GoNorth

Privacy Policy

Last updated: October 8, 2026 · Versión en español

Go North Systems and GoNorth are operated by L&J LLC(“we,” “us,” or “our”), based in Livonia, Michigan, United States. We run https://gonorthsystems.com, the GoNorth web app at app.gonorthsystems.com, the GoNorth mobile app, and the websites GoNorth builds for local businesses. This policy explains what information we collect, how we use it, who helps us handle it, and the choices you have. We collect only what we need to provide our services, and we never sell your information.

Each business that uses GoNorth has its own website with its own privacy policy, which explains how that business handles the requests, calls and messages its customers send it. For that information, the business decides how it is used and we process it on the business's behalf, as described in Information we handle for businesses below.

Information We Collect

  • Waitlist, signup and contact forms: your name, email address, phone number, business name, and any message you send us.
  • Your business details: when you look up your business or build a free website, we fetch public information about the business, such as its Google Business Profile (name, address, hours, photos and reviews) and its existing website, to build the preview.
  • Account details: if you use GoNorth, your name, email address, phone number, business details, team members, settings, and the content you add to your website.
  • Chat assistant: the messages you type into the chat on our site, which are processed by an AI model to generate answers.
  • Calls, texts and email with us: what you tell us when you call, text, WhatsApp or email us. Calls to our own lines may be recorded and transcribed, and may be answered by an AI voice assistant; you are told when a call may be recorded.
  • Call scheduling: if you book a call, scheduling details are collected by our booking provider (Cal.com) under its own privacy policy.
  • Billing:your plan, billing history and the email used for billing. Card details are entered on Stripe's pages (or handled by Apple or Google for app store purchases) and are never stored by us.
  • Technical basics: our hosting providers process standard server logs (IP address, browser type, pages requested) to operate and secure the site.
  • Site usage analytics: we keep our own first-party record of how visitors use our site: pages and sections viewed, links and buttons clicked, which form fields were used (never what you type in them, except a business name you search for), how far you scroll, and time on page. It is tied to a random identifier stored in your browser, not to your IP address. If you join our waitlist, we link that visit to your signup so we can see which pages helped.
  • Advertising measurement:on our own marketing pages and signup, we use the Meta Pixel (with Meta's Conversions API) and the Google Ads tag to measure how well our ads work, such as page views, signups and booked calls. When you sign up, a hashed (scrambled) copy of your email may be sent to Meta to match the signup to an ad. These tags are never placed on the websites GoNorth builds for businesses. See “Cookies” below.

How We Use Your Information

  • To provide GoNorth: build and host your website, deliver requests and messages, and run the features you turn on
  • To respond to your inquiries, schedule calls and help you get set up
  • To send you service messages, such as account, billing and security notices
  • To send updates you asked for (you can unsubscribe at any time)
  • To measure our advertising and improve our site and services
  • To prevent fraud and abuse, keep our services secure, and meet legal obligations

We do not sell or rent your personal information. We do not use the content of your business's requests, calls or messages to advertise to anyone, and we do not use it to train AI models.

Information We Handle for Businesses

When a business uses GoNorth, its customers reach it through the business's GoNorth website and number. We store and process that information to provide the service to the business, and it is visible only to people signed in to that business. Depending on the features the business turns on, it includes:

  • Requests sent through the website's form: name, phone, email, address or ZIP code, the service needed, details and photos.
  • Website chat conversations, answered by an AI assistant from the business's own information.
  • Calls to the business's GoNorth number. On paid plans, calls are recorded unless the business turns recording off, and the caller hears “This call may be recorded.” Recordings are transcribed and summarized so the business can see what was said. An AI voice assistant may answer calls the business misses, and may call a customer back about a request they sent.
  • Text messages (SMS) and WhatsApp messages between the business and its customers.
  • Emails between the business and its customers.
  • Quotes, invoices, appointments and booking details, and the status of payments.
  • Simple counts of website page views and taps on the call button.

Customers of a business should contact that business with questions or requests about their information. We will help the business respond, and you can also email us at hello@gonorthsystems.com.

Service Providers

We use a small number of providers to run our services. Each receives only the data needed to perform its function, and only to do that work for us:

  • Vercel (website hosting) and Supabase (database, file storage and sign-in)
  • Twilio (phone numbers, calls, call recording and transcription, text messages, and WhatsApp messaging)
  • Meta (WhatsApp Business messaging, and advertising measurement on our own marketing pages)
  • Vapi, and the speech and AI model providers it uses, for the AI voice assistant
  • Anthropic (the Claude AI model, for chat answers, call summaries and writing help)
  • Resend (email delivery)
  • Stripe (our billing, and payments a business collects through Stripe Connect) and Square (payments a business collects through Square)
  • Apple and Google (app store purchases and push notifications), Expo (push notification delivery), and RevenueCat (managing app store subscriptions)
  • Google (business listing information, reviews and maps, Google Calendar when you connect it, and advertising measurement on our own marketing pages)
  • Cal.com (call scheduling)

We may also share information if the law requires it, to protect the rights and safety of our users or others, or as part of a merger or sale of our business, in which case this policy will continue to apply to your information.

