Privacy Policy

Welcome to GoGrab Space (the "Platform"), an AI-powered digital platform building service operated by GOGRAB LLC ("GOGRAB," "we," "us," or "our"), a limited liability company organized under the laws of the State of Florida, United States.

GoGrab Space enables users to create, design, and manage digital experiences — including websites, web applications, online stores, and interactive modules — using advanced artificial intelligence and machine learning technologies. Our Platform leverages AI systems from leading providers to generate content, suggest designs, automate workflows, and power autonomous agents that assist you in building your digital presence.

This Privacy Policy ("Policy") describes how we collect, use, disclose, and safeguard your information when you visit our Platform, use our services, or interact with our AI-powered features, including but not limited to Vibe (our AI builder), Vitto (our autonomous AI agent), and the AI Generation Hub. This Policy applies to all information collected through the Platform and any related services, sales, marketing, or events.

Effective Date: February 18, 2026
Last Updated: February 18, 2026

GoGrab Space is not intended for children under the age of 16. We do not knowingly collect personally identifiable information from children under 16 years of age. If you are under 16, please do not use the Platform or provide any personal information to us.

In accordance with the Children's Online Privacy Protection Act (COPPA) and similar applicable laws, if we become aware that we have collected personal data from a child under the age of 13, we will take immediate steps to delete such information from our servers. For children between 13 and 16, we require verifiable parental or guardian consent before processing their data.

If you are a parent or guardian and you believe that your child has provided us with personal information without your consent, please contact us at privacy@gograb.io so that we can take the necessary actions.

We collect information about you in various ways when you use GoGrab Space. The types of information we collect depend on how you interact with our Platform and which features you use. Below is an overview of the categories of information we collect:

Personal Identification Information

• Full name
• Email address
• Username and password (encrypted)
• Profile photograph (if provided)
• Phone number (if provided for two-factor authentication or communication preferences)

Account and Profile Data

• Account creation date and account type (free, premium, enterprise)
• Subscription and plan details
• Workspace and space configuration preferences
• Language and locale preferences
• Roles and permissions within shared workspaces

Payment and Billing Information

• Billing address
• Payment method details (processed securely through third-party payment processors)
• Transaction history and invoice records
• Tax identification numbers where required by law

In addition to account registration data, we collect information that you voluntarily provide to us when using the Platform:

User-Generated Content

• Website content, page layouts, and design configurations you create using the Platform
• Text, images, videos, and other media you upload or generate
• AI prompts, instructions, and queries you submit to our AI features
• Templates, modules, and components you build or customize
• Domain names and custom configurations

Communications

• Messages, feedback, and support requests you send to us
• Comments, reviews, and ratings you post on the Platform
• Responses to surveys, questionnaires, or research participation
• Communications with our AI agents, including Vitto chat interactions

Survey and Research Data

• Responses to optional surveys about user experience and feature preferences
• Participation in beta testing programs and feedback provided
• Feature request submissions and improvement suggestions

When you access or use the Platform, we automatically collect certain information about your device, browsing activity, and usage patterns:

Device and Technical Information

• IP address and approximate geographic location
• Browser type, version, and language settings
• Operating system and device type (desktop, mobile, tablet)
• Screen resolution and viewport size
• Unique device identifiers
• Time zone and local date/time settings

Usage and Interaction Data

• Pages visited, features used, and actions taken within the Platform
• Session duration, frequency of visits, and navigation patterns
• Referring URLs and exit pages
• Click patterns, scroll depth, and interface interactions
• Search queries within the Platform
• Feature adoption and usage frequency

Analytics and Performance Data

• Page load times and application performance metrics
• Error logs and crash reports
• API response times and service availability statistics
• Resource utilization metrics for your spaces and projects

Cookies and Similar Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information automatically. For detailed information about our use of these technologies, please see the Cookies & Tracking Technologies section below.

GoGrab Space incorporates advanced artificial intelligence and machine learning technologies as core features of the Platform. This section explains how your data is processed in connection with these AI-powered capabilities.

