Privacy Policy

Last updated: 15 July 2026 · GoStartr

GoStartr ("GoStartr", "we", "us", "our") operates the GoStartr platform, GoStartr Mail, the Abby AI voice agent, and related sales-enablement, AI training, and implementation services (collectively, the "Services"). This policy explains what personal information we collect, why, how we use, protect, share, retain, and disclose it, and the rights and choices you have. It applies to visitors, prospects, account holders, their team members, and individuals whose information is processed through the Services.

Two roles. For our own website, marketing, and account administration, GoStartr is the controller/business. When a customer uses the Services to manage their own leads, contacts, mailboxes, and calls, GoStartr acts as a processor/service provider on that customer's behalf and instructions, and the customer is the controller. For processor data, the customer's own privacy notice governs, and requests should be directed to that customer; we will support them as required by our contract and applicable law.

1. Who is responsible & how to reach us

Entity: [LEGAL ENTITY NAME], a [STATE] [entity type, e.g. LLC]
Privacy contact: Bruce Steyn
Email: privacy@gostartr.com
Mailing address: [U.S. BUSINESS ADDRESS]
Phone: [U.S. PHONE]

2. Information we collect

Category	Examples	Source
Contact & identity	Name, email, phone, company, job title	Forms, booking page, calls, account signup
Lead & sales data	Enquiry details, interest, messages, pipeline stage, notes, deal value	You, our customers, your interactions
Voice & call data	Call recordings, transcripts, summaries, sentiment, outcomes	Abby AI voice agent calls (with consent)
Google user data	Your email address and basic profile; permission to send email on your behalf; calendar events we create or read for scheduling	Google account you connect (OAuth)
Communications	Emails and messages you send/receive through the Services, delivery and bounce metadata	Your use of GoStartr Mail
Usage & technical	IP address, device/browser, pages viewed, cookies, log data	Automatically, when you use the site/app
Account & billing	Login credentials (hashed), workspace settings, plan, billing details processed by our payment provider	Registration and use

3. Google user data & Limited Use

When you connect a Google account, we request only the access needed to provide the features you enable: permission to send email as you (gmail.send), your email address and basic profile, and calendar access to create and manage scheduling events. We request the narrowest scopes required and do not request permission to read the full contents of your inbox for general use.

GoStartr's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the user-facing features you request; we do not sell it; we do not use it for advertising; we do not allow humans to read it except with your consent, for security or legal reasons, or where processing is limited to abuse detection or is aggregated/anonymized. We do not transfer it except as needed to provide the Services, comply with law, or as part of a merger or acquisition with your notice.

4. Why we process it

To respond to enquiries, book meetings, and deliver the Services you request.
To send and track email you originate through GoStartr Mail from your connected account.
To follow up on leads, including automated email and AI voice calls where the individual provided their details and consented to contact.
To operate, secure, troubleshoot, and improve the platform. We train and tune AI features only on aggregated or de-identified data, or on a customer's own data on their instruction; we do not train models on your connected Google mailbox content.
To process payments, prevent fraud and abuse, and enforce our Terms.
To comply with legal, tax, and regulatory obligations and respond to lawful requests.

5. Voice AI (Abby), call recording & messaging consent

Where an individual submits details on a GoStartr or customer landing/booking page, they must affirmatively consent to be contacted, including by an automated AI voice agent (Abby) and to that call being recorded. We store the consent wording shown and the date/time it was given. Abby self-identifies as artificial when asked. Calls may be recorded and transcribed to qualify the enquiry, schedule meetings, and improve quality; recording notice is provided at the start of the call, and calls into two-party-consent states are handled accordingly. Automated calls and texts are made only consistent with the Telephone Consumer Protection Act (TCPA) and applicable state law. Marketing email complies with the CAN-SPAM Act and includes a working unsubscribe in every message. Any recipient may end a call, reply STOP to texts, use an unsubscribe link, withdraw consent, or ask not to be contacted at any time.

6. How we share information

We do not sell personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law. We disclose information only to:

Service providers / sub-processors that help us run the Services under contract and on our instructions, e.g. cloud hosting and databases (Google Cloud / Firebase), email and telephony infrastructure, AI model providers, calendar/scheduling, analytics, and payment processing.
Our customers, where you interact with a business that uses GoStartr, so they can manage the relationship.
Professional advisors (legal, accounting, security) under confidentiality.
Authorities and third parties where required by law, to respond to lawful requests and legal process, to protect rights, safety, and security, to enforce our Terms, or in connection with a merger, financing, acquisition, or sale of assets (with notice where required).

A current list of sub-processors is available on request from privacy@gostartr.com.

7. International transfers

We are based in the United States and may process information in the U.S. and other countries where we or our sub-processors operate. Where we transfer personal information across borders, we use appropriate safeguards (such as Standard Contractual Clauses) where required to provide a comparable level of protection.

8. Retention & deletion

We keep personal information only as long as needed for the purposes above, to meet legal, tax, and accounting obligations, resolve disputes, and enforce agreements. Lead and call records are retained for the life of the business relationship and a reasonable period thereafter, after which they are deleted or de-identified. When you disconnect a Google account or close your account, we stop accessing your Google data and delete stored tokens; connected data is deleted or de-identified within a commercially reasonable period unless retention is legally required. You may request deletion at any time (see Section 11).

9. Security

We apply administrative, technical, and physical safeguards including encryption in transit, encryption of stored OAuth tokens, access controls, least-privilege access, and monitoring. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security.

10. Data breach notification

We maintain an incident-response process. In the event of a security incident affecting your personal information, we will investigate, take steps to contain and remediate it, and notify affected individuals, our customers, and regulators without undue delay and within the timeframes required by applicable U.S. state breach-notification laws and any other laws that apply. Where GoStartr acts as a processor, we will notify the relevant customer (controller) so they can meet their own obligations.

11. Your rights & choices

Depending on where you live, you may have some or all of the following rights, which you can exercise by emailing privacy@gostartr.com. We will not discriminate against you for exercising them.

U.S. state privacy rights (including California CCPA/CPRA)

Know and access the personal information we hold about you and how we use and disclose it.
Correct inaccurate personal information.
Delete personal information, subject to legal exceptions.
Opt out of any "sale" or "sharing" of personal information (note we do not sell or share it) and limit use of sensitive personal information.
Appeal a decision, and designate an authorized agent to act for you. We verify requests before acting.

If you are in the EU/UK

Access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent and to lodge a complaint with a supervisory authority.

12. Cookies & analytics

We use essential cookies to run the site and app and limited analytics to understand usage. You can control cookies through your browser; disabling some may affect functionality.

13. Children

The Services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information, contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. The "last updated" date reflects the latest version. We will provide notice of material changes through the Services or by email where appropriate.

15. Contact

Privacy questions or requests: privacy@gostartr.com · [U.S. PHONE] · [U.S. BUSINESS ADDRESS].