Back to Home

Privacy Policy (Alpha)

Effective: 25 September 2025 · Version: goalglim-0.1.0-alpha.1 · Company: GoalGlim FZE-LLC (Sharjah Publishing City Free Zone, UAE) · Contact: info@goalglim.ai

GoalGlim ("GoalGlim", "we", "us", "our") helps internationally mobile nurses discover visa-sponsored roles and licensing guidance. This Privacy Policy explains how we collect, use, and protect personal data while the GoalGlim web app is in invite-only alpha testing. By using the Service, you agree to this Policy. If you disagree, please discontinue use.

1. Data We Collect

1.1 Account & Identity (via Clerk)

  • Pseudonymous Clerk user ID, email address, authentication status, session metadata.
  • Optional profile photo and basic account preferences managed through Clerk.

1.2 Profile & Onboarding Data

  • Information you provide during onboarding (language, nationality, destination country, professional qualification, specialisation, experience, career timeframe, preferred work environment).
  • Progress flags indicating whether onboarding is complete.
  • We store this data both in Clerk metadata and as a backup in our Postgres database so we can restore it if Clerk is unavailable.

1.3 Service Usage Data

  • Chat messages, prompts, and attachments you submit so we can deliver responses and retain conversation history.
  • Generated documents, saved versions, inline suggestions, and visibility settings stored in our database.
  • Job searches you perform (speciality, location, radius) and saved jobs to track daily usage limits and let you revisit past searches.
  • Job listings fetched from third parties (via SerpAPI) and any AI-enriched attributes (e.g., sponsorship classification) that we store to speed up browsing for all users.
  • Files you upload (currently PDF, JPEG, PNG up to 5 MB) which are saved in Vercel Blob storage so they can be rendered back to you inside the app.

1.4 Device & Diagnostics Data

  • Basic product analytics (page views, feature usage) captured through Vercel Analytics and Vercel Speed Insights. These services receive typical web metadata such as IP address and user agent; we do not configure any additional tracking or cookies beyond their defaults.
  • Server logs that may contain IP address, request metadata, and error details strictly for debugging and abuse mitigation.

1.5 AI & Third-Party Processors

  • When you interact with the AI assistant or artifact generators, your prompts, attachments, and relevant chat context are routed through the Vercel AI Gateway to model providers (currently xAI and OpenAI) solely to generate responses. Job descriptions from SerpAPI may also be analysed in this way to infer visa sponsorship and licensing status.
  • When you view maps or search for locations, Mapbox receives the necessary query parameters and your IP address to render tiles and geocoding suggestions.
  • To fetch job listings, we send your search terms (e.g., nursing speciality and region) to SerpAPI, which queries external job sources on our behalf.

We do not intentionally collect special category health data, government IDs, or payment details during alpha and ask that you avoid sharing them via chat or uploads.

2. How We Use Data

We use personal data to:

  1. Provide and secure the Service (authenticate users, deliver chat and job matching features, store saved content).
  2. Personalise recommendations and surface relevant roles based on your onboarding inputs and prior activity.
  3. Diagnose issues, prevent abuse, and monitor reliability using limited operational logs and Vercel-provided analytics.
  4. Communicate important updates, incident notices, or responses to your enquiries.
  5. Improve product quality by reviewing aggregated usage trends and user feedback. We do not use your data to train public foundation models.

3. Legal Bases

Depending on your jurisdiction, we rely on:

  • Contract – to deliver requested features once you create an account or accept an invite.
  • Legitimate interests – for security, fraud prevention, service improvement, and communicating service-related updates.
  • Consent – if you explicitly opt in to marketing communications (none are sent by default during alpha).

4. Sharing & Processors

We engage trusted processors under data protection agreements:

  • Vercel – hosting, edge network, serverless runtime, and first-party analytics (Analytics & Speed Insights).
  • Vercel Postgres / Neon – managed Postgres database for application data.
  • Clerk – authentication, session management, and profile metadata.
  • Vercel AI Gateway (xAI, OpenAI) – processing chat prompts, job descriptions, and artifacts to generate AI responses.
  • Vercel Blob – storage for uploaded files and generated assets.
  • SerpAPI – aggregated job listings and metadata based on your search queries.
  • Mapbox – map tiles and geocoding for location features.

We do not sell personal data. We may disclose information if required to comply with law or defend legal rights, after assessing the validity of the request.

5. International Transfers

GoalGlim is incorporated in the UAE and relies on infrastructure primarily hosted in the EU when available. Some processors (e.g., Vercel, xAI, OpenAI, SerpAPI, Mapbox) may process data in the United States or other jurisdictions. Where data leaves the EU/EEA, we rely on standard contractual clauses or equivalent safeguards provided by those vendors.

6. Retention

  • Account, profile, chat, documents, and saved job data: kept while your account remains active plus up to 12 months, after which we delete or anonymise.
  • Uploaded files: retained until you remove them or delete the related chat/document; orphaned files are purged during periodic clean-up.
  • Job listings and AI-enriched attributes: retained to improve search speed and accuracy; we periodically refresh or delete stale entries.
  • Vercel Analytics / Speed Insights: retained according to Vercel’s default retention windows (currently up to 13 months for aggregated metrics).
  • Server logs: retained up to 90 days unless required for security investigations.
  • Support correspondence: retained until issues are resolved plus a short audit period (no longer than 12 months).

You may request earlier deletion at any time (see Section 9).

7. Cookies & Local Storage

  • Essential cookies: Clerk sets authentication cookies required for sign-in and session continuity. We also a sidebar:state cookie to keep your layout preference.
  • Local storage: We keep your in-progress chat input locally on your device so drafts aren’t lost if you reload the page. No analytics or tracking data is written to local storage in this alpha release.

There is currently no optional analytics cookie banner because we do not run additional client-side analytics beyond the essential services listed above. You can manage cookies via browser settings, but essential cookies are required for the Service to function.

8. Security

We implement organisational and technical measures including encrypted transport (HTTPS), role-based access controls, audit logs, input validation, and routine backups. No system is 100% secure; please notify us promptly at info@goalglim.ai if you suspect unauthorised access.

9. Your Rights

Depending on your jurisdiction, you may have rights to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion of your account and associated content.
  • Object to or restrict certain processing based on legitimate interests.
  • Request a portable copy of your data.

To exercise these rights, email info@goalglim.ai from the email linked to your account. We may need to verify your identity before fulfilling requests.

10. Children

GoalGlim is not intended for individuals under 18. If we learn that we have collected data from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this Policy as we refine the Service or comply with new regulations. Material changes will be posted with a new effective date, and we will highlight significant updates within the app.

12. Contact

Questions, feedback, or data requests? Email info@goalglim.ai.