Data Processed by AI Features

When you use our AI features, the following types of data may be processed:

• Prompts and Instructions: Text inputs, commands, and natural language instructions you provide to AI features, including requests to Vibe (AI builder), Vitto (autonomous agent), and the AI Generation Hub.
• Generated Content: Outputs produced by AI systems on your behalf, including website layouts, page designs, text content, code snippets, module configurations, and visual elements.
• Usage Patterns: How you interact with AI features, including the sequence of operations, feature preferences, and workflow patterns.
• Interaction Logs: Records of conversations and interactions with AI agents, including chat history with Vitto, command sequences, and session transcripts.
• Platform Building Inputs: Content, assets, preferences, and configuration data you provide when using AI to build or modify your digital experiences, including brand guidelines, content specifications, and design preferences.

How AI Processes Your Data

Our AI systems process your inputs to generate outputs in the following ways:

• Vibe (AI Builder): Processes your natural language descriptions and design preferences to generate complete website structures, page layouts, module configurations, and visual designs. Vibe analyzes your requirements to produce production-ready digital experiences.
• Vitto (Autonomous Agent): Processes task instructions, project context, and workspace state to execute multi-step operations autonomously, including code generation, file management, content creation, and workflow orchestration. Vitto maintains session context to provide coherent, continuous assistance.
• AI Generation Hub: Processes content requests to generate text, images, translations, and other media using various AI models. The Hub routes requests to the most appropriate AI provider based on the task type and quality requirements.

To deliver our AI-powered features, GoGrab Space integrates with the following third-party AI service providers. We are committed to transparency about which providers process your data and under what conditions.

OpenAI (GPT Models)

• Services Used: GPT-4, GPT-4o, and related models for text generation, content creation, code generation, and natural language processing.
• Data Shared: User prompts, contextual information necessary for content generation, and relevant workspace metadata needed to fulfill requests.
• Data Protection: We use OpenAI's API services, which are governed by a Data Processing Agreement (DPA). Data submitted through the API is not used by OpenAI to train or improve their models.

Anthropic (Claude Models)

• Services Used: Claude models for advanced reasoning, code analysis, content generation, and powering our autonomous agent Vitto.
• Data Shared: User instructions, task context, workspace state information, and file contents when requested by the user for code review or content generation.
• Data Protection: We use Anthropic's API services under a Data Processing Agreement. API data is not used by Anthropic for model training.

Google (Gemini Models)

• Services Used: Gemini models for multimodal content generation, image analysis, and supplementary AI processing.
• Data Shared: User prompts, images or media submitted for analysis, and content generation requests.
• Data Protection: We use Google's API services under enterprise terms and a Data Processing Agreement. API data is not used by Google for model training under our enterprise agreement.

Provider Selection and Data Routing

Our Platform uses a smart routing system that automatically selects the most appropriate AI provider based on the nature of your request, performance requirements, and cost efficiency. You may not always know which specific provider processes a given request, but all providers are bound by equivalent data protection standards through our DPAs.

We want to be transparent about how your data may be used in connection with improving our AI capabilities. This section explains our practices regarding AI model training and your rights related to this processing.

How We May Use Your Data for AI Improvement

• Anonymized and Aggregated Data: We may use anonymized and aggregated data derived from user interactions with our AI features to improve the quality, accuracy, and performance of our Platform's AI capabilities. This data is stripped of all personally identifiable information before use.
• Pattern Analysis: We may analyze general usage patterns — such as common types of requests, frequently used features, and typical workflow sequences — to optimize our AI routing, improve response quality, and develop new features.
• Quality Assurance: We may review AI interactions (in anonymized form) to identify and correct errors, biases, or quality issues in AI-generated outputs.

Your Right to Opt Out

You have the right to opt out of having your data used for AI improvement purposes. To exercise this right:

• Navigate to your Account Settings and locate the "AI Data Preferences" section.
• Toggle off the "Allow anonymized data for AI improvement" option.
• Alternatively, contact us at privacy@gograb.io with the subject line "AI Data Opt-Out."

Once you opt out, we will cease using your data for AI improvement within 30 calendar days. Data that has already been anonymized and aggregated prior to your opt-out request cannot be retroactively removed, as it is no longer identifiable to you.

GoGrab Space uses automated processing, including AI and machine learning algorithms, to make certain decisions that may affect your experience on the Platform. We are committed to transparency about these automated processes and your rights regarding them.

