Privacy Policy & Terms and Conditions

S3 Deletion Policy

https://gist.github.com/WeeDom/c67293c563e31bbc9b06541acc7499b4

{(GNST PROD) in (main) ~/gonnaenosaythat $ date
Thu Jan 29 07:53:51 UTC 2026
(GNST PROD) in (main) ~/gonnaenosaythat $ aws s3api get-bucket-lifecycle-configuration --bucket gonnaenosaythat-s3-2
{
    "TransitionDefaultMinimumObjectSize": "all_storage_classes_128K",
    "Rules": [
        {
            "Expiration": {
                "Days": 7
            },
            "ID": "auto-delete-uploads",
            "Filter": {
                "Prefix": "/uploads"
            },
            "Status": "Enabled",
            "AbortIncompleteMultipartUpload": {
                "DaysAfterInitiation": 2
            }
        }
    ]
}
(GNST PROD) in (main) ~/gonnaenosaythat $}

GDPR Anonymization Policy

To protect your privacy and comply with GDPR data minimization principles, we automatically anonymize personally identifiable information (PII) after 7 days.

What Gets Anonymized

• Email addresses: Replaced with anon-<uuid>@gdpr-deleted.invalid
• Report folders: Permanently deleted from storage
• Database records: Retained with anonymized data to maintain referential integrity and prevent orphaned records

Implementation Details

• Schedule: Automated cron job runs daily at 03:05 UTC (after database backup)
• Trigger: Payment and validation records are processed according to their retention periods
• Idempotent: Already anonymized records are skipped on subsequent runs
• Method: Email → anon-<uuid>@gdpr-deleted.invalid, report folders deleted

What This Means for You

After 7 days:

• ✅ Your uploaded data is automatically deleted from S3 (lifecycle policy above)
• ✅ Your email address is replaced with an anonymous identifier
• ✅ Your report files are permanently removed from our servers
• ✅ Database integrity is maintained (no broken foreign key relationships)
• ⚠️ We cannot recover your report after this period - save it locally if needed

Technical Command

flask gdpr-anonymize

This command can be run manually or is automatically executed via cron.

Runtime file management

1. Agreement to Terms

By accessing or using Gonnae No Say That ("GNST", "the Service"), you agree to be bound by these Terms and Conditions ("Terms"). If you do not agree, do not use the Service.

These Terms constitute a legally binding agreement between you and Guard-e-loo Ltd (trading as Gonnae No Say That), Company Number SC862791, registered in Scotland.

2. Consumer Rights (UK Law)

2.1 Consumer Rights Act 2015

If you are a consumer (individual using the Service for personal purposes), you have statutory rights under the Consumer Rights Act 2015:

• Services must be performed with reasonable care and skill
• Information we provide must be accurate and not misleading
• Services must match any descriptions we give

Nothing in these Terms affects your statutory rights.

2.2 Distance Selling Regulations

Under the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013, you have:

• 14-day cooling-off period: Right to cancel within 14 days of purchase
• Full refund: If you cancel within 14 days and have not yet received your report
• Waiver of cancellation right: By requesting immediate service delivery (report generation), you expressly waive your 14-day cancellation right for that specific scan

2.3 Our Extended Refund Policy

Beyond your statutory rights, we offer:

• 7-day satisfaction guarantee: First-time users can request a full refund within 7 days if unsatisfied with the report quality
• Technical failure refund: Full refund if we fail to deliver a usable report due to technical issues

To request a refund, email support@gonnaenosaythat.co.uk with your order number and reason.

3. Service Description

3.1 What GNST Provides

GNST is an informational service that:

• Analyses social media data export files you voluntarily upload
• Identifies potentially sensitive content using AI-powered screening
• Generates a private report with contextual explanations
• Provides general guidance on social media content and employment/reputation screening
• Offers an optional candidate-authorised public footprint preview using public identifiers you choose to provide

3.2 What GNST Does NOT Provide

GNST is not:

• ❌ Legal, employment, recruitment, or HR advice
• ❌ A guarantee of job offers, interviews, or hiring success
• ❌ An official screening by any employer or recruiter
• ❌ A prediction of employer or recruiter decisions
• ❌ A replacement for professional advice
• ❌ Private web, dark web, login-gated, captcha-bypass, or paywall-bypass search

3.3 Informational Purpose Only

The Service is for informational and awareness purposes only. Reports are based on algorithmic analysis and may not reflect any specific employer's screening criteria or outcomes.