All the above categories exclude text messaging originator opt-in data and consent; this information won't be shared with any third parties.

Payments

Card and bank details are entered directly on Stripe, Square, Apple or Google payment pages and are handled under their own terms and privacy policies. We never see or store full card numbers. We keep the record of a payment (amount, date, status and what it was for) so the business and its customer can see it was paid.

Cookies and Local Storage

We use browser storage for functional preferences (your light/dark theme choice, your language choice, and whether you have already seen an offer), to keep you signed in, and for a random identifier used by our own site-usage analytics (described above). On our own marketing pages we also use the Meta (Facebook) Pixel and the Google Ads tag, which set cookies to help us measure our advertising. Meta's use of this data is described in Meta's privacy policy and Google's in how Google uses information for ads. You can opt out of ads personalization at Facebook ad preferences and Google's My Ad Center, or block cookies with your browser's settings and extensions. The websites GoNorth builds for businesses do not use advertising cookies; their chat keeps a conversation token in your browser so you can pick up where you left off.

Text Messages (SMS)

GoNorth texts you only if you tick the optional box to get texts on our signup form, or if you text us first. Those texts are about your signup: when your spot opens and help getting set up. Agreeing to texts is not required to sign up.

  • Message frequency varies.
  • Message and data rates may apply.
  • Reply STOP to any text to opt out. Reply HELP for help, or email hello@gonorthsystems.com.
  • Carriers are not liable for delayed or undelivered messages.

Businesses that use GoNorth text their own customers from their own number, under their own website's Privacy Policy and Terms, and only with that customer's consent or after the customer texts them first.

We do not share or sell your mobile number or text-message consent with third parties or affiliates for their marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information won't be shared with any third parties.

The GoNorth App

If you use the GoNorth app (web or mobile), we process your account details (name and email), your business details, and the service requests your website receives, including the names, phone numbers and messages your customers send. Notes and photos you add to a request are stored privately and are visible only to people signed in to your business. Quotes and invoices you send are visible to anyone who has the link.

To send you new-request alerts, we store a push notification token for your device. It is deleted when you sign out or delete your account. We do not sell this data or use it for advertising.

If you connect WhatsApp, Meta's signup gives us your WhatsApp Business Account ID and we register your business number with Twilio as a WhatsApp sender. We use it only to send and receive your business's WhatsApp messages.

Google Calendar (Google User Data)

GoNorth Pro lets a business owner connect their Google Calendar. This is optional and only happens when the owner taps Connect Google Calendar and approves Google's consent screen. We request two permissions:

  • See when you are busy (calendar.freebusy): we read only busy and free time ranges, never the titles, attendees or details of your events, so customers booking online cannot pick a time you are already busy.
  • Add and update GoNorth appointments(calendar.events): when you schedule a visit in GoNorth, we create that event in your calendar (title, time, your customer's name and phone, and your note), and update or remove it if the appointment changes or is canceled. We do not read, change or delete any other events.

What we store:the email address of the Google account you connected and a Google refresh token, so the sync keeps working. The token is encrypted with AES-256-GCM before it is saved (see “Data Protection” below). Busy times are used the moment a booking page is shown and are not stored.

How it is used and shared: only to provide these calendar features to you. We do not sell Google user data, share it with third parties, use it for advertising, or use it to train or improve AI or machine-learning models, and we never send your calendar events or busy times to AI services. If you use the GoNorth AI assistant to book customers, it receives only the open appointment times GoNorth works out from your booking hours, not any data read from your Google Calendar. Only our own servers, hosted on Vercel and Supabase with encrypted connections, handle it.

Retention and deletion:you can disconnect at any time from the app (Calendar, then Google Calendar) or from your Google Account's third-party access page. Disconnecting revokes the token with Google and deletes it from our systems immediately. Deleting your GoNorth account deletes it as well. Events already added to your calendar stay there unless you remove them.

How Google user data is protected: we treat Google user data as sensitive data. It is encrypted in transit (TLS 1.2+) and at rest (AES-256), the refresh token is additionally encrypted with AES-256-GCM using a key held only on our servers, and row-level security means only our server-side code can read it, never other users, browsers or the app. Full details are in Data Protection below.

