it, the cookie is deleted. The answer is not kept on our server. Site statistics only record that an answer was given and which legend gave it. If you go to checkout with a question, the question and the legends' names are part of the address Stripe sends you back to after payment, so the chat opens with them. Stripe keeps that address too.
- **Council memory.** What you told about yourself in your questions: your name, what you do, your circumstances, your goals. You can see and erase it in your cabinet. The memory does not record health, sex life, religion or politics.
- **Payments.** Your plan, payment amounts and dates, discounts, refunds, subscription status, the country you subscribed from, and your Stripe customer, subscription and invoice numbers. Only Stripe receives your card details.
- **Technical data.** IP address, device and browser type, country (we use it to pick the site language and to show the cookie banner), error logs.
- **Site statistics.** Which pages are opened and what is clicked on them: for example, which legend, plan or ready-made question. Also your country, device type and where you came from: a site or an ad link. We set no cookies for this and do not store your IP address. To count visitors, your IP address and browser are turned into a code that changes every day, so visits on different days cannot be linked. The texts of your questions never go into statistics. Sometimes we compare two versions of a page: half of visitors see one, half see the other. The version is picked by the same daily code; nothing else about you is stored for it.
- **Cookies.** See section 8.

We do not ask for your passport, phone number or address.

## 3. Why we use it

- To run the service: sign-in, advisors' answers, sitting history, memory, question limits. Legal basis under the GDPR: performing our contract with you.
- To take payments and keep the records the law requires. Basis: contract and legal obligations.
- To protect the service from abuse and fix errors. Basis: our legitimate interest.
- To understand how the site works and which ads bring customers: our site statistics and anonymous statistics from Vercel Analytics. When you sign up, we store in your account the source you came from that day or, if there is none, the source from the `ttg_src` cookie from the last 30 days (section 8). When you subscribe, we store with the subscription your country and the source you came from that day. If there is none, or you came from one of our emails, we store the source from your account. Basis: our legitimate interest.
- To show ads to people who may be interested: Meta Pixel tells Meta about site visits and purchases. In the EU and the UK, only with your consent.
- To send a password reset email when you ask for one. Basis: performing our contract with you.
- To confirm your sign-up and each payment by email and, if your account was created at checkout, to send you a sign-in link. Basis: performing our contract with you.
- To remind you about an unfinished subscription and when your discount ends, if you agreed to it. Basis: your consent. You can unsubscribe with the link in any email.

We do not sell your data.

## 4. Who we share it with

Your data is processed by the services we work with:

- **Supabase:** database, sign-in and site statistics. The database is in Frankfurt, Germany.
- **Vercel:** site hosting and anonymous statistics.
- **Anthropic (Claude) and Groq:** write the advisors' answers, summaries and council memory. They receive the texts of sittings and questions asked without an account, and, for answers, your first name and council memory. They do not receive your email. When a question needs fresh facts, Anthropic searches the web. The search query is written without private people's names, emails or phone numbers.
- **Stripe:** payments.
- **Meta:** advertising through Meta Pixel.
- **Google:** sign-in with Google, if you chose it.
- **Resend:** sending emails: password resets, sign-up and payment emails, sign-in links and, with your consent, reminders.

We share data with authorities only when the law requires it.

## 5. International transfers

The database is in the EU, in Frankfurt. Some services operate in the United States: Vercel, Anthropic, Groq, Stripe, Meta, Google and Resend. When data is transferred to the US, it is protected by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

## 6. How long we keep data

- Account, sittings and memory: until you delete them or delete your account. Deleted data disappears from backups within 30 days.
- Public question pages: until the page is taken down. They are not linked to accounts.
- The fact-search cache is kept for about an hour and is not linked to an account.
- Payment records: as long as tax and accounting rules require.
- Site statistics: 90 days. After that only daily totals remain, without the visitor code.
- Email consent and the email log: while your account exists. After you unsubscribe, emails stop, and the unsubscribe date stays so we never email you again.
- Technical logs: for a short time, for security and debugging.

## 7. Your rights

You can:

- find out what data we have about you and get a copy;
- correct inaccurate data;
- delete your account and data with the "Delete account" button in your cabinet;
- erase the council memory in your cabinet;
- withdraw consent to advertising cookies with the "Cookie settings" link at the bottom of the site;
- unsubscribe from emails with the link in any email;
- object to processing.

Write to support@talktogoats.com; we reply within a month. You can also complain to the Czech data protection authority (Úřad pro ochranu osobních údajů) or to the data protection authority of your country.

## 8. Cookies

- **Necessary.** Sign-in (Supabase), site language (`locale` and `locale_set`, one year), the discount timer (`ttg_offer`, up to 400 days), a legend’s answer before you subscribe (`ttg_answer`, one day), a checkout code (`ttg_pay`, one day: after payment it lets only the browser where checkout started into the new account) and your banner choice (`ttg_consent`, 6 months). The site does not work as intended without them, so we do not ask consent for them.
- **Statistics.** Our site statistics, Vercel Analytics and Speed Insights set no cookies and do not recognise you on other sites.
- **Advertising.** Meta Pixel sets the `_fbp` cookie and sends Meta data about visits and purchases. In the EU and the UK it only turns on after you press "Accept" in the banner. In other countries it works right away. You can opt out with the "Cookie settings" link at the bottom of the site or in your browser settings.
- **Where you came from.** If you came from an ad link, a search engine or another site, the `ttg_src` cookie remembers the source for 30 days: the site, campaign and ad, not you. When you sign up, the source is saved in your account. This tells us which ads work. Same rule as Meta Pixel: in the EU and the UK the cookie is set only after you click “Accept”, in other countries right away. You can opt out with the “Cookie settings” link at the bottom of the site.

## 9. Age

The service is only for people aged 18 and over. If you learn that someone under 18 has created an account, write to us and we will delete it.

## 10. Security

Connections to the site are encrypted. Each user sees only their own sittings: the database itself enforces this.

## 11. Changes to this policy

We will announce significant changes on the site or by email.

## 12. Contact

support@talktogoats.com. Innolex Corp. s.r.o., Budovcova 188/1, Žižkov, 130 00 Praha 3, Czech Republic, company ID (IČO) 03885780.

---

Page on the site: [https://talktogoats.com/privacy](https://talktogoats.com/privacy) · [llms.txt](https://talktogoats.com/llms.txt)