Privacy Policy
This document explains exactly what data GoBeyond collects, why, who else receives it, and what you can do about it.
Last updated: 2026-09-11
1. What we collect
Account: your email address, name and avatar as provided by the sign-in provider, and your interface language.
Profile you fill in yourself: year of birth, current country and city, education level and graduation year, budget, goal, target country, intended intake and field.
Test answers and their results, your personal plan and tasks with due dates, and your conversations with the assistant.
Structured memory: facts about you that you entered yourself, that follow from your profile, or that the assistant derived from the conversation. Every fact is visible to you in the Profile section, and you can edit or delete any of them.
We do not ask for and do not store payment card details. They are entered on the payment provider's side.
2. Why we collect it
To provide the service you signed up for: build a personal plan with realistic dates, adapt test results and assistant answers to your situation, and send the reminders you asked for.
We read conversations with the assistant to find questions it answered poorly or without sources, and to fill those gaps in the library. Your name and email are not needed for that and are not shown when a conversation is opened. This is the only reason anyone on our side reads them.
We do not sell your data, do not share it for advertising, and do not use your conversations to train AI models.
3. Who else receives your data
Supabase — sign-in and account security. Receives your email and authentication data.
Anthropic — the AI assistant. Receives your question, the profile summary and memory facts relevant to it, and the library excerpts used to answer.
Voyage AI — search index only. Receives the text of library articles and your search query, converted into vectors. It does not receive your profile or your conversations.
Resend — email reminders. Receives your email address and the text of the reminder.
Paddle — payment processing, acting as merchant of record. Receives your email and the payment details you enter on their side.
Vercel — hosting: the site runs on their servers, and every request passes through them.
Vercel also counts page views. This counter sets no cookies, does not identify you and does not link your visits together — it only shows us which pages are opened and how often. That is why it works without asking: there is nothing to ask about.
Supabase — the database where everything above is stored.
4. Your rights
You can download everything we store about you as a single file, at any time, from the Profile section — no request or waiting needed.
You can delete your account there too. Deletion removes your profile, memory, test results, plan, tasks and conversations. Payment records are kept where accounting law requires it.
You can correct any stored fact yourself in the Profile section. If something cannot be corrected there, write to us.
If you have lost access to the account, send a request from any address to the one in the footer: describe which account it is about, and we will export or delete the data after checking that it is yours. No access, no form and no account are required for this.
5. Retention
We keep your data while your account exists. After deletion it is removed from the working database; backups are rotated and the data disappears from them as the rotation completes.
6. Cookies and similar technologies
A visitor without an account gets one cookie: the chosen interface language (NEXT_LOCALE). Without it every page would open in the default language.
After signing in, the authentication provider adds session cookies. They are what keeps you signed in; deleting them signs you out.
Your answer to the analytics question is stored in the browser itself, not in a cookie: a banner about cookies that sets a cookie before you answer it would be absurd.
No advertising, profiling or cross-site tracking cookies are set. Analytics that requires consent is not switched on until you grant it, and the page-view counter that runs without asking sets no cookies at all — see the section on who else receives your data.
7. Children's data
The service is not intended for children under sixteen. Creating an account requires confirming that you are sixteen or older, and we do not knowingly collect data about younger people.
If you are a parent or guardian and believe a child has created an account, write to us at the address in the footer: we will delete the account and its data without asking for grounds.
Email reminders are sent only for steps you yourself gave a due date to, and they stop as soon as you remove that date in your plan. We do not send marketing mailings.
Seller details
- Iasin Andrievski
- Sole trader (natural person)
- Address: Lev Tolstoi 63/1, Chisinau 2001, Moldova
- Contact: gobeyond.organisation@gmail.com