Privacy

Your personal information in the United States

We give everyone in the United States the privacy rights that California's privacy law (the California Consumer Privacy Act, as amended by the California Privacy Rights Act) gives California residents, wherever in the US you live. This section explains what we do with your personal information and how to use those rights.

Where your information is stored

Your documents, records and files are stored in the United States, in Google Cloud's Iowa region. Where we store them follows the country you give us when you sign up, and never your IP address. Your account details (your profile, organization, team members and subscription) are held in Sydney, Australia. Sign-in details are held by Google in the United States, and payments are handled by Stripe in the United States.

Who is responsible for what

For your own account details (your sign-in, profile, organization, team members and billing), we're responsible for your personal information.

For what you put into our products, such as documents, data rooms and bookings, and for the people you send them to, we handle that information on your behalf and follow your instructions. You're responsible for having the right to add or send the personal information of the people involved. If someone asks us about information you control, we pass the request to you. If we become aware of a security breach affecting information you control, we'll tell you without undue delay.

Why we collect and use personal information

We use personal information to:

• create and run your account, including sign-in, your organization, team members and subscription;
• provide the products you use;
• send service emails and keep their delivery records;
• bill you and take payment;
• help you when you ask for support;
• keep our service secure and prevent abuse;
• understand how our products are used, so we can improve them;
• measure our website through analytics on our marketing pages;
• answer Enterprise inquiries and prepare quotes;
• meet our legal duties, such as keeping tax records.

We don't sell your personal information, and we don't share it for cross-context behavioral advertising.

What we collect, where it comes from and who we share it with

This covers the information we collect to run your account. What you store in our products is covered under "Who is responsible for what" above: we use it only to provide the service you asked for.

In the last 12 months we collected these categories of personal information:

• Identifiers: your name, email address and sign-in details, and your IP address, which appears in our server logs and is checked at sign-up to stop abuse.
• Commercial information: your subscription, plan and billing history. Card details go straight to Stripe and we never see them.
• Professional information: your organization and your role in it.
• Internet activity: how you use our sites and products, such as pages visited, features used and error logs.
• Geolocation data: approximate location only, never precise. We work out your country from your IP address when you sign up, and our website analytics estimates your city. We never use it to decide what you can use.

It comes from you, from your organization when someone there invites you, from Google when you sign in with Google, from Stripe when you pay, and from our own systems as you use them.

We use it for the purposes listed above. We disclose it only to service providers who work for us under contracts that limit what they can do with it: cloud hosting, sign-in, payments, email delivery, website analytics and AI services.

We don't sell your personal information or share it for cross-context behavioral advertising, so there's nothing to opt out of. That includes the personal information of anyone under 16. Because we don't sell or share, we don't act on Global Privacy Control signals: there's nothing for them to stop.

We don't use or disclose sensitive personal information for anything beyond providing our service, so there's nothing to limit. We don't make decisions about you by automated means, with one exception on behalf of the businesses that use BookAndGo: a client who misses 3 appointments is automatically blocked from booking with that business, and from its marketing emails. A paid checkout already under way is refunded in full. Only the business can lift the block, so questions about it go to the business. We don't offer any financial incentive in exchange for your personal information.

Your rights and how to use them

You can ask us:

• to tell you what categories of personal information we hold about you, and give you a copy of the specific pieces;
• to delete it;
• to correct it if it's wrong.

Write to our privacy contact below from the email address on your account. To confirm it's you, we'll reply to that address, and we may ask for details only the account holder would know. If we can't confirm who you are, we'll tell you why. Someone else can make a request for you if you give them signed, written permission; we may still confirm the request with you directly.

We answer within 30 days, and if we can't, we'll tell you within those 30 days when we will. We don't charge for these requests, and we'll never treat you differently for using these rights.

You can correct most of your account details yourself in Settings.

Marketing email

We send marketing emails only if you've agreed to them. Every one has an unsubscribe link, and unsubscribing doesn't affect your service.

How long we keep personal information

We keep personal information only as long as we need it for the purposes above, or as long as the law requires.

• Email delivery records: deleted after 90 days, and gone from our backups within a further 14 weeks.
• Billing and tax records: as long as the law requires, currently seven years.
• What's stored in a workspace, after the workspace is deleted or its last member closes their account: 30 days, and gone from our backups within a further 14 weeks.
• Your MyAndGo account details, after you ask us to close your account: 30 days, and gone from our backups within a further 14 weeks.
• When your account closes, we keep a scrambled copy of your email address so that we never send you marketing email again.
• We also keep a scrambled record that you've had a free trial, so the same person or business can't start a second one.
• If you've changed your email choices, we keep a record of each change and when you made it, so we can show what you chose.
• If we've stopped an account for misuse, closing it doesn't delete the details we keep to stop it being used again.
• Canceling a subscription, letting a trial end without paying, or not using your account doesn't delete anything when it happens.

AI features in BookAndGo

Some features of BookAndGo use AI: answering visitors' questions in the chat on our website, answering your clients' questions and helping them book in the chat on your booking page, drafting replies to reviews, drafting marketing campaigns and their subject lines, working out the columns when you import your client list, summarizing your analytics, and your weekly briefing. They use a cloud AI service that works for us, which may process information in the United States or another country. It may include personal information in your bookings, in the messages your clients send, and in a client list you import.

Personal information handled outside the United States

Our AI features may be processed outside the United States (see "AI features in BookAndGo" above).

We hold some personal information ourselves in Australia, such as account records, email delivery records, Enterprise inquiries, and messages you send to our support or privacy team. Our team works from Australia: when you ask us for help, or when we look after the service, people on our team may access your workspace and its content, which stays stored in the United States. We protect it under our own policies and Australian privacy law (the Privacy Act 1988). Other companies that handle personal information for us outside the United States must protect it under their contract with us.

Children

Our products are for businesses, and we don't knowingly collect personal information from children under 13.

Questions and complaints

Write to our privacy contact with any question or complaint. We'll acknowledge it within 5 business days and answer within 30 days. If you're not satisfied with our answer, you can contact your state's attorney general.

Privacy contact

Privacy contact: Andy Carey, Fintech Development Pty Ltd. Email: privacy@myandgo.ai. Our privacy team works from Australia, and requests sent to this address are handled there.

Last updated: November 6, 2026.