Privacy policy

Who we are

GooseWorks is a growth coworker for online brands. It runs at growth.gooseworks.ai and inside the AI app you add it to. This policy covers that app, this website at gooseworks.ai and GooseWorks inside the AI apps you add it to.

GooseWorks is a product of Athina AI, Inc., 535 Mission St 14th floor, San Francisco, CA 94105, United States. Athina AI, Inc. ("GooseWorks," "we," "us" or "our") respects your privacy. In this policy, "Goose" means the GooseWorks service doing the work, and "you" means the person using it.

We take questions by email: goose@gooseworks.ai for anything about this policy, and help@gooseworks.ai for privacy rights and deletion requests.

The short version

• Goose reads the accounts you connect and never changes anything in them on its own. It changes Klaviyo or Pinterest Ads only when you ask for that change in your AI app. When you disconnect Klaviyo, TikTok or Amazon through Windsor, Goose also asks them to end its access.
• Your AI app reads your Google Analytics numbers, your Meta and Pinterest ad account data and your Klaviyo setup only when you ask Goose about them there, under that app's own terms. Google Ads, Shopify, TikTok, Triple Whale, Stay AI and OneText numbers stay in GooseWorks.
• We don't sell your data, use it for advertising or train AI models on it.
• When you disconnect an account, Goose deletes the sign-in or key it stored. For every account except Meta, it deletes the numbers it saved too.

What we collect when you use GooseWorks

• Your account. Your name and email address, and your profile picture when you sign in with Google. When you sign in by email, we send you a sign-in link. We also keep your time zone and how you first signed up.
• Sign-in sessions. Your device's IP address and browser, so we can keep you signed in and spot sign-ins that aren't yours.
• Your organization and brands. Their names, each brand's website address and the people you invite.
• What you give Goose. Files you upload, and facts and notes you save or correct about your brand.
• Share links. Public links you make to share a file or folder. Anyone with the link can open it until it expires or you turn it off.
• Feedback. What you tell us, with any files you attach.
• Requests from your AI app. A short record of each request your AI app makes to Goose and what Goose answered, so we can show what happened and fix problems.
• Payments. Stripe takes your card details on its own payment page, and we never see your card number. We keep your plan, payments, invoices and credit history.
• Emails. Records of the emails we send you, such as invitations and credit alerts.
• Technical logs. Records of requests and errors, which we use to keep GooseWorks running and to fix problems.

Your brand's website and public pages

When you add a brand, Goose reads its public website the way a visitor would. It picks up to 7 pages to read, such as the home, about, product and reviews pages. On Shopify and WooCommerce stores it also reads the public product list, up to 250 products, and on Shopify stores the shipping and refund policies. It looks up the brand's logo, colors and fonts.

Goose also reads the brand's public ads in the Meta Ad Library and the Google Ads Transparency Center, and recent public posts from the Instagram, TikTok and LinkedIn accounts its home page links to. Other links it finds, such as review sites, it saves as suggestions, and it reads them only after you approve them.

Goose sends what it reads to our AI model provider to write down facts about your brand, each with the page it came from. It keeps the pages, products, product photos, ads and posts with your brand. It reads your website again every 30 days, your public posts and reviews every week, and your products and public ads every day. You can see and correct the facts on the Brand page.

All of this is public information that anyone can see. It doesn't come through the accounts you connect.

Accounts you connect

Connecting an account is optional. You connect each one yourself on the Integrations page in GooseWorks. You approve access on that company's own screen, by adding Goose's email address to the account, or by pasting a key you make there. Goose uses each connection to show you how your business is doing, in GooseWorks and in the AI app you connect. For now it only checks that your Stay AI and OneText keys work. It also uses the Klaviyo and Pinterest Ads connections to make the changes you ask for there.

Goose asks some accounts, such as Google Ads, for access that would also let it make changes. It only reads them. Goose makes changes in Klaviyo and Pinterest Ads only when you ask for that change in your AI app, and it never changes anything on its own. When you disconnect Klaviyo, TikTok or Amazon through Windsor, Goose also asks them to end its access. For Google, Shopify, Meta, Pinterest, Triple Whale, Stay AI and OneText, Goose deletes its stored sign-in or key. Goose encrypts the sign-in or key for each account with AES-GCM before it stores it.

