ShareAndGo

Privacy

Your personal information in the United States

We give everyone in the United States the privacy rights that California's privacy law (the California Consumer Privacy Act, as amended by the California Privacy Rights Act) gives California residents, wherever in the US you live. This section explains what we do with your personal information and how to use those rights.

Where your information is stored

Your documents, records and files are stored in the United States, in Google Cloud's Iowa region. Where we store them follows the country you give us when you sign up, and never your IP address. Your account details (your profile, organization, team members and subscription) are held in Sydney, Australia. Sign-in details are held by Google in the United States, and payments are handled by Stripe in the United States.

Who is responsible for what

For your own account details (your sign-in, profile, organization, team members and billing), we're responsible for your personal information.

For what you put into our products, such as documents, data rooms and bookings, and for the people you send them to, we handle that information on your behalf and follow your instructions. You're responsible for having the right to add or send the personal information of the people involved. If someone asks us about information you control, we pass the request to you. If we become aware of a security breach affecting information you control, we'll tell you without undue delay.

Why we collect and use personal information

We use personal information to:

  • create and run your account, including sign-in, your organization, team members and subscription;
  • provide the products you use;
  • send service emails and keep their delivery records;
  • bill you and take payment;
  • help you when you ask for support;
  • keep our service secure and prevent abuse;
  • understand how our products are used, so we can improve them;
  • measure our website through analytics on our marketing pages;
  • answer Enterprise enquiries and prepare quotes;
  • meet our legal duties, such as keeping tax records.

We don't sell your personal information, and we don't share it for cross-context behavioral advertising.

What we collect, where it comes from and who we share it with

This covers the information we collect to run your account. What you store in our products is covered under "Who is responsible for what" above: we use it only to provide the service you asked for.

In the last 12 months we collected these categories of personal information:

  • Identifiers: your name, email address and sign-in details, and your IP address, which appears in our server logs and is checked at sign-up to stop abuse.
  • Commercial information: your subscription, plan and billing history. Card details go straight to Stripe and we never see them.
  • Professional information: your organization and your role in it.
  • Internet activity: how you use our sites and products, such as pages visited, features used and error logs.
  • Geolocation data: approximate location only, never precise. We work out your country from your IP address when you sign up, and our website analytics estimates your city. We never use it to decide what you can use.

It comes from you, from your organization when someone there invites you, from Google when you sign in with Google, from Stripe when you pay, and from our own systems as you use them.

We use it for the purposes listed above. We disclose it only to service providers who work for us under contracts that limit what they can do with it: cloud hosting, sign-in, payments, email delivery, website analytics, and AI services.

We don't sell your personal information or share it for cross-context behavioral advertising, so there's nothing to opt out of. That includes the personal information of anyone under 16. Because we don't sell or share, we don't act on Global Privacy Control signals: there's nothing for them to stop.

We don't use or disclose sensitive personal information for anything beyond providing our service, so there's nothing to limit. We use fixed automatic rules to run and protect the service, such as plan limits, send and upload limits, temporary locks after failed attempts to sign in or enter an access code, virus scans, and links that expire on the date their owner set. If one of them affects you and you think it's wrong, write to our privacy contact. We don't offer any financial incentive in exchange for your personal information.

Your rights and how to use them

You can ask us:

  • to tell you what categories of personal information we hold about you, and give you a copy of the specific pieces;
  • to delete it;
  • to correct it if it's wrong.

Write to our privacy contact below from the email address on your account. To confirm it's you, we'll reply to that address, and we may ask for details only the account holder would know. If we can't confirm who you are, we'll tell you why. Someone else can make a request for you if you give them signed, written permission; we may still confirm the request with you directly.

We answer within 30 days, and if we can't, we'll tell you within those 30 days when we will. We don't charge for these requests, and we'll never treat you differently for using these rights.

You can correct most of your account details yourself in Settings.

Marketing email

We send marketing emails only if you've agreed to them. Every one has an unsubscribe link, and unsubscribing doesn't affect your service.

How long we keep personal information

We keep personal information only as long as we need it for the purposes above, or as long as the law requires.

  • Email delivery records: deleted after 90 days, and gone from our backups within a further 14 weeks.
  • Billing and tax records: as long as the law requires, currently seven years.
  • What's stored in a workspace, after the workspace is deleted or its last member closes their account: 30 days, and gone from our backups within a further 14 weeks.
  • Your MyAndGo account details, after you ask us to close your account: 30 days, and gone from our backups within a further 14 weeks.
  • When your account closes, we keep a scrambled copy of your email address so that we never send you marketing email again.
  • We also keep a scrambled record that you've had a free trial, so the same person or business can't start a second one.
  • If you've changed your email choices, we keep a record of each change and when you made it, so we can show what you chose.
  • If we've stopped an account for misuse, closing it doesn't delete the details we keep to stop it being used again.
  • Canceling a subscription, letting a trial end without paying, or not using your account doesn't delete anything when it happens.

AI features in ShareAndGo

Some features of ShareAndGo use AI to work with your documents: reading the text in scanned files, searching your documents, writing summaries and tags, and answering your questions about a data room. For US customers, this processing happens in the United States, using a cloud AI service that works for us. That service doesn't store your documents, and they aren't used to train AI models. If its automatic abuse checks flag a request, it may keep that request for up to 90 days, in the United States, so it can be reviewed.

AI assistants you connect

If you connect an AI assistant to your workspace, it receives only what you ask it for, within the access you give it. Its provider handles that under your own agreement with them, and the provider may be in the United States or another country. The provider isn't one of our service providers: you choose it, and you can disconnect it at any time.

That can include confidential documents in your data rooms, so connect only an assistant you're happy to trust with them.

Personal information handled outside the United States

AI assistants you choose to connect may be run by providers outside the United States (see above).

We hold some personal information ourselves in Australia, such as account records, email delivery records, Enterprise enquiries, and messages you send to our support or privacy team. Our team works from Australia: when you ask us for help, or when we look after the service, people on our team may access your workspace and its content, which stays stored in the United States. We protect it under our own policies and Australian privacy law (the Privacy Act 1988). Other companies that handle personal information for us outside the United States must protect it under their contract with us.

Children

Our products are for businesses, and we don't knowingly collect personal information from children under 13.

Information from Google

If you connect your Google account, for example to import files from your Google Drive, we use the information we receive from Google only to provide that feature. ShareAndGo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Questions and complaints

Write to our privacy contact with any question or complaint. We'll acknowledge it within 5 business days and answer within 30 days. If you're not satisfied with our answer, you can contact your state's attorney general.

Privacy contact

Privacy contact: Andy Carey, Fintech Development Pty Ltd. Email: privacy@myandgo.ai. Our privacy team works from Australia, and requests sent to this address are handled there.

Last updated: November 6, 2026.

Fintech Development Pty Ltd · Level 1, 18-20 Knuckey Street, Darwin NT 0800, Australia · ACN 655 608 969 · ABN 78 655 608 969