Privacy Policy

Effective date: September 8, 2026

GoAttract (“GoAttract,” “we,” “us,” or “our”) is operated by Yonatan Kogan, an individual / sole proprietor based in Israel.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the GoAttract website, products, and services (collectively, the “Service”).

GoAttract helps users understand and improve their appearance through personalized analysis, AI-generated visualizations, and practical guidance based on information and photos submitted by the user.

1. Information We Collect

Information you provide to us

Depending on how you use GoAttract, we may collect:

The Service is intended for you to submit your own photos and information.

Information generated through the Service

When you use GoAttract, we may generate and store information such as:

These outputs may themselves contain personal information because they are based on your submitted photos and information.

Purchase and transaction information

Payments for GoAttract are processed by Paddle, which acts as the Merchant of Record for purchases.

Paddle may provide us with information necessary to manage your purchase, such as:

We do not receive or store your full payment card details.

Paddle processes payment information under its own privacy terms.

Technical information

When you use the Service, we and our service providers may automatically receive limited technical information necessary to operate, secure, and troubleshoot the Service, such as:

We may also use cookies or similar technologies where necessary for functions such as authentication, session management, security, and basic website functionality.

2. How We Use Your Information

We use personal information to:

We do not use your personal information for purposes that are materially incompatible with those described in this Policy without providing appropriate notice or obtaining consent where required.

3. How We Use AI

GoAttract uses artificial intelligence and automated systems to analyze submitted information and generate personalized outputs.

This may include processing your uploaded photos and questionnaire responses through third-party AI services, including OpenAI.

We do not use GoAttract to perform facial recognition or to determine or verify your identity from your face.

The automated analysis provided by GoAttract is intended to provide appearance-related information and guidance. It does not make decisions that produce legal or similarly significant effects on you.

AI model training

We do not sell your photos for AI training.

We do not authorize OpenAI to use content submitted through GoAttract to train its general-purpose AI models.

Under our current use of OpenAI's business/API services, customer API inputs and outputs are not used by OpenAI to train its models by default.

We also do not use your submitted photos to train a general-purpose AI model of our own without obtaining additional permission where required.

4. Human Review and Product Improvement

Your uploaded photos are not routinely reviewed by people for product-improvement purposes.

In limited circumstances, authorized personnel may access information when reasonably necessary to:

Optional product-improvement program

We may separately offer you the option to help improve GoAttract by allowing authorized GoAttract personnel to review your submitted photos, inputs, and generated results.

Participation is entirely optional.

If you choose to participate, your information may be used to:

Choosing not to participate will not prevent you from purchasing or using GoAttract.

We will request this permission separately. It will not be bundled into acceptance of our Terms or required as a condition of using the Service.

You may withdraw your permission at any time by contacting support@goattract.ai.

Withdrawal will not affect processing that lawfully occurred before your permission was withdrawn, but we will stop using identifiable information covered by that permission for future product-improvement review and will delete it where required and reasonably possible.

5. Service Providers and Disclosure of Information

We disclose personal information only where reasonably necessary to operate GoAttract or for the other purposes described in this Policy.

Our current key service providers include:

OpenAI

We use OpenAI's API services to support AI-powered analysis and generation.

Information necessary to generate your results may be transmitted to OpenAI for processing.

Supabase

We use Supabase for infrastructure such as database, storage, authentication, and related backend functionality.

Information stored or processed through GoAttract may therefore be processed using Supabase infrastructure.

Paddle

Paddle acts as the Merchant of Record and processes purchases, billing, taxation, refunds, and related transaction information.

Paddle processes certain buyer information under its own privacy policy and legal obligations.

Other disclosures

We may also disclose information where reasonably necessary to:

If we introduce additional providers that materially change how your personal information is processed, we will update this Policy as appropriate.

6. Selling and Advertising

We do not sell your personal information.

We do not sell your photos.

We do not currently share personal information for cross-context behavioral advertising or use your submitted photos for targeted advertising.