Google Analytics

You connect a Google Analytics property by signing in with Google, or by adding Goose's own Google email address to the property.

What Goose reads. The Analytics accounts and properties you can see. The property you choose: its name, currency and time zone, and its site numbers, such as visits, people, engaged visits, page views, key events, add-to-carts, checkouts, purchases and revenue. Goose splits these by day, channel, source, campaign, landing page, page, device, country and new or returning visitors. They are totals, and Goose reads nothing about individual visitors.

What Goose keeps. The property's name, a summary of its last 30 days, and its daily numbers. Goose saves the last 60 days when you connect, then adds each new day.

When you disconnect. Goose deletes the stored Google sign-in and every number it saved for the property. To end Google's access too, remove GooseWorks from your Google Account at myaccount.google.com/connections. If you added Goose's email address, remove it from the property in Google Analytics.

Google Ads

You connect a Google Ads account by signing in with Google, or by adding Goose's own Google email address to the account.

What Goose reads. The ad accounts your Google account can open, including accounts under a manager account. For the account you choose: its name and currency, its spend, clicks and conversions over the last 30 days, and how many campaigns are live. Google offers one level of access to Google Ads, and it also allows changes. Goose sends only search requests, and never creates, edits or deletes anything in Google Ads.

What Goose keeps. The account's name and that summary. Its campaigns, ad groups, keywords and conversion goals, with their settings and budgets. Each day's spend, impressions, clicks, conversions, conversion value and share of searches for each campaign and ad group, and the search terms people used. Goose saves the last 60 days when you connect, then adds each new day.

When you disconnect. Goose deletes the stored Google sign-in and everything it kept from the account. To end Google's access too, remove GooseWorks from your Google Account, or remove Goose's email address from the Google Ads account.

How we handle Google user data

• We use data from Google only to show you how your website and Google ads are doing, in GooseWorks and in the AI app you connect to GooseWorks.
• We don't send Google data to AI model providers ourselves. Your AI app gets your Google Analytics numbers when you ask Goose about them there, under that app's own terms.
• We don't use Google data to train AI models.
• We don't sell Google data, use it for advertising or give it to other customers.
• The Goose team looks at your Google data only to give support you ask for, to keep the service safe, or when the law requires it.
• Our hosting and database providers store and process Google data for us, and for nothing else.

GooseWorks' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Shopify

You connect a store by installing GooseWorks from Shopify, or from the Integrations page.

What Goose reads. Your store's name, time zone and currency. Your products, with each variant's price, compare-at price, cost and stock. Your orders from the past 60 days when you connect, then each new day's orders: what was in each one, its totals, discounts and refunds, and when it shipped. Goose also reads your discounts and their codes, your shipping zones, and any Shopify Payments disputes.

Goose reads each order's customer ID only to turn it into a scrambled key and to see whether it was that customer's first order. Goose doesn't read your customers' names, emails, phone numbers or addresses.

What Goose keeps. What it read, and its Shopify access. Goose keeps each order under the scrambled customer key, never with a name, email or address. It reads new orders and changes every day, and it renews its Shopify access before the access runs out.

When you disconnect. Goose deletes its stored Shopify access and everything it read from your store. GooseWorks stays installed in your store until you uninstall it in your Shopify admin. When you uninstall it, Shopify tells us, and Goose stops reading your store. Two days later Shopify asks us to erase the store's data, and we delete everything Goose kept from it.

Your customers' privacy requests. Shopify passes on your customers' requests to see or delete their data. Goose keeps no names, emails, phone numbers or addresses, only orders under a scrambled customer key. When a customer asks to see their data, the Goose team emails you the orders Goose keeps under that customer's key. When a customer asks Shopify to erase their data, Goose deletes every order it keeps under that customer's key.

TikTok

You connect your own TikTok account with Login with TikTok.

What Goose reads. Your display name and username, your follower, like and video counts, and your 20 newest public videos with their titles or captions, views and links.

What Goose keeps. Those counts, your 5 newest videos with their views and links, with captions cut to 150 characters, and its TikTok access. Goose reads them when you connect and when you press Check again.

When you disconnect. Goose asks TikTok to end its access, then deletes the stored access and everything it saved.

