Privacy Policy

1. Two Roles: Business and Service Provider

Go1000.ai decides how it uses information about visitors to Go1000.ai's own websites and about the businesses that sign up (our "customers"). For that information, this policy is our privacy notice.

Our customers decide how they use information about their own clients and website visitors (for example an appraiser's clients). Go1000.ai processes that information only on the customer's behalf and instructions, as their service provider / processor, under our Data Processing Agreement. Each customer's own privacy policy, shown on its website, explains its practices. If you are a client of a business that uses Go1000.ai, please contact that business first; we will help it answer you.

2. What We Collect

• Customer account details: name, email, phone, business name, office address, license type and number, team members, and sign-in records (including two-step sign-in).
• Billing details: plan, add-ons, invoices and payment status. Card and bank details are collected and stored by Stripe; we see only the type, last four digits and expiry.
• Business content: website text and images, price lists, policies, AI knowledge-base answers, posts and media.
• Customers' client data (processed for customers): names, contact details, property addresses, order details, uploaded documents, signed engagement records (name, time, IP address, browser, version and language), messages, emails, texts, call recordings and transcripts, payments status, and portal activity.
• Property information: public-record facts about a property address (for example living area, lot size, year built) from property-data providers, used for quoting and logistics.
• Connected-account data: when a customer connects Facebook, Instagram, WhatsApp, TikTok, Google Business Profile or LinkedIn, access tokens and the data those platforms allow for the features used (Section 5).
• Requests and messages to us: pilot or contact forms, support tickets, privacy requests, and setup-assistant conversations.
• Device and usage data: IP address, browser, pages visited, actions, approximate location derived from IP, and error and security logs. On customers' websites, privacy-friendly page-view statistics without cookies (Section 9).

We do not knowingly collect Social Security numbers, full bank or card numbers, or birth dates through forms, and we ask clients to black them out before uploading. Portal messages and AI chats are checked for those patterns, which are hidden before they are saved or shown to the AI.

3. How We Use It

• To provide the service: websites, quotes, orders, scheduling, portals, messages, texts, calls, posts, payments, reports and support.
• To bill customers, prevent fraud and abuse, secure accounts and keep audit records.
• To run AI features for the customer (Section 6).
• To send service messages (receipts, renewal and trial reminders, security alerts, usage alerts) and, for customers and prospects who agreed, news about Go1000.ai (you can unsubscribe anytime).
• To improve Go1000.ai using aggregated or de-identified usage information.
• To comply with law, respond to lawful requests and protect rights and safety.

We keep personal information only for these purposes, and only as long as needed for them (Section 10).

4. Who We Share It With

Service providers (subprocessors) that run parts of Go1000.ai under contracts that require confidentiality, security and use only for our instructions: hosting and database, payments, email, phone and texts, AI, spam protection, maps and address search, and property data. The current list, with what each does, is on the Subprocessors page.

Platforms a customer connects, to carry out what the customer asks (for example publishing a post or sending a WhatsApp reply).

The customer whose client you are, and the people the customer chooses (for example its team, or a co-party the client authorizes).

Legal and safety: when the law requires it, or to protect rights, safety and the security of the service. We review every government request for legality, challenge overbroad requests, disclose only what is required, and tell the affected customer first unless the law forbids it.

Business transfers: to a successor in a merger, acquisition or sale of assets, under this policy.

We never sell personal information or share it for cross-context behavioral advertising, and we never share one customer's data with another customer or with our other products.

5. Connected Social and Messaging Accounts

A customer connects its own accounts and can disconnect them at any time in Settings → Connections. With the permissions the customer grants, Go1000.ai:

• Facebook Pages and Instagram: lists the Pages and Instagram accounts the customer manages so it can pick one; publishes the posts, images, carousels and videos the customer creates or approves; reads the customer's own post results (views, reach, likes, comments, shares, followers) to show results and suggestions; and receives and sends messages in the customer's Page and Instagram inbox so the customer (or its AI assistant) can reply.
• WhatsApp: sends and receives messages on the customer's own WhatsApp Business number.
• TikTok, Google Business Profile, LinkedIn: publishes the customer's posts to its own account, profile or company page, reads their results, and, on Google, shows and replies to the customer's reviews.

We use this data only to provide these features to that customer. We do not sell it, use it for advertising, or share it with other customers. Tokens are stored encrypted. When an account is disconnected, its tokens are deleted and collection stops; to request deletion of data received from a platform, see Data Deletion.

Google: Go1000.ai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. AI Chat, AI Phone and Call Recording

Go1000.ai's assistants (including Nova, our own assistant on Go1000.ai's websites, each customer's website and portal assistant, and the AI phone receptionist) always say they are AI. Conversations are sent to our AI providers only to produce the answer, are not used to train their models, and are saved to the customer's account (for a customer's client, in that order's records).

