Privacy Policy

Goleya is operated by ASKLEYA GROUP LTD (“Goleya”, “we”, “us”), 128 City Road, London, EC1V 2NX, United Kingdom. We are the data controller for the personal data described here. This policy explains what data we collect when you use our website (https://www.goleya.com) and our app (https://app.goleya.com), how we use it and the choices you have.

Data we collect

• Account data: your name, email address and a secure hash of your password.
• Organization data: your organization name, its members and their roles.
• Connected accounts: access tokens for services you connect, such as Gmail, Google Calendar and Google Sheets. Tokens are encrypted.
• Automation data: the automations you set up, their settings, and records of each run.
• Usage and billing data: how many runs and AI credits you use, your plan and invoices.
• Technical data: IP address, browser type and logs we need to keep the service secure and working.

How we use your data

• To run the automations you set up and show you their results.
• To operate, secure and improve the service, and to stop abuse.
• To send you account emails, such as invites, alerts and answers to support messages.
• To bill you and enforce the limits of your plan.

We do not sell your personal data, and we do not use it for advertising.

Google user data

When you connect a Google account, Goleya asks only for the permissions an automation needs, such as reading or sending Gmail messages, reading Google Calendar events or adding rows to Google Sheets.

• We use Google user data only to provide the automations you have switched on, and only while they are on.
• We do not use Google user data for advertising, and we do not sell it or share it with others, except as needed to run your automation (for example, sending an email’s text to an AI provider to summarise it), to comply with the law, or with your permission.
• People at Goleya do not read your Google data unless you ask us to (for example, in a support request), it is needed for security, or the law requires it.
• We do not use Google user data to train general AI models.

Goleya’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect a Google account at any time on the Connections page in the app, or at myaccount.google.com/permissions.

AI processing

Some automations use AI models from providers such as Anthropic or OpenAI. We send them only the data needed for the task. Under their business terms, these providers do not use that data to train their models.

Service providers

We use trusted providers to run the service: database hosting (Neon), servers, email delivery and AI providers. They process data only on our behalf and under agreements that protect it.

How long we keep data

We keep your account data while your account is open. Run history is kept for the period your plan includes and then deleted. You can delete your account at any time in the app (Settings → Delete account). We delete your data straight away: your profile, and workspaces where you are the only member with everything in them. Copies in our database backups disappear within 30 days. We keep invoices and payment records for as long as the law requires (in the UK, 6 years).

Security

Connection tokens are encrypted (AES-256-GCM), passwords are hashed, and all traffic uses HTTPS. No system is perfectly secure, but we work to protect your data and will tell you about a breach that affects you.

Your rights

You can see and change your account details in Settings, disconnect accounts at any time, and ask us for a copy of your data or to delete it. Email privacy@goleya.com.

Under UK data protection law (UK GDPR) you also have the right to object to or restrict how we use your data. If you are unhappy with how we handle it, you can complain to the Information Commissioner’s Office (ico.org.uk).

Changes

We will post changes here and update the date above. For important changes we will also email you.

Contact

Questions about privacy: privacy@goleya.com, or by post to ASKLEYA GROUP LTD, 128 City Road, London, EC1V 2NX, United Kingdom.