4. Eligibility and Account Requirements

4.1 Age Requirement

You must be at least 18 years old to use GNST. By using the Service, you represent that you meet this requirement.

4.2 Accurate Information

You agree to provide accurate and complete information during registration and maintain the accuracy of your account details.

4.3 Account Security

You are responsible for:

• Maintaining the confidentiality of your account credentials
• All activities that occur under your account
• Notifying us immediately of any unauthorised access

5. Funding and Payment Terms

5.1 Pricing

Current pricing is displayed on our website. Prices are in GBP (£) and include VAT where applicable.

5.2 Payment Processing

Payments are processed securely by Stripe. We do not store your full card details. By making a payment, you authorise us to charge the stated amount.

5.3 Organisation-Sponsored Scans

An organisation may sponsor your scan and send you a private, single-use access link. You remain in control of the upload and receive the private report.

The sponsoring organisation receives status information only. It does not receive your uploads, report, findings, scores, categories, report credentials, or deletion tokens.

5.4 Failed Payments

If payment fails:

• Service delivery will be paused
• You will be notified via email
• Your uploaded data may be deleted if payment is not resolved within 48 hours

5.5 Refunds

Refunds are provided in accordance with Section 2.3 (Our Extended Refund Policy) and your statutory consumer rights. Refunds are processed within 14 days of approval.

6. Acceptable Use Policy

6.1 Permitted Use

You may use GNST only for:

• Personal review of your own social media content
• Informational purposes related to job applications or professional reputation
• Self-awareness and content auditing

6.2 Prohibited Use

You must NOT:

• Upload data belonging to others without explicit consent
• Use the Service for commercial surveillance or monitoring
• Attempt to reverse-engineer or circumvent security measures
• Upload illegal, harmful, or prohibited content
• Abuse, harass, or threaten our staff or systems
• Use the Service to violate any laws or regulations
• Share, resell, or redistribute reports without authorisation

6.3 Prohibited Content

Do not upload data containing:

• Child sexual abuse material (CSAM)
• Content depicting extreme violence or terrorism
• Malware or malicious code
• Content that violates intellectual property rights

Violation of this section will result in immediate account termination and may be reported to authorities.

7. Intellectual Property Rights

7.1 Your Content

You retain all ownership rights to the data you upload. By uploading data, you grant us a limited, temporary licence to:

• Process and analyse the data to provide the Service
• Generate and deliver your report
• Store the data for up to 7 days as specified in our Privacy Policy
• Use public identifiers you provide to run an optional candidate-authorised public footprint preview, if you choose that feature

This licence automatically terminates when your data is deleted.

7.2 Our Content

GNST, including our website, reports, algorithms, and brand materials, are protected by copyright, trademark, and other intellectual property laws. You may not:

• Copy, reproduce, or distribute our content without permission
• Reverse-engineer our algorithms or systems
• Use our trademarks or branding without authorisation

7.3 Report Licence

Generated reports are for your personal use only. You may:

• Download and save your report for personal reference
• Share with professional advisers under confidentiality

You may NOT:

• Publicly post or redistribute reports
• Use reports for commercial purposes
• Modify or create derivative works from reports

8. Service Availability and Modifications

8.1 Service Availability

We strive to maintain Service availability but do not guarantee uninterrupted access. The Service may be unavailable due to:

• Scheduled maintenance (notified in advance where possible)
• Technical issues or infrastructure failures
• Security incidents or updates
• Force majeure events beyond our control

8.2 Service Modifications

We reserve the right to modify, suspend, or discontinue any aspect of the Service at any time. We will provide reasonable notice for material changes affecting paid users.

8.3 Processing Time

Report generation typically completes within 24 hours of upload. Processing time may vary based on:

• Data volume and complexity
• System load and queue position
• Platform-specific processing requirements

9. Warranties and Disclaimers

9.1 Service "As Is"

Subject to your statutory consumer rights, the Service is provided "as is" and "as available" without warranties of any kind, either express or implied.

