Gomi Privacy Policy

Technical version effective September 5, 2026.

1. What Gomi is and how we protect your business

Gomi is an operating system built for One-Person Companies (OPCs). Our foundational commitment is privacy by isolation: your company data, clients, tasks, and business memory reside within strictly isolated tenant boundaries. Your information is never mixed with other organizations or exposed to competitors.

2. Data we process

To establish and run your digital office, we process:

• Account data: Name, email address, verification status, role, and operational preferences.
• Company data: Business name, objectives, departments, team members, and business context placed in your Inbox or Memory.
• Operational records: Tasks, instructions given to Gomis, drafts, approved artifacts, and usage metrics. Payments are securely processed via Stripe; Gomi never stores full card numbers.

3. Human oversight, auditability, and AI usage

Gomi integrates deterministic utilities with artificial intelligence models to coordinate your digital specialists (El Gerente, Distribution, Construction, and Operations):

• Deterministic first: Utilities such as list filtering, formatting, and calculations execute locally in the browser or on secure servers without calling external language models.
• Language models: When a mission requires reasoning or drafting, only the minimum context strictly necessary is transmitted to vetted providers (such as Groq, OpenAI, or OpenRouter) over encrypted channels.
• Audit trail: To preserve your business continuity and organizational memory, Gomi privately retains operational logs, including the full text of questions, instructions, and answers. Operational data is protected to improve or train Gomi systems and proprietary models without compromising confidentiality or selling data.

4. Data ownership and confidentiality

All documents, contacts, facts, and artifacts generated within your workspace remain your exclusive property. We do not sell personal or business data. Your proprietary business context is never used to train external public models.

5. Retention, export, and deletion

You maintain full control over your business assets. You can export your office data in standard readable formats from Settings at any time, or request complete account deletion, triggering the permanent and irreversible removal of your private operational records.