GoNorth's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data Protection: How We Protect Sensitive Data

We protect personal and sensitive data, including Google user data (Google Calendar access tokens and the connected account email), with the following data protection mechanisms:

  • Encryption in transit: all data sent between your browser or the GoNorth app and our servers, and between our servers and Google, travels over HTTPS (TLS 1.2 or higher).
  • Encryption at rest: our database and file storage (Supabase) are encrypted at rest with AES-256. Credentials that grant access to other services, such as Google Calendar refresh tokens and payment-provider tokens, are additionally encrypted with AES-256-GCM before they are stored, using a key kept only in our server environment, never in the database or the app.
  • Access controls:Google user data and other credentials can be read only by our server-side code. Database row-level security blocks access to these records from browsers and the app. Business data is visible only to people signed in to that business, and access to production systems is limited to GoNorth's owner.
  • Least data: we request only the Google permissions needed for the features you turn on, store only what is listed in this policy, and do not store calendar busy times or the contents of your other events.
  • Deletion: disconnecting a service revokes and deletes its stored credentials immediately; deleting your account deletes your data within 30 days.
  • Incidents: if we learn of a security incident affecting your data, we will notify you and the relevant authorities as required by law.

No method of transmission or storage is completely secure, but we work to protect your information and review these safeguards as the product changes.

How Long We Keep Information

  • Account and business data, including requests, messages, call recordings and transcripts: while your account is open, and deleted within 30 days after you delete your account.
  • Waitlist and inquiry information: as long as needed to work with you, or until you ask us to delete it.
  • Records of text-message consent and opt-outs: as long as needed to prove consent and honor opt-outs.
  • Billing and tax records: as long as the law requires.
  • Server logs and site-usage analytics: only as long as they are useful to operate and improve the site.

Deleted data may remain in encrypted backups for a short time until those backups are replaced.

How to Delete Your Data

You can delete your GoNorth account and the data that goes with it at any time:

  • In the GoNorth mobile app: go to More, then Account, tap Delete account and website, and confirm.
  • On the web: sign in at app.gonorthsystems.com, open Settings, go to Delete your account, type your business name to confirm, and choose Delete everything.
  • By email: email hello@gonorthsystems.comfrom the address you sign in with, with the subject “Delete my GoNorth data”. We will confirm by email when it is done.

When you delete your account, your website goes offline and your phone alerts stop right away, Google Calendar is disconnected, and within 30 days we delete your account, business details, website, and the requests, conversations, recordings, notes, photos, quotes and appointments stored for your business. Your GoNorth phone numbers are released and your WhatsApp sender is removed. We keep only records the law requires, such as billing and tax records. Subscriptions bought through Google Play or the App Store are managed by that store; cancel them there so you are not charged again. More details are on our Delete your GoNorth account page.

If you are not a GoNorth user (for example, you joined our waitlist, contacted us, or messaged a business on WhatsApp or by text through GoNorth), email hello@gonorthsystems.com with the phone number or email address you used, and we will delete your information, or pass your request to the business that controls it, within 30 days.

Your Privacy Rights

You can ask us to tell you what personal information we have about you, give you a copy, correct it, or delete it, and you can opt out of marketing email at any time with the unsubscribe link in the email or by emailing us. To make a request, email hello@gonorthsystems.com. We may need to verify your identity first, and we will respond within 45 days. We will not treat you differently for using these rights.

California and other U.S. states: depending on where you live, state laws such as the California Consumer Privacy Act give you the rights above, plus the right to know the categories of information we collect and the categories of providers we share it with (both listed in this policy), and the right to appeal if we deny your request (reply to our answer to appeal). You can use an authorized agent to make a request for you.

Do not sell or share:we do not sell personal information for money. Our use of the Meta Pixel and Google Ads tag on our own marketing pages may count as “sharing” for targeted advertising under some state laws. To opt out, email hello@gonorthsystems.com with the subject “Do not sell or share my personal information”, use the ad settings linked in “Cookies” above, or block cookies in your browser.

Spanish-speaking users in Mexico and the Dominican Republic: see the rights sections of our Spanish privacy policy.

Where Your Information Is Stored

We are based in the United States, and our services and providers store and process information in the United States and other countries where they operate. If you use GoNorth from outside the United States, your information is transferred to and handled in the United States, where data protection laws may differ from those in your country.

Children

Our services are meant for businesses and adults. They are not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or under 16 where local law sets a higher age). If you believe a child has given us information, email hello@gonorthsystems.com and we will delete it.

Changes

If we update this policy, we will post the new version here with a revised date. If a change materially affects how we use information we already have, we will tell account holders by email or in the app before it takes effect.

Contact

Questions or requests about privacy? Email us at hello@gonorthsystems.com. L&J LLC, Livonia, Michigan, United States.