Privacy

Last updated April 3, 2026

This policy applies to www.goldiemay.com and app.goldiemay.com. It is part of our terms of service.

We don't sell your data.

What We Collect

  • Any data you explicitly enter into the Goldie May app
  • Any pages added to your research log via automatic logging, if you enable it
  • Contact data provided by FamilySearch when you sign-in via FamilySearch
  • Your IP address

Browser Extension

The Goldie May browser extension captures page data from genealogy websites (such as FamilySearch and Ancestry) to support your research. This includes names, dates, places, and other details visible on the page. Captured data is stored in your research log entries. You control when logging is active and can delete any entry at any time.

AI Research Assistant

Goldie May offers an AI research assistant to help with genealogical research. When you use the assistant:

  • Your conversation messages are sent to an AI model for processing
  • When you attach page data from your current browser tab, that data is included in the message to the AI
  • The AI can access genealogical data from FamilySearch on your behalf using your authenticated session
  • Conversations are stored in your account so you can return to them

Your data is never used to train AI models. See "AI Data Retention" below for details on how each provider handles your data.

When We Share Data

No personal information, identifiers, or user data is shared with any other party, except as required by a court order.

When you use Goldie May Volunteering, we share aggregate data about the work completed, but not your contact info nor identity, with the BYU Record Linking Lab.

Why We Process Your Data

  • By your consent when you create an account
  • For contract fulfillment for paid subscriptions
  • For legitimate business interests (security, fraud prevention)

Your Rights

We honor the following rights for all residents of Earth, meeting or exceeding the requirements of GDPR, CCPA, and similar laws:

  • Right of Access
  • Right to Correction
  • Right to Erasure
  • Right to Complain
  • Right to Restrict Processing
  • Right to Object
  • Right to Portability
  • Right to not be subject to Automated Decision-Making

To exercise any of these rights, email [email protected]. We will respond within 30 days.

Processors

Goldie May uses the following providers for cloud hosting and data processing:

  • FamilySearch
  • Stripe
  • DigitalOcean
  • Amazon Web Services
  • Google Cloud
  • Microsoft Azure
  • Fly.io
  • Cloudflare
  • Honeybadger

AI Data Retention

When you use the AI research assistant, your messages are processed by one of several AI providers depending on which model you select. None of these providers use your data to train their models.

  • AWS Bedrock (Anthropic Claude models and more) — zero data retention. Your inputs and outputs are not stored by AWS or Anthropic and are not used for model training.
  • Google Cloud Vertex AI (Google Gemini models and more) — zero data retention. Your inputs and outputs are not stored by Google and are not used for model training.
  • Azure AI Foundry (OpenAI GPT models and more) — data is processed under Azure's terms and is not used for model training.

Security & Encryption

All access to Goldie May is encrypted via TLS (Transport Layer Security). Data at rest is encrypted on our database servers. Passwords are never stored—authentication is handled through FamilySearch OAuth.

Cookies & Tracking

Cookies are required for authentication. We do not use advertising or tracking cookies.

Data Retention

You may delete your research data (projects, entries, people, conversations) at any time. Deleted data is permanently removed from our systems, not merely hidden or archived. Copies may persist in encrypted backups for a limited retention period.

Children's Privacy

Goldie May is not intended for users under 13. We do not knowingly collect data from children under 13. If you believe we have, contact us immediately at [email protected].

Data Breach Response

If a breach occurs that may affect your data or privacy, we will notify affected users without undue delay.

Location

Goldie May servers and other cloud hosting are located in the United States. By accessing Goldie May, you are importing any applicable data into the United States.

California Privacy

Under the California Consumer Privacy Act, Goldie May is a "service provider," not a "business" or "third party." We process your data only to provide the service you signed up for. We do not retain, use, disclose, or sell your information for any other commercial purpose.

Questions

If you have any questions, please contact me at [email protected].