Privacy Notice

1. Who we are

This Privacy Notice describes how ACK Invent Hub LTD (trading as "Goldify", "we", "us", or "our") collects, uses, and protects personal data when you use the Goldify website and application (the "Service"). ACK Invent Hub LTD acts as the data controller for personal data processed in connection with the Service.

Contact: hello@getgoldify.com

2. Personal data we collect

• Account data: name, email address, password (hashed), business profile details you enter.
• Service data: calculations, invoices, client records, and other content you create or upload.
• Usage and telemetry: pages visited, features used, device type, browser, approximate location derived from IP.
• Support data: messages, attachments, and metadata you send when contacting us.
• Marketing data: communication preferences, if you opt in to product updates.

Payment card details are collected and processed directly by our reseller Paddle and are not stored by us.

3. Purposes and legal bases

• Creating and operating your account, providing the Service — performance of a contract.
• Billing, subscription management, fraud prevention — contract and legitimate interests.
• Security, abuse prevention, debugging — legitimate interests in protecting the Service.
• Product analytics and improvement — legitimate interests.
• Customer support — contract / legitimate interests.
• Marketing communications — consent, which you can withdraw at any time.
• Compliance with legal obligations (tax, accounting) — legal obligation.

4. Sharing with third parties

We share personal data only with:

• Paddle.com Market Limited — our Merchant of Record, for payments, subscription management, tax compliance, and invoicing.
• Infrastructure providers — hosting, database, email delivery, and analytics subprocessors that operate under written data processing agreements.
• Professional advisers — lawyers, accountants, and auditors where reasonably necessary.
• Authorities — when required by law, court order, or to protect our rights.

We do not sell personal data.

5. International transfers

Some recipients may be located outside the European Economic Area or the United Kingdom. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or adequacy decisions.

6. Retention

We retain personal data for as long as your account is active and for a reasonable period afterwards to comply with legal, tax, and accounting obligations (typically up to 7 years for financial records). Service content you create is deleted within 30 days of account closure unless we are legally required to keep it.

7. Your rights

Subject to applicable law (including the UK GDPR and EU GDPR), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data.
• Restrict or object to processing.
• Receive a portable copy of your data.
• Withdraw consent at any time, where processing relies on consent.
• Lodge a complaint with your local supervisory authority.

To exercise any of these rights, email hello@getgoldify.com. We respond within one month.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, least-privilege access, and regular review of our security practices.

9. Cookies

We use strictly necessary cookies to operate the Service (authentication, session) and a limited set of analytics cookies to understand how the Service is used. You can manage cookies through your browser settings. The cookie banner shown on first visit records your acknowledgement.

10. Changes

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email.