Goose uses your TikTok data only to show you how your account and videos are doing. It never posts to your TikTok account, and it doesn't use your data to build a profile of anyone.

Pinterest Ads

You sign in with Pinterest, then choose one ad account that Pinterest account can see. Goose asks Pinterest for three permissions: to read your ads and their results (ads:read), to make and change campaigns when you ask (ads:write), and to read your Pinterest account's name (user_accounts:read).

What Goose reads. The ad accounts your Pinterest account can see, with their names and currencies, and for the one you choose its live campaigns and its spend, paid impressions, outbound clicks and conversions over the last 30 days.

What Goose keeps. The chosen ad account's name, those totals and its Pinterest access. Its campaigns, ad groups and ads with their settings, and each day's spend, paid impressions, outbound clicks and conversions for each of them. Goose saves the last 60 days when you connect, then adds each new day.

When you disconnect. Goose deletes its stored access and everything it saved. Pinterest doesn't let apps like Goose end their own access, so to end it on Pinterest too, remove GooseWorks from the apps connected to your Pinterest account.

What Goose changes. Goose changes only what you ask for in your AI app. It makes a campaign, renames one, pauses, starts or archives one, or sets its budget or last day. Pinterest doesn't let anyone bring back an archived campaign, so Goose asks first. A campaign Goose makes starts paused, so it spends nothing until you turn it on. Goose never changes your Pins.

When you ask Goose about your Pinterest ads in your AI app, that app reads your campaigns, ad groups and ads with their settings and results, under its own terms.

Meta

You connect Meta with Facebook Login for Business and choose which ad accounts Goose may read. Goose asks Meta for two permissions: to read your ads and their results (ads_read), and to see the list of Facebook Pages you manage (pages_show_list). It reads your Meta user ID to tell apart the Facebook sign-ins connected to a brand. A business can also paste a System User token or a person's long-lived token instead. Goose keeps it encrypted, only reads with it, and uses no other permission it carries.

What Goose reads. Your Meta ad accounts' setup and results: the accounts, campaigns, ad sets and ads, with their settings, budgets, schedules, targeting, ad copy, pictures and Meta's review notes; their daily results, such as spend, impressions, reach, clicks and purchases; and your Meta pixel's checks. Goose reads the last 60 days when you add an ad account, then once a day.

What Goose keeps. All of the above, and a copy of each ad's thumbnail picture.

Your Pages. Goose reads the names of the Facebook Pages you chose, with their linked Instagram accounts, only when your AI app asks for them. It doesn't keep them.

When Goose checks your ads against their pages. Goose reads up to 8 landing pages that your ads with recent spend send people to, directly and through Firecrawl. For each page, it sends the headline, text and picture of up to 3 of its ads, with the page's text, to our AI model provider to compare them.

When you disconnect. Goose deletes its stored Meta sign-in and stops reading. The results it already read stay with your brand, so your history stays whole, and your AI app can still read them. To delete them, delete the brand under its Settings, or email us to delete your organization. To remove GooseWorks on Meta's side too, remove it under Business integrations in your Facebook settings.

Klaviyo

What Goose reads. Your Klaviyo account's name and default sender, your flows and their steps, your email campaigns and who they send to, your lists and segments by name, your metric names and your email templates. Goose doesn't read your subscribers or their profiles.

What Goose keeps. The account's name, how many flows, campaigns and lists you have, and its Klaviyo access, which it renews before the access runs out. What it reads to find gaps goes to your AI app when you ask, under that app's own terms.

What Goose changes. Goose makes only the fixes you ask for in your AI app. It can turn a flow on or off, add a draft email to a flow, make or fix an email template, make a draft campaign, or change who a draft campaign sends to. Goose never sends or schedules a campaign, and it turns a flow on only when you say yes.

When you disconnect. Goose asks Klaviyo to end its access, then deletes the stored access and the counts.

Triple Whale

What Goose reads. With the API key you give it: one recent day of the store's summary numbers, to check that it can read them; the store's time zone; the store's daily spend, sales, orders and new customer orders for each channel and campaign; and the store's daily net sales, orders, new customer orders and refunds.

What Goose keeps. The store's ID, its currency and time zone, the encrypted key, how many numbers the last check found, and those daily numbers with each campaign's name.