Automated Decisions We Make

• Content Recommendations: Our AI analyzes your usage patterns, project types, and preferences to recommend templates, modules, design elements, and features that may be relevant to your projects.
• Quality Scoring: AI systems evaluate generated content for quality, coherence, accessibility, and adherence to web standards. These scores may influence which outputs are presented to you and in what order.
• Spam and Abuse Detection: Automated systems analyze user behavior and content to detect and prevent spam, fraud, abuse, and violations of our Terms of Use. This may include automated suspension of accounts exhibiting suspicious activity.
• Resource Allocation: AI systems manage computational resource allocation based on usage patterns, subscription tiers, and system demand to ensure optimal Platform performance.
• Content Moderation: Automated tools review user-generated content and AI outputs for compliance with our content standards and applicable laws.

Your Right to Human Review

You have the right to request human review of any significant automated decision that affects your account, access to features, or use of the Platform. To request a human review:

• Contact us at privacy@gograb.io with the subject line "Human Review Request."
• Include a description of the automated decision you wish to contest.
• We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

Contesting Automated Decisions

If you believe an automated decision has been made in error or is unfair, you may contest it by:

• Submitting a detailed explanation of why you believe the decision is incorrect.
• Providing any relevant evidence or context that supports your position.
• Requesting a specific remedy (e.g., account reinstatement, content restoration).

We use the information we collect for the following purposes:

Service Provision and Operations

• To create and manage your account and authenticate your identity
• To provide, maintain, and improve the Platform and its features
• To process your transactions and manage your subscriptions
• To deliver AI-powered services, including content generation, design assistance, and autonomous agent operations
• To host, display, and distribute the digital experiences you create
• To provide customer support and respond to your inquiries

Platform Improvement

• To analyze usage trends and improve Platform functionality
• To develop new features, products, and services
• To optimize AI model performance and accuracy (subject to your opt-out rights)
• To conduct research and analysis for product development
• To test new features and conduct A/B testing

Communication

• To send you service-related notices, updates, and security alerts
• To send marketing communications (with your consent, where required)
• To respond to your comments, questions, and support requests
• To send surveys and request feedback about your experience

Security and Legal Compliance

• To detect, prevent, and address fraud, abuse, and security incidents
• To enforce our Terms of Use and other policies
• To comply with applicable laws, regulations, and legal processes
• To protect the rights, privacy, safety, and property of GOGRAB, our users, and the public

We may share your information in the following circumstances:

Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Cloud hosting and infrastructure providers (e.g., AWS, Google Cloud, Railway)
• Payment processing services
• AI service providers (as detailed in the Third-Party AI Providers section)
• Analytics and monitoring services
• Email delivery and communication platforms
• Customer support tools

All service providers are contractually bound to use your data only for the purposes specified by us and in accordance with this Privacy Policy.

Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Subpoenas, court orders, or other legal process
• Requests from law enforcement or government agencies
• To protect our rights, privacy, safety, or property
• To investigate or prevent suspected illegal activities or violations of our Terms of Use

Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

GoGrab Space may collect your mobile phone number when you voluntarily provide it during account registration or through your account settings. If you opt in, we may use your mobile phone number to send you SMS/text messages, including:

• Account notifications and security alerts
• Verification codes and two-factor authentication
• AI assistant responses and service updates
• Transactional alerts related to your account activity

Message frequency varies based on your account activity and preferences. Standard message and data rates may apply.

You may opt out of SMS messages at any time by replying STOP to any message, or by adjusting your notification preferences in your account settings. Opting out of SMS will not affect service-critical communications delivered through other channels.

No mobile information collected as part of the SMS opt-in process will be shared with or sold to third parties or affiliates for marketing or promotional purposes. Your mobile phone number and SMS consent data are used solely for the purposes described in this Privacy Policy and our Terms of Use.

For questions about our SMS practices, contact us at support@gograb.io.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

General Retention Periods

• Account Data: Retained for the duration of your account and for up to 30 days after account deletion, to allow for account recovery.
• User-Generated Content: Retained for the duration of your account. Upon account deletion, content is queued for permanent deletion within 90 days.
• Transaction Records: Retained for 7 years to comply with tax and financial reporting obligations.
• Communication Records: Support interactions are retained for up to 3 years for quality assurance and dispute resolution purposes.
• Usage Analytics: Aggregated usage data is retained indefinitely. Individual usage logs are retained for up to 24 months.

