Last updated: September 17, 2026
1.1 This Privacy Policy explains how GOLSOFT, LLC, a Delaware limited liability company with its principal address at 131 Continental Drive, Newark, DE 19713, United States ("GOLSOFT", "we", "us"), collects, uses and protects personal data when you use the website golsoft.xyz (the "Site") or purchase our digital products.
1.2 We act as the data controller for the personal data described in this policy: we decide why and how your data is processed.
1.3 You can reach us at any time about privacy matters by email at [email protected] or through our contact form.
2.1 Account data. If you create an account, we collect your name, email address, phone number, country, company or organization, street address, city and ZIP / postal code. Your password is stored only as a secure hash and is never readable by our staff. Every account is additionally protected by two-factor authentication: a unique secret key is generated for your account so that your authenticator app can produce your verification codes. This secret is stored with your account and is never shared.
2.2 Order data. When you place an order, we collect the email address used for delivery, the product(s) purchased, reference codes, amounts paid and the date of the order. This information appears in your "My orders" page.
2.3 Payment data. Payments are processed by Stripe, Inc. on its own servers. We never receive or store your full card number, expiry date or security code. Stripe shares with us only what we need to identify and manage your order: a payment identifier, the card brand and, where applicable, the last four digits of the card.
2.4 Messages. When you use the contact form or email us, we collect your name, email address and the content of your message so that we can reply.
2.5 Technical data. Like most websites, our servers automatically record technical information needed to operate and protect the Site: IP address, browser type and version, device information, pages visited and timestamps. We use this data for security, abuse prevention and basic traffic statistics.
2.6 We do not use analytics or advertising SDKs that track you across other websites, and we do not build advertising profiles.
3.1 We use your personal data only for the following purposes:
3.2 We do not use your data for automated decision-making that produces legal effects about you, and we do not sell or rent your personal data to anyone.
4.1 If you are located in the European Union or the United Kingdom, our legal bases for processing are:
4.2 You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
4.3 Where processing is based on legitimate interests, you have the right to object on grounds relating to your particular situation (see section 10).
4.4 Providing your email address is necessary to purchase: without it we cannot deliver digital products.
5.1 The Site uses a small number of cookies, strictly limited to the following categories:
5.2 We do not set advertising cookies, tracking pixels or social media widgets, and we do not share cookie data with advertisers.
5.3 You can configure your browser to refuse cookies; the Site will continue to work for browsing, but signing in and checkout require the session cookie.
5.4 Stripe's use of cookies is governed by Stripe's own cookie and privacy policies.
6.1 We share personal data only with the following categories of recipients, and only what is needed for their role:
6.2 We never sell your personal data, and we do not share it with third parties for their own marketing purposes.
6.3 If we are ever involved in a merger, acquisition or sale of assets, your data may be transferred to the successor entity, who will remain bound by this Privacy Policy.
6.4 We may disclose data when necessary to protect our rights, your safety or the safety of others, or to investigate fraud.
7.1 We are based in the United States, and our service providers (including Stripe and Cloudflare) may process personal data in the United States or in other countries. Your data may therefore be transferred outside your country of residence.
7.2 Where personal data of EU or UK residents is transferred to a country without an adequacy decision, we rely on appropriate safeguards recognized by law, such as the European Commission's Standard Contractual Clauses, and we limit such transfers to what is strictly necessary to provide the service.
8.1 We keep your data only as long as necessary for the purposes described in this policy:
8.2 When data is no longer needed, it is securely deleted or irreversibly anonymized.
8.3 Backup copies are deleted in line with our backup rotation schedules.
9.1 We protect your data with technical and organizational measures appropriate to the nature of the data: encryption in transit (HTTPS/TLS), password hashing, restricted staff access on a need-to-know basis, and payment processing isolated on PCI-DSS certified infrastructure operated by Stripe.
9.2 No method of transmission or storage is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security; in the event of a breach affecting your rights, we will notify you and the competent authorities as required by law.
9.3 You can help by using a strong, unique password for your account and keeping it confidential.
10.1 Depending on where you live, you have some or all of the following rights regarding your personal data:
10.2 EU/UK residents: you also have the right to lodge a complaint with the data protection supervisory authority of your country of residence.
10.3 United States residents: depending on your state of residence (for example California under the CCPA/CPRA), you may have the right to know the personal data we collect about you, to correct it, to delete it, to opt out of the sale of personal data, and to non-discrimination when you exercise your rights. We do not sell personal data, and we do not share it for cross-context behavioral advertising.
10.4 To exercise any of these rights, email [email protected] from the address associated with your account, stating your request. We may need to verify your identity before acting.
10.5 We respond to requests within 30 days, or within the longer period permitted by law for complex requests, with notice.
10.6 Some rights are subject to legal exceptions: for example, we must retain order records for accounting purposes even after an erasure request.
11.1 The Site is not directed at children. We do not knowingly collect personal data from anyone under the age of 13. Accounts and purchases are restricted to persons aged 18 or older (or the local age of majority).
11.2 If you believe a child has provided us personal data, contact us and we will delete it promptly.
12.1 We may update this Privacy Policy from time to time to reflect legal, technical or business developments. The current version, with its "Last updated" date, is always published on this page, and material changes will be announced on the Site before they take effect. We encourage you to review this page regularly.
13.1 For any question about this Privacy Policy or the processing of your personal data, contact us:
