Privacy Policy

Last updated October 20, 2026

Go1000.ai ("Go1000", "we") is a DBA of Online Commerce Hub LLC. Go1000 is software that businesses use to run their website, client messages, texts, phone, WhatsApp and social media. This policy explains what we collect, why, and the choices you have.

Who this covers

Business customers who sign up for Go1000, and their clients and visitors, whose information the business keeps in Go1000. For a business's clients, that business decides what it collects and is responsible for it; Go1000 processes it on the business's behalf.

What we collect

  • Account details: name, email, phone, business name, address, license and billing details.
  • Business content: website text and images, price lists, policies, knowledge-base answers, posts, and the messages, texts, calls and files exchanged with clients.
  • Connected accounts: when a business connects Facebook, Instagram, WhatsApp, TikTok, Google Business Profile or LinkedIn, we receive access tokens and the data those platforms allow for the features the business uses (see below).
  • Usage and device data: pages visited, actions taken, IP address, browser, and error logs, to run and secure the service.

Connected social and messaging accounts

A business connects its own accounts, and can disconnect them at any time in Settings → Connections. With the permissions the business grants, Go1000:

  • Facebook Pages and Instagram: lists the Pages and Instagram accounts the business manages so it can pick one; publishes the posts, images, carousels and videos the business creates or approves; reads the business's own post results (views, reach, likes, comments, shares, followers) to show its results and suggestions; and receives and sends messages to the business's Page and Instagram inbox so the business (or its AI assistant) can reply.
  • WhatsApp: sends and receives messages on the business's own WhatsApp Business number.
  • TikTok, Google Business Profile, LinkedIn: publishes the business's posts to its own account, profile or company page, reads their results, and, on Google, shows and replies to the business's reviews.

We use this data only to provide these features to that business. We do not sell it, use it for advertising, or share it with other businesses. Tokens are stored encrypted.

Google: Go1000's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

  • To provide the service: websites, messages, texts, calls, posts, scheduling, payments and reports.
  • AI features: to draft replies, posts and summaries for the business. Content is sent to our AI providers only to produce that result, and is not used by them to train their models.
  • To bill, support, secure and improve Go1000, and to meet legal obligations.

Who we share it with

Only service providers that run parts of Go1000 for us, under contract: hosting and database (Vercel, Supabase), payments (Stripe), email (Resend), texts and calls (Telnyx), AI (Anthropic and others we name on request), and the platforms a business connects. We share information when the law requires it. We never sell personal information.

Requests from public authorities

We review every government or law-enforcement request for legality and the required legal process, challenge requests that are unlawful or overbroad, disclose only the minimum required, document every request, and tell the affected business first unless the law forbids it.

Texts and calls

Businesses text only clients who agreed to receive texts. Reply STOP to stop texts from a business and HELP for help. Mobile numbers and text consent are never shared with third parties for their marketing.

How long we keep it

As long as the business's account is active, then as required by law or for the business's records. Data from connected platforms is refreshed or removed as each platform requires (for example, within 30 days for cached place details). When a business disconnects an account, we delete its tokens and stop collecting from it.

Your choices

You can ask to see, correct or delete your information. A business's client should contact that business first. To delete data Go1000 holds, see Data deletion.

Security

Encryption in transit and at rest for secrets, per-business data separation, access controls and audit logs. No system is perfectly secure; we notify affected businesses of a breach as the law requires.

Children

Go1000 is for businesses and is not directed to children under 13.

Changes

We post changes here with a new date, and tell business customers of important changes.

Contact

Use the request form on Data deletion for privacy requests, or the contact options on go1000.ai.