Goa ← Back to Goa

Legal

Privacy Policy

Last updated: 4 July 2026

Draft - pending legal review. This is a plain-language scaffold prepared for Goa's review and should be confirmed by counsel before go-live. It is not legal advice. Items in [brackets] need to be filled in.

Who we are

Goa ("Goa", "we", "us") provides an AI video studio at app.getgoa.io and this marketing site at getgoa.io. The data controller is [legal entity name, registered address]. For any privacy question, email support@getgoa.io.

What we collect and why

We keep data collection to the minimum needed to run an invite-only early-access product.

  • Account details (Google sign-in). When you start creating, you sign in with Google. Google shares your email address, name, and profile picture with us to create and identify your account. We do not receive your Google password. Legal basis: performance of a contract (providing the service you request).
  • Product analytics. With your consent, we use PostHog (EU-hosted) to understand which plans and pages resonate - for example, page views and which plan buttons are clicked. Analytics cookies are set only after you accept the cookie banner. Legal basis: consent. You can decline and still use the site.
  • Support messages. If you email us, we keep your message and contact details to reply and improve the product. Legal basis: legitimate interest.

We do not sell your data, run third-party ad tracking, or use your information to train models without a separate, clearly disclosed agreement.

Cookies

The site sets no analytics or tracking cookies until you accept the banner. If you accept, PostHog stores a first-party identifier (scoped to .getgoa.io) so your visit can be understood across our marketing site and app. If you decline, no analytics cookie is stored. You can clear cookies or change your choice at any time by clearing site data in your browser.

Who we share with

  • Google - authentication (sign-in).
  • PostHog - product analytics, EU-hosted, only with your consent.
  • Infrastructure providers [hosting / email provider names] - to run the service.

We may disclose information if required by law. If we ever transfer data outside your region, we rely on appropriate safeguards [e.g. Standard Contractual Clauses].

How long we keep it

We retain your account details while your account is active and for a reasonable period afterwards, then delete or anonymise them. Because access is invite-only, sign-ups are held on our access list until we onboard you; you can ask us to remove you at any time. Analytics data is retained per PostHog's retention settings [state period, e.g. 12 months].

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent for analytics. To exercise any of these, email support@getgoa.io and we will respond within the time your law requires. You may also complain to your local data-protection authority.

Changes

We will update this policy as the product evolves and note the date at the top. Material changes will be communicated before they take effect.

Contact

Questions about privacy? Email support@getgoa.io.

Terms of Service · Back to Goa