Privacy Policy – OhMyGoat

Last updated: [22/03/2025]

1. Who we are

OhMyGoat is a service operated by Little Black Box, a simplified joint-stock company (SASU) headquartered at:
58 rue de Monceau, 75008 Paris, France
Email: contact@ohmygoat.io

We are committed to protecting your personal data and ensuring transparency about how we use it.

2. What data we collect

We only collect the data strictly necessary to operate and improve the service:

Email address – to create and manage your account
Usage data – such as notifications received, plan type (freemium or premium), and activity logs
Telegram ID (optional) – only if you choose to connect your account to the OhMyGoat Telegram Bot
Payment-related identifiers – handled via Stripe, our payment processor (we do not store your card data)

3. How we use your data

We use your personal data for the following purposes:

To provide and operate the OhMyGoat web app
To send you notifications, alerts, and service-related communications
To manage subscriptions and payments
To provide customer support and respond to inquiries
To improve our features and user experience

4. Legal basis for processing (GDPR)

We process your data based on:

Contractual necessity – to provide access to our services
Legitimate interest – to improve our platform and communicate with users
Consent – when you opt in to connect your Telegram account

5. Data retention

We retain your data only as long as necessary:

For active accounts: data is retained as long as you use the service
For inactive accounts: data is deleted after 12 months of inactivity
You can request the deletion of your data at any time (see Section 8)

6. Data sharing

We do not sell or share your personal data with third parties for commercial purposes.

We only share data with:

Stripe, for secure payment processing
Telegram, if you choose to connect your account (Telegram ID only)
Service providers that help us operate the platform (under strict confidentiality agreements)

7. Data security

We implement appropriate technical and organizational measures to protect your data, including encryption, secure authentication, and infrastructure monitoring.

Despite our efforts, no system is 100% secure. In case of a data breach, we will notify affected users and the relevant authorities in accordance with legal requirements.

8. Your rights (under GDPR)

You have the right to:

Access your personal data
Request correction or deletion
Object to or limit processing
Withdraw consent (for optional features like Telegram)
Request data portability

To exercise your rights, contact us at: contact@ohmygoat.io

9. Cookies & tracking

We use minimal cookies strictly for functionality (e.g., session management).
We do not use tracking or advertising cookies.

10. International transfers

We may store or process data outside the EU via trusted third-party providers (e.g., Stripe), in compliance with the GDPR and standard contractual clauses where applicable.

11. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or legal obligations. Any changes will be published on this page, and we may notify you by email if significant updates occur.

12. Contact

If you have any questions about this Privacy Policy or how your data is handled, you can contact us at:
📩 contact@ohmygoat.io
📍 Little Black Box – 58 rue de Monceau, 75008 Paris, France