9.2 No Guarantee of Accuracy

We do not guarantee that:

• Reports are 100% accurate or complete
• AI analysis reflects actual criteria used by any specific employer
• Content flagged will cause employment issues
• Content not flagged will not cause employment issues

9.3 No Legal, Employment, or Recruitment Advice

GNST does not provide legal, employment, recruitment, or HR advice. Use your own judgment when acting on report findings.

9.4 Third-Party Content

We are not responsible for the accuracy, legality, or reliability of content in your uploaded data. You are solely responsible for the content you upload.

9.5 Public Search Results

If you opt in to the public footprint preview, GNST uses the Brave Search API, rather than Google Search, to locate publicly available web content relevant to your candidate-authorised scan. Search queries may include your name or other public identifiers you provide. Brave Software, Inc. is based in the United States, so limited query data may be processed outside the UK or EEA.

GNST minimises the information sent to Brave and does not provide Brave with uploaded social-media archives, private messages, completed reports, email addresses, payment identifiers, deletion tokens, or internal GNST account identifiers. Brave results are used only for public-web discovery and report preparation.

Public search results may be incomplete, outdated, misleading, or about someone else. GNST treats them as public trace candidates, not employment suitability decisions.

10. Limitation of Liability

10.1 Consumer Rights Protection

Nothing in these Terms excludes or limits our liability for:

• Death or personal injury caused by our negligence
• Fraud or fraudulent misrepresentation
• Breach of statutory rights under the Consumer Rights Act 2015
• Any other liability that cannot be excluded or limited under UK law

10.2 Scope of Liability

Subject to Section 10.1, our total liability for any claims arising from or related to the Service is limited to:

• The amount you paid for the specific scan giving rise to the claim, or
• £50, whichever is greater

10.3 Excluded Damages

To the fullest extent permitted by UK law, we are not liable for:

• Indirect or consequential losses
• Loss of profits, revenue, or business opportunities
• Loss of data (your uploaded data is your responsibility to back up)
• Job rejection, interview rejection, hiring issues, or employment consequences
• Reputational harm or emotional distress

10.4 Third-Party Actions

We are not responsible for:

• Decisions made by employers, recruiters, hiring managers, background-screening providers, or HR teams
• Actions taken by social media platforms based on your content
• Third-party service failures (Stripe, AWS, etc.)

11. Indemnification

You agree to indemnify and hold harmless Guard-e-loo Ltd, its directors, employees, and agents from any claims, damages, or expenses arising from:

• Your violation of these Terms
• Your uploaded content (including copyright infringement or illegal material)
• Your use or misuse of the Service
• Your violation of any laws or third-party rights

12. Data Deletion and Retention

12.1 Automatic Deletion

Uploaded data, public footprint identifiers, public search results, page excerpts, and reports are automatically deleted 7 days after report generation. This is permanent and cannot be undone.

12.2 User-Initiated Deletion

You may request immediate deletion of your uploaded data at any time via the "Delete My Data" button in your report or by emailing support@gonnaenosaythat.co.uk.

12.3 Data Retention for Legal Compliance

We retain certain data for legal and regulatory requirements:

• Payment records: 7 years (HMRC requirement)
• Audit logs: 12 months (security and fraud prevention)

13. Termination

13.1 Termination by You

You may terminate your account at any time by emailing support@gonnaenosaythat.co.uk. Upon termination:

• Your data will be deleted in accordance with our Privacy Policy
• Access to reports will cease after the 7-day retention period
• Payment records retained for legal compliance (7 years)
• Refunds subject to Section 2 (Consumer Rights)

13.2 Termination by Us

We may suspend or terminate your access immediately without notice if:

• You violate these Terms
• You upload prohibited content (see Section 6.3)
• You engage in abusive behaviour towards staff
• We suspect fraud, illegal activity, or security threats
• Required by law or legal process

13.3 Effect of Termination

Upon termination:

• Your licence to use the Service ends immediately
• We may delete your data (subject to legal retention requirements)
• No refund if terminated for Terms violation
• Sections 7 (IP Rights), 10 (Liability), 11 (Indemnification), and 15 (Disputes) survive termination

14. Communications

14.1 Service Communications

By using GNST, you consent to receive:

• Transactional emails (report delivery, upload confirmations)
• Service notifications (maintenance, security alerts)
• Important updates to Terms or Privacy Policy

You cannot opt out of essential service communications.