AI-Specific Retention Periods

• Real-Time AI Processing: Prompts and inputs used for real-time AI generation (e.g., live content creation, instant design generation) are processed in-session and are not retained beyond the active session, except as part of the generated output.
• AI Model Training Data: Anonymized and aggregated data used for Platform AI improvement is retained for up to 3 years from the date of anonymization. Because this data is fully anonymized, it cannot be linked back to individual users.
• AI Interaction Logs: Records of user interactions with AI features (including Vitto conversations, Vibe sessions, and AI Generation Hub requests) are retained for up to 12 months to provide conversation history and improve service quality.
• Automated Decision Records: Records of significant automated decisions (including content moderation actions, quality scores, and abuse detection results) are retained for up to 2 years to support auditing, dispute resolution, and compliance requirements.

When retention periods expire, data is securely deleted or anonymized in accordance with our data disposal procedures.

Depending on your location and applicable law, you may have the following rights regarding your personal information:

General Data Rights

• Right of Access: You may request a copy of the personal information we hold about you.
• Right of Correction: You may request that we correct inaccurate or incomplete personal information.
• Right of Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Right of Portability: You may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Opt Out: You may opt out of marketing communications, analytics tracking, and certain data processing activities.
• Right to Restrict Processing: You may request that we limit the processing of your personal data in certain circumstances.

Enhanced AI-Specific Rights

• Right to Explanation of AI Logic: You have the right to request a meaningful explanation of the logic involved in any automated decision-making that significantly affects you, including the main parameters and their relative weight in the decision process.
• Right to Opt Out of AI Profiling: You may opt out of AI-based profiling activities, including personalized content recommendations and behavioral analysis. Note that opting out may limit the personalization of your Platform experience.
• Right to Human Intervention: You have the right to request human intervention in any automated decision that produces legal effects or similarly significantly affects you. This includes account actions, content moderation decisions, and access restrictions.
• Right to AI Data Opt-Out: You may opt out of having your data used for Platform AI improvement, as described in the AI Model Training & Your Data section.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected, the sources of collection, the business purposes, and the categories of third parties with whom we share data.
• Right to Delete: You may request deletion of personal information we have collected from you.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: While we do not sell your personal data, you have the right to opt out of any sharing for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Information: You may request that we limit our use of sensitive personal information to purposes necessary for providing the services.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

European Economic Area (EEA) Residents

If you are located in the EEA, you may have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to lodge a complaint with your local data protection authority.
• The right to withdraw consent at any time where processing is based on consent.
• The right to object to processing based on legitimate interests.
• The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

To exercise any of these rights, please contact us at privacy@gograb.io. We will respond to your request within 30 calendar days (or sooner if required by applicable law). We may need to verify your identity before processing your request.

We use cookies and similar tracking technologies to enhance your experience, analyze Platform usage, and support our operations.

Types of Cookies We Use

• Essential Cookies: These cookies are strictly necessary for the Platform to function. They enable core features such as authentication, session management, security protections, and load balancing. You cannot opt out of essential cookies, as the Platform cannot operate without them.
• Analytics Cookies: These cookies help us understand how users interact with the Platform by collecting anonymous usage statistics, page view counts, navigation patterns, and performance metrics. We use this information to improve the Platform.
• Preference Cookies: These cookies remember your settings and preferences, such as language selection, theme preferences, workspace configurations, and interface customizations, so you do not have to re-enter them on subsequent visits.

Managing Cookies

You can control cookies through the following methods:

• Browser Settings: Most web browsers allow you to control cookies through their settings. You can configure your browser to block or delete cookies.
• Platform Settings: You can manage cookie preferences in your account settings under "Privacy Preferences."
• Do Not Track: We honor "Do Not Track" signals sent by your browser. When a DNT signal is detected, we disable non-essential analytics and tracking cookies.

Please note that disabling certain cookies may affect the functionality of the Platform and your ability to use certain features.

