Key Highlights
Strict Tenant Isolation
Data for every organization is strictly isolated at the database and IAM layer. Cross-tenant leakage is prevented.
AI Privacy Boundaries
Your commercial CRM and customer data is NEVER used to train foundation or public AI models.
GDPR & Encryption
End-to-end transport encryption (TLS 1.3), full rights to export, access, and complete data erasure.
1. Data Controller & Scope
The MyGoal OS platform ('Service'), accessible at digitalinvest.biz, is operated by DigitalInvest ('we', 'us', 'our'). We act as a data controller regarding your account information, and as a data processor regarding customer CRM data you upload to the platform. We strictly adhere to the General Data Protection Regulation (GDPR EU 2016/679) and applicable international privacy standards.
2. Categories of Collected Data
We only collect data necessary to provide platform capabilities: (a) Account identity data: full name, email, password hash, organization name, workspace slug; (b) Customer & Deal data: contact details, notes, sales funnels, tasks, and lead status; (c) Documents: uploaded invoices, contracts, proposals; (d) Technical metadata: IP address, browser type, audit logs, and security telemetry for intrusion prevention.
3. Data Processing & AI Assistants
Data processing is performed based on contract fulfillment and legitimate security interests. AI assistant capabilities perform data structuring, lead scoring, and draft generation strictly upon your requests. We explicitly guarantee that tenant corporate data is never added to public training pools for LLM foundation models.
4. Multi-Tenant Isolation & Security
MyGoal OS employs strict multi-tenant isolation: every database query, document, and background task is scoped by organization_id. The platform is protected by TLS 1.3 / HTTPS encryption, server-side IAM authorization, injection guardrails, and immutable audit logs.
5. Third-Party Data Sharing
We do not sell or monetize personal data. Transfers occur solely to vetted infrastructure sub-processors: secure EU-based data centers, transactional SMTP relays for system emails, and certified Merchant of Record & payment processors (including Creem and Stripe) for B2B billing and sales tax compliance. All partners comply with GDPR and PCI-DSS standards.
6. Data Retention & Erasure
Data is retained for the active duration of your organization workspace. Organization owners may export their data or request permanent deletion of their workspace and records at any time. Unverified spam/bot accounts are purged automatically.
7. Your Rights Under GDPR
You possess all rights recognized under the GDPR: right to access, rectify inaccurate data, erasure ('right to be forgotten'), restriction of processing, data portability in standard machine-readable formats, and withdrawal of consent.
8. Contact & Data Protection Officer
To exercise your statutory rights or ask privacy inquiries, contact our security team at privacy@digitalinvest.biz or support@digitalinvest.biz. We respond to official requests within statutory 30-day limits.
Вопросы по защите персональных данных?
Служба информационной безопасности MyGoal OS ответит на официальные запросы: privacy@digitalinvest.biz