When you disconnect. Goose deletes the stored key and the daily numbers it saved. To end the key in Triple Whale too, revoke it there under Data, then APIs.

Amazon through Windsor

What Goose reads. Windsor, a data partner, holds the access you approve on its page. Goose asks Windsor only which Amazon accounts are linked. It doesn't read your Amazon numbers yet.

What Goose keeps. The encrypted link and the IDs of the linked accounts.

When you disconnect. Goose asks Windsor to remove the linked accounts, then deletes the link.

Stay AI

What Goose reads. With the API key you give it: how many active subscriptions and orders Stay AI reports, to check that it can read them. Stay AI's answer also carries a few sample subscriptions and orders, which Goose doesn't keep.

What Goose keeps. The store address you type, the encrypted key and those two counts.

When you disconnect. Goose deletes the stored key and the counts. To end the key in Stay AI too, revoke it there under Settings, then API Keys.

OneText

What Goose reads. With the key you give it: one recent week of a revenue report, to check that it can read it. Goose doesn't keep the report.

What Goose keeps. The Account Token you paste, the encrypted key and the day it last checked.

When you disconnect. Goose deletes the stored key. To end the key in OneText too, delete it there under Settings, then API Credentials.

Your AI app

You can add Goose to an AI app you choose, such as Claude, ChatGPT, Codex or Cursor. The app signs in through your browser, and you pick the organization it may use.

Goose sends your AI app what it needs to answer you, such as your brand facts, your Meta results or your Google Analytics numbers, only when you ask Goose something there. That app is run by another company, and its own terms and privacy policy cover what it does with what it receives.

To disconnect an AI app, remove GooseWorks from that app's connectors. To end its access on our side too, email help@gooseworks.ai.

How we use your information

• To run GooseWorks for you: read your brand's website, show your numbers, research the competitors you choose and answer your AI app.
• To keep accounts safe, stop abuse and fix problems.
• To send the emails you need, such as sign-in links, invitations, problem alerts and reports you asked for.
• To bill you for your plan and credits.

We don't use your data for advertising, and we don't sell it.

AI models

Goose uses AI models from Anthropic and OpenAI. Anthropic's models read your website, public pages and the text you share from your AI app to write your brand facts, research the competitors you choose, compare your Meta ads with the pages they send people to, and look at stills from videos you upload to describe each scene. OpenAI's models build a search index of what Goose reads for your brand, and of your photos and videos.

We send them only what that work needs. We don't send numbers from Meta, Google Analytics, Google Ads, Shopify, TikTok, Klaviyo, Pinterest, Triple Whale, Stay AI or OneText to them ourselves. When you ask Goose about them in your AI app, that app reads your Google Analytics numbers and your Meta ad accounts' setup and results: the accounts, campaigns, ad sets and ads, with their settings, budgets, schedules, targeting and ad copy, their results, the pixel's checks, and the Facebook Pages and Instagram accounts linked to them. It also reads your Pinterest campaigns, ad groups and ads with their results, and your Klaviyo flows, campaigns, lists, segments and email templates. It reads them under its own terms. Google Ads, Shopify, TikTok, Triple Whale, Stay AI and OneText numbers stay in GooseWorks.

We do not use your private workspace content to train general-purpose AI models, and we don't use data from your connected accounts to train any AI model.

We keep a record of each request to these models and its answer in Langfuse, with pictures removed, so we can find and fix mistakes.

Who else handles your data

We share your information with trusted companies that help us run our service, such as cloud hosting and AI model providers. Each one must protect it and use it only to provide its service to us.

• Cloudflare runs our servers on Workers and stores files in R2.
• PlanetScale hosts our database.
• Tinybird stores the daily numbers Goose reads from your connected accounts.
• Trigger.dev runs background work, like reading your website.
• Anthropic and OpenAI provide AI models, as described above.
• Langfuse keeps a record of requests to AI models.
• Axiom keeps our technical logs.
• Mixpanel counts which pages and buttons people use on our website, docs and app.
• Stripe takes payments.
• Resend sends our emails.
• Windsor holds the Amazon access you approve on its page.
• Firecrawl reads public web pages for Goose.
• ScrapeCreators reads public ads, public social posts and search results.
• Brandfetch finds your brand's logo and colors.
• Apify reads public Trustpilot reviews, when you approve that source.