We implement comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Technical Measures

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (HTTPS).
• Encryption at Rest: Personal data and sensitive information stored on our servers is encrypted using AES-256 encryption.
• Access Controls: We implement role-based access control (RBAC) with the principle of least privilege. Access to personal data is restricted to authorized personnel only.
• Authentication Security: We support multi-factor authentication (MFA) and use secure password hashing algorithms.
• Network Security: Firewalls, intrusion detection systems, and network segmentation protect our infrastructure.

Organizational Measures

• Regular security audits and vulnerability assessments
• Employee security awareness training
• Incident response procedures and breach notification protocols
• Vendor security assessments for all third-party service providers
• Data minimization practices — we collect only what is necessary

AI-Specific Security Measures

• API keys and credentials for third-party AI providers are stored in encrypted vaults and rotated regularly.
• AI request/response data is transmitted over encrypted channels exclusively.
• Input validation and output sanitization are applied to all AI interactions to prevent injection attacks and data leakage.
• AI processing logs are access-controlled and audited separately from general application logs.

GOGRAB LLC is headquartered in the State of Florida, United States. Your information may be transferred to, stored in, and processed in the United States and other countries where our service providers operate.

Transfer Mechanisms

When we transfer personal data outside of your country of residence, we ensure adequate protection through one or more of the following mechanisms:

• Standard Contractual Clauses (SCCs): We use European Commission-approved Standard Contractual Clauses for transfers of personal data from the EEA, UK, and Switzerland to countries that have not received an adequacy decision.
• Adequacy Decisions: Where applicable, we rely on adequacy decisions issued by the European Commission recognizing that certain countries provide an adequate level of data protection.
• Contractual Protections: All third-party service providers and AI providers are bound by contractual obligations that require them to protect your data in accordance with applicable data protection laws.

AI Provider Data Locations

Data processed by our third-party AI providers may be processed in the United States. Each AI provider maintains their own security certifications and data protection programs. We require all AI providers to maintain data processing standards consistent with our obligations under applicable privacy laws.

You have the right to request the deletion of your personal data. Here is how the deletion process works:

How to Request Deletion

• Through the Platform: Navigate to Account Settings > Privacy > "Delete My Data" to initiate a deletion request directly from your account.
• Via Email: Send a request to privacy@gograb.io with the subject line "Data Deletion Request." Include your account email address and any specific details about what data you want deleted.

What Happens When You Request Deletion

• We will verify your identity before processing the request.
• Your account will be deactivated immediately upon confirmation.
• Personal data will be permanently deleted within 30 calendar days of verification.
• User-generated content (websites, pages, modules) will be permanently deleted within 90 calendar days.
• AI interaction logs and conversation history will be deleted within 30 calendar days.
• Anonymized and aggregated data that cannot be linked back to you will not be deleted, as it is no longer personal data.

Exceptions to Deletion

We may retain certain information after a deletion request to:

• Comply with legal obligations (e.g., tax records, fraud prevention)
• Resolve disputes or enforce our agreements
• Maintain security and integrity of the Platform
• Complete any pending transactions

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.

Notification Methods

• Material Changes: For significant changes that affect how we process your personal data or your rights, we will notify you by email (sent to the email address associated with your account) and/or by a prominent notice on the Platform at least 30 days before the changes take effect.
• Minor Changes: For non-material updates (e.g., formatting, clarifications), we will update the "Last Updated" date at the top of this Policy.

Material Change Procedures

When a material change is made, we will:

• Clearly describe the nature of the change and the affected sections.
• Explain how the change impacts your data processing or rights.
• Provide you with an opportunity to review the updated Policy before it takes effect.
• Where required by law, obtain your renewed consent for any new processing activities.

Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you should discontinue use of the Platform and may request deletion of your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

GOGRAB LLC

• Email: privacy@gograb.io
• General Inquiries: support@gograb.io
• Jurisdiction: State of Florida, United States

Response Time Commitments

• General Inquiries: We will acknowledge receipt within 3 business days and provide a substantive response within 10 business days.
• Data Rights Requests: We will acknowledge receipt within 5 business days and fulfill the request within 30 calendar days (or as required by applicable law).
• Data Breach Notifications: In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users without undue delay and no later than 72 hours after becoming aware of the breach (where required by applicable law).

If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.