14.2 Marketing Communications

We will only send marketing emails if you explicitly opt in. You can unsubscribe at any time via the link in marketing emails.

14.3 Support

Email support is available at support@gonnaenosaythat.co.uk. We aim to respond within 5 business days but do not guarantee specific response times.

15. Dispute Resolution and Governing Law

15.1 Governing Law

These Terms are governed by the laws of Scotland and the United Kingdom. Nothing in these Terms affects your statutory consumer rights under UK law.

15.2 Jurisdiction

Any disputes arising from these Terms or the Service shall be subject to the exclusive jurisdiction of the Scottish courts. However, if you are a consumer, you may also bring proceedings in the courts of the country where you reside.

15.3 Informal Resolution

Before filing any legal claim, please contact us at support@gonnaenosaythat.co.uk to attempt informal resolution. We commit to working in good faith to resolve disputes amicably.

15.4 Alternative Dispute Resolution

If you are a consumer and we cannot resolve a dispute informally, you may refer the matter to:

• Citizens Advice Consumer Service: 0808 223 1133 or citizensadvice.org.uk
• Online Dispute Resolution: ec.europa.eu/consumers/odr

15.5 Time Limit for Claims

Subject to your statutory rights, any claim must be filed within 12 months of the event giving rise to the claim. After 12 months, claims are time-barred.

16. General Provisions

16.1 Entire Agreement

These Terms, together with our Privacy Policy, constitute the entire agreement between you and GNST and supersede all prior agreements or understandings.

16.2 Severability

If any provision of these Terms is found invalid or unenforceable by a court, that provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions remain in full force.

16.3 Waiver

Our failure to enforce any right or provision does not constitute a waiver of that right or provision.

16.4 Assignment

You may not assign or transfer these Terms without our written consent. We may assign these Terms without restriction (e.g., in the event of a merger or acquisition).

16.5 Force Majeure

We are not liable for any failure to perform due to circumstances beyond our reasonable control, including but not limited to:

• Natural disasters (floods, earthquakes, storms)
• War, terrorism, or civil unrest
• Pandemics or public health emergencies
• Internet outages or infrastructure failures
• Government actions or legal restrictions

16.6 Notices

Notices to you may be sent via email to the address you provided. Notices to us should be sent to support@gonnaenosaythat.co.uk or:

Guard-e-loo Ltd
T/A Gonnae No Say That
[Registered Office Address - update this]
Scotland

16.7 Survival

Provisions that by their nature should survive termination shall survive, including:

• Payment obligations
• Intellectual property rights
• Liability limitations
• Dispute resolution
• Indemnification

16.8 Relationship

Nothing in these Terms creates a partnership, employment, agency, or joint venture relationship between you and GNST.

17. Changes to These Terms

17.1 Right to Modify

We reserve the right to modify these Terms at any time. Changes will be posted at gonnaenosaythat.co.uk/privacy with a new "Effective" date.

17.2 Notice of Material Changes

Material changes (affecting your rights or obligations) will be:

• Clearly highlighted on the Terms page
• Notified via email to active users
• Effective 30 days after notification

17.3 Continued Use = Acceptance

Your continued use of the Service after changes become effective constitutes acceptance of the revised Terms.

17.4 Rejection of Changes

If you do not agree to revised Terms, you must stop using the Service and may request account termination and data deletion. You may be entitled to a pro-rata refund for unused services.

18. Contact Information

For questions about these Terms:

Email: support@gonnaenosaythat.co.uk
Company: Guard-e-loo Ltd
Trading as: Gonnae No Say That
Company Number: SC862791
ICO Registration: 00012692047
Registered in: Scotland
Support Hours: Monday-Friday, 9:00-17:00 GMT

By using GNST, you acknowledge that you have read, understood, and agree to be bound by these Terms and Conditions and our Privacy Policy.

Version: | Effective:
Guard-e-loo Ltd • Company No. SC862791 • ICO: 00012692047