If these practices materially change in the future, we will update this Policy and provide any choices or consent mechanisms required by applicable law before beginning the new processing.

7. How Long We Keep Information

We aim to keep personal information only for as long as reasonably necessary for the purposes for which it was collected.

Different types of information may be kept for different periods.

Uploaded source photos

Unless a longer period is reasonably necessary for a support, security, fraud-prevention, or legal purpose, we generally delete uploaded source photos from our active systems within 30 days of processing.

Temporary copies may remain for a limited period in backups, security systems, or systems operated by our service providers, subject to their applicable retention practices.

Generated results

Generated analyses, recommendations, reports, and images may be retained for longer where necessary to allow you to access your purchased results and for us to operate the Service.

You may request deletion of personal information associated with you, subject to applicable legal exceptions.

Optional product-improvement material

If you separately opt in to human review for product improvement, identifiable photos, inputs, and outputs selected for that purpose may be retained for up to 12 months, unless:

Transaction and business records

Certain purchase, transaction, tax, accounting, fraud-prevention, and legal records may be retained for the period required by applicable law or reasonably necessary to establish or defend legal claims.

Support communications

Support communications may be retained for as long as reasonably necessary to resolve the request, maintain an appropriate support history, protect against abuse, or satisfy legal requirements.

We may retain information that has been properly aggregated or de-identified so that it no longer identifies you.

8. Legal Bases for Processing

Where laws such as the GDPR or UK GDPR require us to identify a legal basis, we generally rely on the following:

Performance of a contract

We process information necessary to provide a product or service you requested, including:

Without this information, we may not be able to provide the Service.

Legitimate interests

Where appropriate, we may process limited information for legitimate interests such as:

We consider the nature of the information and the impact on users when relying on legitimate interests.

Consent

We rely on your consent where required, including for optional human review of your photos and results for product-improvement purposes.

You may withdraw consent at any time.

Legal obligations

We may process information where necessary to comply with applicable legal, tax, accounting, regulatory, or law-enforcement obligations.

9. International Data Transfers

GoAttract may be operated from one country while our users and service providers are located in others.

As a result, your personal information may be transferred to or processed in countries outside the country where you live.

Where applicable law requires additional safeguards for international transfers, we and our service providers use recognized mechanisms such as adequacy decisions, contractual protections, or Standard Contractual Clauses, as appropriate.

You may contact us at support@goattract.ai if you have questions about the safeguards applicable to your information.

10. Your Privacy Rights

Depending on where you live and which laws apply, you may have the right to:

Right to object

Where applicable law provides this right, you may object to processing based on our legitimate interests.

We will consider and respond to the request in accordance with applicable law.

Exercising your rights

To make a privacy request, contact:

support@goattract.ai

Please provide enough information for us to understand your request.

We may need to verify your identity before fulfilling certain requests so that we do not disclose or delete another person's information.

We will not discriminate against you for exercising privacy rights provided by applicable law.

Some rights are subject to exceptions or limitations under applicable law.

11. Information About People Under 18

GoAttract is intended only for users who are 18 years of age or older.

The Service is not intended for, and may not be used by, anyone under 18.

If we learn that an individual using GoAttract is under 18, we may terminate their access and take reasonable steps to delete their personal information, subject to any information we are legally required to retain.

If you believe that someone under 18 has provided personal information to GoAttract, please contact us at support@goattract.ai.

12. Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, loss, misuse, or disclosure.

Access to personal information is limited to people and service providers that reasonably need access for the purposes described in this Policy.

However, no internet-based service or storage system can guarantee absolute security.

13. Changes to This Privacy Policy

GoAttract is an evolving product, and our privacy practices may change as we add or modify features.

We may update this Privacy Policy from time to time.

When we make changes, we will update the effective date at the top of this Policy.

If a change materially affects how we use personal information already collected, we will provide additional notice or obtain consent where required by applicable law before applying the new use.

14. Contact Us

GoAttract is operated by:

Yonatan Kogan
Individual / Sole Proprietor
Israel

For privacy questions, requests, or complaints:

support@goattract.ai