Privacy Policy

    Effective date: September 25, 2026. Last updated: October 3, 2026.

    This Privacy Policy describes how GoWithAgentic / GoWithAgentic.ai (“we”, “us”, or “our”), operated by GoWithAgentic (gowithagentic.ai), collects, uses, and shares information when you use our websites and services at https://gowithagentic.ai (the “Services”). Our audience is primarily in the United States and Canada.

    We do not sell personal information. We do not claim HIPAA coverage for the public marketing site or free tools.

    1. Who we are

    GoWithAgentic.ai is an AI business automation platform with a public marketing site, free browser-based tools at /tools, and authenticated product areas (dashboard / business portal). Hosting and deployment are provided via Vercel; application data and auth use Supabase.

    2. What we collect

    2.1 Information you provide

    • Contact form (homepage /#contact): name, email, subject, and message. Stored in our Supabase database (contact_queries) so we can respond.
    • Newsletter signup (footer): email address, sent to our email provider via Supabase edge functions (brevo-sync / brevo-event) when you subscribe.
    • Account / product use (when you register or sign in): account identifiers and usage data needed to operate the authenticated app (Supabase Auth). Details depend on the features you use.

    2.2 Free tools (browser-only inputs)

    Public tools under /tools (for example UTM builder, PII-in-prompt scanner, CRM hygiene checker, and other calculators) process the values you enter in your browser only. Tool inputs are not uploaded to GoWithAgentic servers for those tools. If you copy results elsewhere, that is under your control.

    2.3 Cookies, local storage, and similar technologies

    As of our 2026-09-25 tracker audit (refreshed 2026-10-01) of the public site:

    • Essential / functional: Cloudflare bot-management cookie __cf_bm; Lovable deploy cookie __dpl; language preference inlocalStorage (gowithagentic-language); first-party consent record (gwa_cookie_consent) after you make a choice.
    • Analytics (only with opt-in): Google Analytics 4 measurement ID G-9T7GKQ8BK7 via googletagmanager.com/gtag/js, which may set _ga / _ga_* cookies and send page-view / event data to Google.
    • Advertising: No Meta Pixel, LinkedIn Insight Tag, Google Ads tags, or similar advertising pixels were found on the public site at audit time. An “Advertising” category exists in our consent banner for future tags and stays off unless you opt in (and stays off if Global Privacy Control is enabled).
    • Fonts: Google Fonts loaded from fonts.googleapis.com / fonts.gstatic.com for site typography.
    • Not found: Google Tag Manager container, Microsoft Clarity, Hotjar, PostHog, or Plausible on the public marketing pages audited.

    Since that audit, the site has moved to Vercel for hosting.

    You can change non-essential choices anytime via or the footer link “Your Privacy Choices”.

    2.4 Automatic technical data

    Servers and CDNs may receive IP address, user agent, and request metadata as part of delivering the site. Client-side error logging may send error messages, URL, and user agent to our Supabase application_logs table when the browser reports an error.

    3. Purposes

    • Provide, secure, and improve the Services
    • Respond to contact and support requests
    • Send newsletter content you subscribe to
    • Measure aggregated site usage when Analytics is consented
    • Comply with law and enforce terms

    4. Sharing and service providers

    We share personal information with processors who help us operate the Services, including:

    • Supabase — database, auth, and edge functions
    • Vercel — hosting / deployment of the web application
    • Google — Analytics (if you opt in); Fonts CDN for typography
    • Brevo (via our edge functions) — newsletter / email sync when you subscribe
    • Cloudflare — CDN / security (as configured by hosting)

    We do not sell personal information. We do not share personal information for cross-context behavioral advertising unless you opt in to Advertising (none active at audit time).

    5. United States state privacy rights

    Depending on your state (including California under the CPRA and similar laws in other states), you may have rights to:

    • Know / access personal information we hold about you
    • Delete personal information
    • Correct inaccurate personal information
    • Opt out of sale or sharing of personal information and targeted advertising
    • Limit use of sensitive personal information where applicable
    • Non-discrimination for exercising rights

    We honor Global Privacy Control (GPC) signals as an opt-out of advertising / sale / sharing: when GPC is present, advertising stays denied.

    6. Canadian privacy rights (PIPEDA and Quebec Law 25)

    Residents of Canada (including Quebec) may have rights to:

    • Access personal information
    • Request correction of inaccurate information
    • Withdraw consent for optional processing (such as Analytics)

    Non-essential cookies and tags are blocked until you opt in, consistent with consent requirements under PIPEDA and Quebec’s Law 25 for optional tracking.

    7. Retention

    We retain personal information as follows:

    • Contact-form messages are kept for 24 months after the last message in that thread, then deleted or anonymized.
    • Newsletter email addresses are kept until the person unsubscribes, then for up to 30 days so the removal can finish.
    • Account data is kept while the account is open and for 24 months after it is closed, unless a longer period is required for a legal claim or a legal duty.
    • Server and security logs are kept for about 90 days.

    Consent preferences are stored for up to 12 months and then re-prompted.

    8. Security

    We use administrative, technical, and organizational measures appropriate to the nature of the data (including HTTPS and provider access controls). No method of transmission or storage is 100% secure.

    9. Children

    The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

    10. Cross-border transfers

    We and our providers (including Supabase, Google, Vercel/Cloudflare hosting, and Brevo) may process data in the United States and other countries. If you access the Services from Canada or elsewhere, your information may be transferred to and processed in the United States, where privacy laws may differ.

    11. How to make a privacy request

    To exercise privacy rights or ask a privacy-related question, submit a request through our contact form on GoWithAgentic.ai (include “Privacy request” in the subject). We do not publish a public privacy-officer email, phone number, or mailing address on this site; the contact form is the channel for privacy requests.

    12. Changes to this policy

    We may update this Privacy Policy from time to time. We will post the updated policy on this page and change the effective date above. Material changes may also be highlighted via the consent banner when the policy version changes (requiring a fresh choice).

    13. Contact

    Privacy requests: gowithagentic.ai/#contact only.