We also share data when the law requires it, or to protect people's safety or GooseWorks itself. If GooseWorks is sold or merged, your data would move to the new owner under this policy, and we would tell you before that happens. We don't sell your data or give it to other customers.

Our backend runs on Cloudflare close to the AWS us-east-1 region, in the eastern United States.

How we protect it

• Goose encrypts each connected account's sign-in or key with AES-GCM before it stores it, with a key only our servers hold.
• Everything travels over HTTPS.
• Only people in your organization can see its brands and data. GooseWorks checks your membership on every request.
• Our request logs mask email addresses and IPv4 addresses before they are stored.
• The Goose team looks at customer data only to give support you ask for, to keep the service safe, or when the law requires it. Only verified members of our staff team can open our staff pages, and GooseWorks checks that membership on every request.
• To help with something you asked about, or to look into a problem, the Goose team can open your account as you. We log when it starts and when staff end it. It ends on its own after an hour.

How long we keep it

• We keep your account, organizations and brands until they're deleted.
• Goose keeps numbers from a connected account until you disconnect it. Meta results stay until the brand or organization is deleted.
• Limited records may be retained where required by law, such as billing and tax records.
• We keep technical logs and records of AI requests for a limited time, to run GooseWorks and fix problems. Records of what your AI app asked Goose, and what Goose answered, stay until the organization is deleted.
• Deleting data from backups follows the backup rotation, so it doesn't happen at once.

Deleting your data

• Disconnect an account. On the Integrations page, open the account and press Disconnect. Each account above says what goes when you do.
• Disconnect an AI app. Remove GooseWorks from that app's connectors. To end its access on our side too, email help@gooseworks.ai.
• Delete a brand. Owners and admins can delete a brand under its Settings. Its work stops at once. About 30 minutes later, Goose starts erasing everything it kept for the brand: brand facts, files, research, connected-account data and Meta results.
• Delete an organization or your account. Email help@gooseworks.ai from the address you sign in with, and we'll delete it. Access ends at once. We keep the organization for 30 days, and so does an organization where you were the only member. Email us within those 30 days to get it back. After that, it's deleted for good.

Apart from that 30-day window, deleting can't be undone. We keep limited records where the law requires them, as described above. The data deletion page walks through each step.

Access to TikTok, Klaviyo and Amazon through Windsor ends when you disconnect. To end access on the other company's side too, remove GooseWorks from your Google Account, uninstall it in your Shopify admin, remove it under Business integrations in your Facebook settings, revoke your API key in Triple Whale under Data, then APIs, revoke it in Stay AI under Settings, then API Keys, or delete it in OneText under Settings, then API Credentials.

Your rights

You can ask us what personal data we hold about you, ask for a copy, ask us to correct or delete it, or object to how we use it. Email help@gooseworks.ai. Depending on where you live, you can also complain to your local data protection authority.

Cookies

This website counts visits with Google Analytics and Mixpanel, which set their own cookies, and Ahrefs, which sets none. Our docs use Mixpanel only. Each of these gets the page you visit, your browser and an approximate location. Mixpanel also sees which links and buttons you click, but never what you type.

If you accept cookies in the banner, this website also loads the Meta Pixel, which sets a cookie to measure our ads on Facebook and Instagram. If you decline, it never loads. You can choose again at any time under Cookie settings at the bottom of every page.

The GooseWorks app uses cookies to keep you signed in, to protect your sign-in and to remember your theme and whether the side menu is open. It also uses Mixpanel, which sets its own cookie, to see which pages and buttons people use. Mixpanel gets your name and email so we can tell accounts apart, and never what you type. Mixpanel's cookie is shared by this website, our docs and the app, so once you sign in, your earlier visits on that browser are linked to your account.

Children

GooseWorks is for businesses. Our service is not intended for anyone under 16 years old, and we don't knowingly collect data about children.

Changes to this policy

When we change this policy, we change the date at the top. If a change affects how we use data you've already given us, we'll email you before it takes effect.

Contact

GooseWorks is a product of Athina AI, Inc., 535 Mission St 14th floor, San Francisco, CA 94105, United States. Email us at goose@gooseworks.ai with questions, or at help@gooseworks.ai for privacy rights and deletion requests.