Privacy Policy

GLOBAL PLATFORM POSITION

GOATYD is designed as a globally available platform. Initial content may be seeded with Georgian entities as an editorial operations choice only; this does not create a Georgia-specific product, market, legal regime, or user class.

PRE-LAUNCH DATA CONTROLLER PLACEHOLDER

[Legal entity name, registration number, address, governing law, and dispute forum to be inserted before public launch]

1. Scope

This Policy applies to GOATYD websites, applications, account services, ranking participation, referrals, communications, and related features. It does not govern third-party services linked from GOATYD.

2. Data We May Collect

Category Examples Account and profile Name, username, email, optional phone, avatar, interests, follows, country, language, settings. Participation Votes, Battles, lists, brackets, skips, spend commitments, timestamps, context, edits, integrity state. Economy and progression Points ledger, XP, levels, rewards, pending/settled/refunded/reversed states, badges, streaks, referral attribution. Content and communications Nominations, corrections, reports, appeals, legal requests, support messages, future comments if activated. Technical and usage IP address, device/browser data, identifiers, logs, session data, crash data, security events, referral/deep-link events, approximate location Category Examples inferred from IP. Verification Email and phone status; provider references for future identity/KYC/wallet verification. Highly sensitive verification documents should remain with approved providers where feasible. Sources and public data Publicly available information about ranked entities, sources, links, factual profile content, and editorial metadata.

3. Sources

Directly from users and administrators.

Automatically from devices, interactions, cookies or similar technologies.

From authentication, hosting, analytics, communication, security, data, and attribution providers.

From public, official, licensed, editorial, or user-suggested sources.

4. Purposes

Provide accounts, profiles, participation, rankings, rewards, referrals, sharing, notifications, localization, and support.

Authenticate users, maintain security, prevent fraud, detect manipulation, enforce rules, and preserve auditability.

Calculate, publish, review, correct, and version ranking and progression outputs.

Personalize discovery and challenges where active.

Measure product performance, troubleshoot, research, test, improve, and develop features.

Comply with law, respond to valid requests, establish or defend claims, and protect rights and safety.

Communicate service, policy, security, transactional, and optional marketing information.

5. Legal Bases and Global Processing

Depending on location and applicable law, processing may rely on contract performance, legitimate interests, consent, legal obligation, protection of rights and safety, or other lawful bases. Data may be processed in countries different from the user’s residence, subject to legally required safeguards.

6. Sharing

Service providers and processors supporting hosting, database, authentication, analytics, communications, security, AI assistance, storage, content delivery, and operations.

Affiliates, successors, investors, professional advisers, and transaction counterparties under appropriate confidentiality or legal controls.

Authorities or third parties where reasonably necessary for law, legal process, safety, security, fraud, rights protection, or enforcement.

Publicly, when a user chooses public profile information, rankings, badges, lists, or other public participation surfaces.

Campaign or creator partners receive attributed aggregate or campaign data; personally identifying data is not provided unless disclosed and lawful.

7. Sale, Sharing, and Advertising

GOATYD does not plan to sell personal information for money at launch. Certain analytics or advertising technologies may be treated as “sale,” “sharing,” or targeted advertising under some laws even without money changing hands. Such technologies should not be activated until required notices, consent or opt-out controls, contracts, and signal handling are operational.

8. Cookies and Similar Technologies

GOATYD may use strictly necessary session and security technologies, preference storage, analytics, attribution, and error monitoring. Non-essential advertising or cross-context tracking must remain disabled until the applicable consent/opt-out architecture is active.

9. Retention

Data is kept for the period reasonably necessary for the purposes described, including account operation, ranking integrity, fraud prevention, audit, legal compliance, dispute defense, security, and backup cycles. Deletion may not immediately remove data from backups, immutable ledgers, fraud records, legal holds, public archives, or de-identified datasets where retention is lawful and necessary. A separate retention schedule governs operational periods.

10. User Rights

Depending on location: access, correction, deletion, portability, restriction, objection, consent withdrawal, and appeal.

Where applicable: opt out of sale/sharing, targeted advertising, profiling or certain automated processing; limit use of sensitive personal information; and non-discrimination for exercising privacy rights.

Requests may require identity verification. The Operator may deny, limit, or retain data where an exemption applies, including security, fraud, free-expression, legal, audit, or claims needs.

Authorized-agent requests require legally sufficient authority and verification.

11. Children and Teen Users

Accounts are not permitted for children under 13. GOATYD does not knowingly collect personal information from a child under 13. Teen users should avoid publishing sensitive personal information. Features involving regulated economic activity, identity verification, or other heightened risk may be adult-only or subject to additional consent and safeguards.

12. Security

GOATYD uses administrative, technical, and organizational safeguards designed for the nature of the service. No system is completely secure. Users must protect credentials and report suspected compromise promptly.

13. Automated Systems and AI

GOATYD may use automated rules and AI assistance for drafting, classification, translation, recommendations, integrity review, moderation support, and product operation. Material high-impact actions should remain subject to governance, review, appeal where appropriate, and applicable legal rights. AI output is not treated as an authoritative source.

14. International Transfers

Before public launch, the Operator must identify hosting and processor locations and implement required contractual or statutory transfer mechanisms for jurisdictions that require them.

15. Changes

This Policy may be updated. Material changes will be communicated reasonably. A new notice or consent will be used where required.

Contact

All legal, privacy, copyright, safety, account-appeal, and policy notices should be sent to legal@goatyd.io. The Platform Operator may route a request internally without requiring separate public email addresses.