Starter product document

Privacy Policy

This initial policy is a product-ready starting point and must be reviewed by qualified legal counsel before commercial launch.

What Gathercove stores

Gathercove stores workspace account details, project and client contact information, request responses, uploaded files, activity history, and operational records needed to provide the service.

How information is used

Information is used to authenticate workspace users, operate project collection pages, deliver files to authorized viewers, calculate usage, and produce requested notifications. Gathercove does not send uploaded file contents to third-party AI services.

Sharing and processors

Client submissions are available to the workspace that created the secure collection link. Infrastructure providers may process data only as needed to host, secure, or deliver the service. A production operator should publish its complete processor list.

Retention and deletion

Workspace users may archive projects or permanently delete a project and its stored files. Backup retention and formal account-export procedures must be defined before commercial launch.

Security

Gathercove uses password hashing, scoped authorization, high-entropy share links, server-side validation, and restricted file delivery. No service can guarantee absolute security, and Gathercove is not positioned for highly regulated records.

Contact

The production operator must add a legal entity, address, privacy contact, effective date, and jurisdiction before launch.