Privacy policy
This policy explains what GoAheadSite collects when you use goaheadsite.com and the Studio, why, who helps us process it, how long we keep it, and what you can ask of us. It is written in plain words; if anything is unclear, write to [email protected].
1. Who is responsible
GoAheadSite is run by RESTART AI LLC, 116 NW 3rd Ave, Dania Beach, FL 33004, USA (“we”). We are the controller of the personal data about you as our customer: your account, your payments, your support requests.
The people who visit your site are a different case. When they send a form, leave a comment or subscribe, you decide what happens with their data; we store and process it only to run your site for you, as your processor. Our Terms set out how. Your site's own privacy policy — the Studio writes it from what your site really does — tells your visitors about it.
2. What we collect and why
| What | Why | Legal basis |
|---|---|---|
| Your account: name, email address, password (stored only as a one-way hash), when you confirmed your email, when you last signed in. If you sign in with Google: your Google account's ID, name and email address — nothing else from your Google account. | To give you your account and keep it yours. | Contract |
| Your sites: pages, texts, photos, files, design and settings; the history of your changes and restore points. | To build, host and show your sites, and to let you go back to an earlier version. | Contract |
| The AI assistant and site builds: what you write to the assistant, what you tell us about your business, and the parts of your site the AI reads to do the job; how much AI work each request used. | To do what you ask; to count AI credits. | Contract |
| Payments: your plan, amounts, dates, the payment provider's reference and, for renewals, the provider's card token and a masked card number (like 4242 •••• 4242). Card numbers are entered on the provider's page and never reach us. | To take payments, renew what you chose, give receipts and keep accounting records. | Contract; legal obligation (accounting and tax) |
| Support requests and what you send us in them. | To help you. | Contract |
| Security and activity log: sign-ins, failed sign-ins and changes made in the Studio, with the time and IP address. | To keep accounts safe, find misuse and show you what changed on your site. | Legitimate interests (security) |
| How you use the Studio: which Studio pages you open and which buttons you press, what your plan held back when you tried it, and ideas you send us (“Missing something?”). Never what you type into your site, and no screen recordings. | To see what to improve and what customers need most, and to help you faster when you ask us. | Legitimate interests — you can turn it off in Studio → Support |
| Error reports from the Studio and our servers: the error, the page address and your browser. | To find and fix problems. | Legitimate interests |
| Notifications you connect: the Telegram chat or WhatsApp number you connect to get new requests. | To send you your site's requests and messages about your plan there. | Your consent (you connect them; disconnect any time) |
| Invites: who invited you, if you came through an invite link. | To give both of you the invite credits. | Contract |
| Visits to our site: pages opened, buttons pressed, the campaign or site that sent you (from the link), your browser and approximate location, through Google Analytics; your sign-up and payments counted from our server under your account number (never your name or email). | To see which pages and campaigns help people, and fix what doesn't. | Your consent for analytics cookies; legitimate interests for counting without them |
| Emails we send you: each email's subject, when it went, whether it was delivered and, for product news, whether it was opened or a link in it clicked (a small picture and our own link redirect count them). Never the body of account emails. | To make sure account emails arrive, stop mailing addresses that bounce, and see which news is useful. | Legitimate interests |
| Product news and tips: a few emails a month at most about what's new in the Studio and how to get more from your site. | To tell you about the product you use. | Legitimate interests — unsubscribe in any of them, or turn it off in Studio → Support |
We don't sell personal data, we don't share it for advertising, and we don't use your site's content or your visitors' data to train AI models.
3. Who processes data for us
We use a few providers to run GoAheadSite. Each gets only what its job needs and is bound to protect it.
- Hetzner Online GmbH — our servers and database, in data centres in the European Union.
- Cloudflare, Inc. — the network in front of our servers and your sites: it delivers pages quickly and blocks attacks. Every visit passes through it.
- AI model providers — Anthropic PBC, and OpenAI when we use its models: they process what the AI works on for you (your messages and the parts of your site involved). Under our agreements they don't train their models on it.
- Payment providers — the one you pay with: Stripe, or LiqPay, WayForPay or monobank for payments in Ukraine.
- Resend, Inc. — sends our emails (account, plan, invoices and product news) and tells us whether each one arrived.
- Cloudflare Email Routing — delivers the emails you send to our addresses (support@, billing@) to our team's inbox.
- Telegram and Meta (WhatsApp) — only if you connect them, to send you notifications there.
- Google — “Continue with Google” if you use it, speed checks of your public pages (PageSpeed), Search Console data for your SEO reports if you connect it, and Google Analytics: how our site and the Studio are used (see section 5).
- ReportFlat, our sister product — the SEO reports in your Studio on the plans that include them.
Some of these providers are in the United States. Where data leaves the European Economic Area, the transfer is covered by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
4. How long we keep it
- Your account and your sites: as long as you have them. To close your account, write to us: we delete it and its sites within 30 days. Nightly backups are kept 14 days, so a copy is gone from them 14 days later.
- Restore points made automatically: 60 days; the ones you save yourself stay until you remove them (at most 50 per site).
- Deleted pages: 30 days in Deleted pages, then gone.
- Your visitors' requests: for the period you choose in the Studio (24 months unless you change it). Spam is deleted after 30 days, and IP codes and browser details are removed from real requests after 30 days.
- The security and activity log, and how you use the Studio: 12 months. Error reports: 90 days. Server logs: 30 days.
- Payment records: as long as accounting and tax law requires.
5. Cookies
Our marketing pages (goaheadsite.com, its pricing and these pages) set no cookies of their own; Google Analytics sets one only if you allow it (below). The Studio sets only the cookies it needs to work:
- A session cookie and XSRF-TOKEN — keep you signed in and protect your forms; they expire after two hours without activity, or when you sign out.
- remember_web_… — only if you tick “Remember me”, so you stay signed in.
- gas_ref — only after you open an invite link: remembers who invited you for 60 days, so the invite credits reach you both.
Google Analytics counts visits to goaheadsite.com and the Studio — which pages are opened, which buttons pressed, where a visit came from, and our own sign-ups and payments — so we see what helps people. We ask first: until you press “Allow”, it gets only pings without cookies or identifiers; if you allow it, it sets _ga cookies (up to 2 years). You can change your mind by clearing this site’s data in your browser. We use no advertising cookies and don’t let Google use the data for ads. Customers who turned off usage counting in Studio → Support are not sent to Google Analytics at all. Your own site sets no cookies by default either; its cookie policy says what it does.
6. Your rights
You can ask us to show you the personal data we have about you, to correct it, to delete it, to give it to you in a portable form, to limit what we do with it, or to stop a use based on our legitimate interests. Where we rely on your consent you can withdraw it at any time. Your sites can be downloaded any day as a ZIP (Site settings → Take your site with you).
Write to [email protected] or call +1 (954) 214-6644; we answer within 30 days. You can also complain to your data protection authority. In the United States, we don't sell or share personal information as the California law defines it, and we don't treat you differently for using your rights.
7. Security
Everything travels over HTTPS. Passwords are stored as one-way hashes and payment card tokens encrypted; card numbers never reach our servers. Each site's data is kept apart at the database level, so one account cannot read another's. Only the people who need it to run the service can reach the servers.
8. Children
GoAheadSite is for businesses and people aged 16 or over. We don't knowingly collect data from children.
9. Changes
When we change this policy in a way that matters, we tell you in the Studio or by email before it takes effect. The date at the top shows the current version.
10. Contact
RESTART AI LLC, 116 NW 3rd Ave, Dania Beach, FL 33004, USA · [email protected]