The AI phone receptionist tells callers at the start that it is an AI assistant and that the call is recorded and transcribed, and offers a message or callback instead if the caller objects. We do not create voiceprints or use voice for identification.

More detail is in the AI Disclosure.

7. Texts and Calls

Businesses using Go1000.ai text only people who agreed to receive texts, for the purpose they agreed to. Reply STOP to stop texts from that business and HELP for help. Message and data rates may apply. Details are in the Text Messaging Terms.

We don't share mobile numbers or text-message opt-in data with third parties or affiliates for marketing or promotional purposes. Text consent records are used only to send the messages consented to and to prove that consent.

8. Financial-Institution Customers (GLBA and the FTC Safeguards Rule)

Some customers, including real estate appraisers, are "financial institutions" under the Gramm-Leach-Bliley Act and the FTC Safeguards Rule (16 CFR Part 314). For them, Go1000.ai is a service provider: we use their clients' nonpublic personal information only to provide the service, never reuse or redisclose it except as the law allows, and maintain the safeguards described on our Security page. Each customer gets a written information security program and data agreement in Settings → Security Program, and we tell the customer promptly about any security event affecting its clients' information so it can meet its own notice duties (including notice to the FTC within 30 days for events affecting 500 or more people).

9. Cookies, Analytics and Do Not Track

We use only the cookies needed to run the service (sign-in, security, language) and a first-party cookie that remembers which campaign or site brought a visitor to a customer's website, so the customer can see where its clients come from. Customers' websites use cookie-free page-view statistics. We don't use advertising cookies, tracking pixels or cross-site tracking, so there is nothing to opt out of; we also honor Global Privacy Control signals. Details: Cookies and Your Privacy Choices.

10. How Long We Keep It

• Customer account and billing records: while the account is active, then as long as tax and accounting law requires (generally 7 years for billing records).
• Customer Data (including customers' clients' information): while the account is active and as the customer directs. Appraisal orders and documents are archived, never deleted, while active, and the customer sees the retention date its profession requires (at least 7 years after delivery, longer during litigation). After a plan ends we keep Customer Data 90 days so the customer can export it, then delete it.
• Text and call consent records: as long as needed to prove consent (at least 5 years after the last message).
• Security and audit logs: up to 2 years.
• Data from connected platforms: refreshed or removed as each platform requires (for example, within 30 days for cached place details), and deleted when the account is disconnected.

Backups are encrypted and roll off on their normal schedule.

11. Security and Breach Notice

We protect information with encryption in transit and at rest, per-customer separation enforced in the database, required two-step sign-in for Admin, role-based access, encrypted secrets, audit logs, monitoring and backups. See Security. No system is perfectly secure.

If a breach affects personal information, we notify affected customers without undue delay (our target is within 72 hours of confirming it) with what we know and what we are doing, and we notify individuals and regulators where the law makes that our duty (for example within 30 days under Florida law).

12. Your Privacy Rights

Depending on where you live, you may have the right to know and access the personal information we hold about you, to correct it, to delete it, to get a portable copy, to opt out of sale, sharing for targeted advertising and certain profiling (we do none of these), to limit the use of sensitive information (we use it only as needed to provide the service), and to not be discriminated against for using these rights. These rights come from laws such as the California Consumer Privacy Act (as amended by the CPRA) and the privacy laws of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Florida and other states, as they apply to us.

How to make a request: use the privacy request form, or email info@go1000.ai. We confirm receipt within 10 business days and respond within 45 days (we may extend once by 45 days and will tell you why). We verify requests by matching information we already have, usually by a link sent to your email; an authorized agent must show your signed permission. If we deny a request, you may appeal through the same form and we answer within 45 days (Colorado, Connecticut and Virginia residents may then contact their attorney general).

If you are a customer's client, your request is usually for that business; we forward it to them and help them respond.

California notice at collection: the categories we collect are in Section 2; the purposes in Section 3; retention in Section 10. We have not sold or shared personal information in the past 12 months. California's "Shine the Light" law: we do not share personal information with third parties for their direct marketing.

13. Children

Go1000.ai is for businesses and is not directed to children under 16. We do not knowingly collect information from children under 13; if we learn we did, we delete it.

14. Where Information Is Stored

Go1000.ai serves businesses in the United States and its territories. Information is stored and processed in the United States. Our website content may be delivered through global networks for speed.

15. Changes

We post changes here with a new date. For material changes we email customers in advance (at least 30 days for changes that expand how we use information already collected).

16. Contact

Online Commerce Hub, LLC, doing business as Go1000.ai, 3801 E Avalon Park Blvd, Suite 200, Orlando, FL 32828. Privacy requests and questions: the privacy request form or info@go1000.ai; phone (321) 485-7779. Other questions: contact us. This policy is available in English and Spanish and in an accessible format; see our Accessibility Statement.