Privacy policy.
Goldstone Empire ("Goldstone," "we," "us") is a system for finding and applying for capital. This policy explains, in plain terms, what data we collect, why we collect it, how we use it, and what you can do about it.
1. What we collect
We collect three kinds of information:
- Account data. Your name, email, password (hashed), and the profile type you selected at signup.
- Vault data. The information you enter into your Vault — company details, financials, project information, narratives, references. This is your data; we treat it accordingly.
- Usage data. Standard service logs — IP address, browser, page paths, error reports — used to keep the service running and to fix bugs.
2. What we never do
- We do not sell your data. To anyone.
- We do not share Vault data with third parties without your explicit consent.
- We do not train AI models on your Vault content.
- We do not auto-submit applications, send emails, or take outside actions on your behalf without you initiating them.
3. Why we use what we collect
Account data is used to authenticate you. Vault data is used to power the four layers of Goldstone — Funding match, Document drafting, Workspace fill — exclusively for your account. Usage data is used to operate the service, debug issues, and understand product use in aggregate.
4. AI processing
When you use AI features (refinement, drafting, match scoring), the relevant Vault content is sent to a third-party AI provider for processing. We use providers contractually committed to not training on inputs. AI output is always shown as a suggestion you can accept, edit, or discard.
5. Your rights
- Access. You can see your full Vault at any time.
- Export. You can export your Vault as structured data — JSON or CSV — at any time.
- Delete. You can delete your account. We permanently remove your data within 30 days.
- Correct. You can edit any Vault field at any time.
6. Retention
Account and Vault data is retained while your account is active. After deletion, we permanently remove it within 30 days. Aggregate, non-identifying usage data may be retained longer for service operation.
7. Security
Data is encrypted in transit (TLS) and at rest. Passwords are hashed with bcrypt. Access to production data is restricted to a small number of staff and logged. We do not store payment card numbers — that is handled by our payments processor.
8. Changes to this policy
If we materially change this policy, we will email account holders before the change takes effect. The current version and effective date are always shown at the top of this page.
9. Contact
Questions about this policy: contact us.
This is the privacy policy for the Goldstone Empire product as of the date above. It is intended to be honest and clear; it is not a substitute for legal advice. We will update it as the product evolves.