Legal
Privacy Policy
Last updated: July 11, 2026
Your privacy matters to us. This Privacy Policy explains how GOLDENOTT collects, uses, and protects your personal information.
1. Information We Collect
When you create an account or place an order, we collect:
- Account information: Name, username, email address, password (hashed)
- Contact information: WhatsApp number, Telegram handle (optional)
- Order information: Product type, pricing, order status
- Device information: IP address, browser type (for security logging)
- Communication records: Support ticket messages, order messages
2. How We Use Your Information
We use the information we collect to:
- Process and fulfill your orders and subscriptions
- Communicate with you about your account and orders
- Provide customer support via email, WhatsApp, or Telegram
- Send transactional emails (order confirmations, credentials, payment instructions)
- Detect and prevent fraud and unauthorized access
- Improve our services and website experience
We do not sell, rent, or share your personal information with third parties for marketing purposes.
3. Data Storage and Security
Your data is stored securely on our servers. We implement industry-standard security measures including:
- Encrypted passwords (bcrypt hashing — we never store plain-text passwords)
- HTTPS encryption for all data transmission
- Optional two-factor authentication (2FA) for your account
- Login attempt monitoring and rate limiting
- Regular security updates and patches
Despite our best efforts, no security system is impenetrable. We encourage you to use a strong, unique password and enable 2FA.
4. Cookies
We use essential cookies to:
- Maintain your login session
- Remember your language preference (EN/FR)
- Store your referral code (if applicable)
- Provide CSRF protection for forms
We do not use advertising or tracking cookies. If you use our live chat widget (Tawk.to), their cookie policy may also apply.
5. Third-Party Services
We use the following third-party services:
- Tawk.to: Live chat widget — their privacy policy applies to chat interactions
- Google OAuth: Optional — used only if you choose to sign in with Google
- NOWPayments: Crypto payment processing (where available) — their privacy policy applies
- Google Fonts: Font loading via CDN (no personal data shared)
6. Data Retention
We retain your data as long as your account is active. If you request account deletion:
- We will process the deletion within 48 hours of your request
- Order records may be retained for up to 1 year for legal and accounting purposes
- Your personal data will be permanently removed from our active systems
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access a copy of the personal data we hold about you
- Request correction of inaccurate information
- Request deletion of your account and associated data
- Object to certain types of data processing
To exercise any of these rights, please contact us using the details below.
8. Children's Privacy
Our services are intended for users aged 18 and over. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes via email or a notice on our website. Your continued use of our services constitutes acceptance of the updated policy.
10. Contact Us
For any privacy-related questions or requests, contact us at: