Privacy Policy

1. Information We Collect

We collect information you provide when creating an account, adding animal records, uploading documents, and making purchases. This includes:

• Account information (name, email, password)
• Organization details (farm name, address, contact)
• Animal records and associated data you enter
• Payment information (processed securely by Stripe. We do not store card data)
• Documents, photos, and videos you upload
• Usage data and audit logs for security and compliance

2. How We Use Your Information

• To provide and improve the Goatie platform
• To process transfers, reports, and payments
• To send notifications about transfers, health records, and account activity
• To maintain audit trails required for record integrity
• To comply with applicable laws and regulations
• If you have asked us to, to send occasional emails about new features, tips and show season reminders. You choose this when you create your account and can change it at any time in Settings. We do not add anyone who has not asked.

Account email is separate and is not optional while you have an account: confirming your address, resetting your password, organization invitations, and payment receipts. Turning off marketing email does not affect any of those.

3. Data Sharing

We do not sell your personal data. We share data only:

• With parties you explicitly authorize (veterinarians, buyers, registries)
• With service providers who help us operate the platform (cloud hosting, payments, email delivery)
• When required by law or legal process

4. Public vs. Private Records

Animal records may be set to public, report-only, private, or hidden. Public records are visible to all users. Private records are visible only to authorized organization members. We enforce visibility server-side on all API requests.

5. Data Retention

Your account data, animal records, and the photos, videos, and documents you add are kept while your account is active, so your records and history stay available to you.

When you delete your account, your personal identity data (name, email address, password, profile, sessions, and notifications) is removed after the 30 days grace period described in our Account Deletion Policy. Records and images that belong to an organization with other active members, such as a chapter or club, stay with that organization. You can delete any animal photo from the app at any time; deleting a photo removes the stored file.

Ownership-transfer records, and the audit log entries that back them, are kept permanently as part of the permanent record system, because a transfer history is only trustworthy if it cannot be rewritten. After account deletion those entries reference the account by an internal identifier rather than by name.

6. Photos, Videos, and Automated Models

Goatie does not currently use your data, photos, or videos to train automated models. Photos, videos, and documents you add are stored in your organization’s account in private storage, and only members of your organization (and anyone you explicitly share a record with) can view them.

Some features keep a copy of what you submit alongside your records: when you confirm the animals in a video scan, the confirmed image crops are saved with your organization’s records as a labeled set, and Show Coach clips and weight-estimate photos are stored the same way. These are kept so the detection features can be improved for your organization in the future. That improvement has not been built and does not run today, and only your organization’s owners and admins can export the set.

If we ever introduce automated training on user data or images, we will update this policy first and tell account holders what is changing before it takes effect, and we will obtain consent before any data relating to a child under 13 is used for that purpose.

7. Security

We use industry-standard security measures including encryption in transit and at rest, private S3 storage for documents, signed URLs for file access, and role-based access controls.

8. Account Deletion

You have the right to request deletion of your account and associated personal data. See our Account Deletion Policy for details on the process, what data is deleted, and what is retained for legal compliance.

9. Data Export

You may export your organization’s data at any time from Settings → Data & Privacy. The export is a ZIP archive with one CSV file per record type: animals, health records (including vaccinations), feed records, weigh-ins and other performance records, awards, the list of uploaded documents, ownership transfers, expenses, and organization members. Uploaded files themselves are not included in the archive. Immutable ownership history and audit logs are retained separately as required for system integrity.

10. Children’s Privacy

You must be at least 13 years old to use Goatie or to be named as a user of an account. Accounts are held by an adult (18 or older) or by a chapter, club, or school. Students aged 13 to 17 use Goatie as authorized users of that adult’s or organization’s account, and the account holder is responsible for their use of the service. We do not knowingly collect personal information from children under 13, and we do not create accounts or user slots for them.

A parent or guardian can review or request deletion of a minor’s data at any time by contacting us at privacy@goatie.app or through our contact page. If you believe we have collected personal information from a child under 13, contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our website or sending an email to your registered address. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact

For privacy questions, contact us at privacy@goatie.app or visit our contact page.