Privacy Policy

GonnaeNoSayThat.com
Last updated: 24 December 2025

1. What GonnaeNoSayThat Is (and Isn't)

GonnaeNoSayThat ("GNST") is a user-initiated, privacy-respecting personal audit tool.

It allows users to upload their own social-media data exports (e.g. Meta, Instagram, Threads, Reddit "Download Your Information" files) in order to review historical content for personal awareness.

GNST is:

• ❌ Not surveillance
• ❌ Not scraping
• ❌ Not live account access
• ❌ Not credential-based
• ❌ Not reporting to authorities

GNST operates only on data the user chooses to upload.

2. Data You Provide

GNST processes only the data you explicitly upload, which may include:

• Posts
• Comments
• Messages
• Metadata included in official platform exports
• Media files referenced in those exports

You remain the data owner at all times.

3. What We Do With Your Data

Your uploaded data is used solely to:

• Scan for potentially sensitive content
• Generate a private, user-visible report
• Provide contextual explanations

We do not:

• Sell your data
• Share your data with third parties
• Use your data for advertising
• Train models on your data
• Profile you
• Monitor you after the scan completes

4. Data Storage & Retention

• Uploaded data is stored temporarily
• Reports are generated and made available to you
• All uploaded data, reports, and personal information are automatically deleted within 7 days of report generation
• You may request immediate deletion at any time

GNST is intentionally designed so that long-term storage is not required.

5. Private Messages & Sensitive Content

Private messages may be included by default, because intent is often expressed in private communications.

However:

• Inclusion is clearly disclosed
• You may opt out of private message scanning
• Private content is treated with heightened sensitivity

6. Images & Media

• Images remain private
• No public URLs are created
• Images are only analysed if contextual text suggests relevance
• Image analysis is conservative and explainable

7. Third-Party Services

GNST may use trusted infrastructure providers (e.g. hosting, storage, processing APIs) strictly to deliver the service.

These providers:

• Do not receive data for their own purposes
• Are bound by contractual and legal confidentiality obligations

GNST does not provide uploaded data to governments, border agencies, or law enforcement.

8. Analytics & Tracking

GNST does not use behavioural advertising trackers.

If basic analytics are used, they are:

• Minimal
• Aggregate
• Non-identifying
• Used only to understand site performance (e.g. page views)

No analytics are run on uploaded content or reports.

9. Legal Basis (UK / EU)

Under UK GDPR and EU GDPR, processing is based on:

• User consent (Article 6(1)(a))
• User-initiated processing for a requested service

You may:

• Request deletion
• Request access to data
• Withdraw consent at any time

10. What GNST Does Not Claim

GNST does not:

• Predict border or visa decisions
• Represent any government agency
• Guarantee outcomes
• Replace legal advice

Reports are informational and advisory only.

11. Security

We take reasonable technical and organisational measures to protect uploaded data, including:

• Encrypted storage
• Limited access controls
• Short retention periods

No system is perfect, but GNST is designed to minimise risk by minimising data.

12. Changes to This Policy

If this policy changes, the updated version will be posted here with a new effective date.

13. Contact

If you have questions or deletion requests, contact:
support@gonnaenosaythat.co.uk

---

One-line summary (that matters)

GNST works only on data you choose to upload, keeps it briefly, shares it with no one, and exists to reduce anxiety — not create it.