Privacy Policy

1.Who we are

Go Lancer is run by a sole trader in the Czech Republic, who is the controller of your personal data under the GDPR:

Valentina Cváčková
Business ID (IČO): 23069678
Družební 1003/7, 742 21 Kopřivnice, Czech Republic
golancer@golancer.io

This policy covers the Go Lancer website and app. It explains what we collect, why, who helps us run the service, how long we keep data and what you can do about it.

2.What we collect

Your account

• Name and email address.
• Your password, stored only as a salted one-way hash. We can't read it.
• Settings you choose, such as currency, goals, reminders and wellbeing preferences.

Your business details

What you add in My Account to appear on your invoices: company name, address, tax ID, the payment details you want clients to use, your logo and invoice design.

Your workspace

Everything you put into Go Lancer: clients and their contact details, projects, tasks, tracked time, invoices, payments, notes, tags, rates and files you upload. You own this content.

Billing

Plan, billing history and the Stripe customer and subscription IDs. Card details go straight to Stripe. We never see or store them.

Emails you send through Go Lancer

When you send an invoice or a payment reminder from Go Lancer, we process the recipient's address, the subject, your message and the attached invoice PDF so the email can be delivered.

Google, if you connect it

If you connect Google Calendar, we receive the permissions you grant on Google's consent screen: basic account details (name, email, account ID), the calendar we create for Go Lancer, the events we create or read to show your schedule, and the authorisation tokens needed to keep the connection. See section 4.

Technical data

IP address, browser and device type, and server logs of requests and errors. We use it to run, secure and fix the service.

3.Why we use it

• To provide the service you signed up for: your account, workspace, invoices and the emails you ask us to send.
• To take payments and manage your plan.
• To send service emails: password reset links, your Business Summary if you turned it on, trial and billing notices.
• To keep Go Lancer secure and prevent abuse, for example by limiting repeated sign-in attempts.
• To fix problems and improve the product.
• To meet legal duties such as tax and accounting records.

We don't sell personal data and we don't use it for advertising.

4.Google user data (Limited Use)

Go Lancer accesses Google user data only after you connect a Google account and grant permission. You can disconnect in Go Lancer or revoke access in your Google Account at any time.

We use Google user data only to provide the calendar features you ask for: identifying the connected account, showing your calendar in Go Lancer, creating or updating events for your projects and tasks, and keeping the connection working.

We share Google user data only with our hosting and database providers as needed to run Go Lancer, with Google to operate the Google APIs, with an AI provider only when you explicitly ask for an AI feature and include Google-derived information in it (and then only the minimum needed), and with authorities where the law requires it.

Google user data is never used to train AI models, for advertising, for profiling or credit decisions, and is never sold. Go Lancer's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5.AI features

Go Lancer doesn't build or train its own AI model. When you upload an invoice to import it, or use another AI feature, the file or text you choose is sent to an AI provider (OpenAI or Anthropic, see section 8) only to produce the result you asked for.

Through their business APIs, these providers don't use this content to train their models by default. They may keep it for a limited time, typically up to 30 days, for abuse monitoring. Check anything AI reads or writes before you rely on it, and avoid sending sensitive personal data you don't need to.

6.Legal bases

• Contract: running your account and the features you use.
• Legal obligation: tax and accounting records.
• Legitimate interest: security, preventing abuse, fixing and improving the service.
• Consent: optional things such as connecting Google or marketing emails. You can withdraw consent at any time without affecting what happened before.

7.Your clients' data

When you store information about your own clients in Go Lancer (names, emails, addresses, invoices), you are the controller of that data and Go Lancer processes it on your behalf. You're responsible for having a lawful basis to store it and to email your clients. Our commitments as your processor are in the Data processing section of the Terms of Service.

Invoice and reminder emails are sent from a Go Lancer address with your email as reply-to, so your client's answers come to you.

8.Who helps us run Go Lancer

These providers process personal data only as needed for their part of the service, under their own data protection terms:

Payments are handled by Stripe, whose privacy policy is at stripe.com/privacy.

9.Transfers outside the EU

Some providers above are based in, or process data in, the United States. Where that happens we rely on the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

10.How long we keep data

• Your account and workspace: until you delete your account. Deleting it in My Account removes your account and workspace data straight away, deletes your uploaded files and stops your subscription.
• Backups: deleted data can remain in encrypted backups for a limited period until they are overwritten.
• Billing records: as long as Czech tax and accounting law requires.
• Password reset links: one hour, and each works once.
• Google connection: until you disconnect it or delete your account.
• Server logs: a short period, for security and troubleshooting.

11.Security

Connections are encrypted (HTTPS). Passwords are hashed, Google authorisation tokens are encrypted, sign-in and password routes are rate-limited, every request is checked against your account so no one sees another person's data, and internal access is limited. No online service can promise perfect security, but we'll tell you and the authority without undue delay if a breach affects your data.

12.Your rights

You can access, correct, delete or export your data, restrict or object to processing, and withdraw consent. Two of these you can do yourself at any time:

• Download my data: My Account > Security gives you everything in one file.
• Delete account: My Account > Security.

For anything else, write to golancer@golancer.io. We answer within one month.

You can also complain to the Czech data protection authority, the Office for Personal Data Protection (ÚOOÚ), at uoou.gov.cz, or to the authority where you live.

13.Cookies and browser storage

See the Cookies Policy. In short: only what the app needs to work, and no advertising or analytics cookies.

14.Children

Go Lancer is a business tool for adults and isn't meant for anyone under 18.

15.Changes

If we change this policy in a way that matters, we'll email account holders before it takes effect. The date at the top always shows the latest version.

16.Contact

Questions about your data: golancer@golancer.io.