Privacy Policy

1. Who we are

GoatOS is an operations and bookkeeping platform for small manufacturers, operated by Goat Operating Systems (“GoatOS”, “we”, “us”) of 22249 Township Road 704, Valleyview, Alberta, T0H 3N0, Canada.

2. Information we collect

• Account information: name, email address, and login credentials for the people a business invites to its GoatOS account.
• Business data the customer enters or imports: products, recipes and production records, inventory, customers and suppliers, invoices, orders, financial records and uploaded documents. This data belongs to the customer business.
• Connected-account data: when a customer connects a third-party service (for example a bank feed through Plaid, or a point-of-sale or accounting service), we receive the data that service is authorized to share — for bank feeds, balances and transactions, read-only. We never receive or store customers’ bank login credentials; connections use encrypted tokens.
• Technical data: device, browser and log information needed to operate and secure the service.

3. How we use information

Only to provide and improve the service the customer signed up for: running their operations and books, syncing the accounts they connect, sending the emails they ask the platform to send, support, and security. We never sell personal or business information. We never use it for advertising, credit decisions, lending, or any purpose unrelated to operating the customer’s own business on GoatOS.

4. AI features

GoatOS offers optional AI assistant features. They are never required — every function in GoatOS works manually. Calculations such as taxes, excise and totals are always performed by deterministic software code, never generated by an AI model. AI features process a customer’s data only within that customer’s own account.

5. Sharing

We share data only with the service providers needed to run GoatOS (hosting, database, email delivery, and the integration providers a customer chooses to connect, such as Plaid, Intuit QuickBooks, Square, Stripe, Clover, PayPal, Canada Post or Envia), and only the data each needs to do its job. Each customer’s data is isolated from every other customer’s. We may disclose information if required by law.

6. Storage and security

Production data is stored in Canada. Connection tokens are encrypted at rest, access is controlled per company and per user role, and we apply reasonable technical and organizational safeguards. No system is perfectly secure; customers are responsible for keeping their own login credentials safe.

7. Retention and customer control

Business data is retained while the customer’s account is active. Customers may export their data, and may request correction or deletion of personal information, subject to legal record-keeping requirements (for example, tax and excise records a business must keep by law).

8. Your rights

Individuals may request access to, or correction of, their personal information held by GoatOS, and may withdraw consent where the law allows, by contacting us at the address above. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial law.

9. Changes

We will post changes to this policy on this page and update the date above; material changes will be announced to account holders.