Privacy Policy

1. Who we are

Gooseberry (“Gooseberry”, “we”, “us”) is a relationship intelligence service operated by Nyada Ventures Ltd, a company based in 2/23 Customs Street East, Auckland CBD, Auckland 1010, New Zealand (NZBN 9429051433314). We are responsible for personal information under the New Zealand Privacy Act 2020. Our privacy officer can be contacted at privacy@usegooseberry.com.

This policy covers our website (usegooseberry.com), the Gooseberry app, and our beta waitlist.

2. Information we collect

Information you give us

• Account details — your name, email address, job title and time zone. If you sign in with Google, we receive your name, email address and profile picture from Google.
• Workspace content — contacts, organisations, notes, meetings, tasks, revenue records and settings that you or your colleagues add to Gooseberry.
• Files you upload — contacts files (for example Google or Outlook CSV, LinkedIn Connections.csv or vCard).
• Voice notes and transcripts you choose to record or paste after a meeting.
• Waitlist details — your name, work email, firm, role and team size.

Information from services you connect

Only if you choose to connect them, and only with read-only access:

• Google Calendar — events from your primary calendar for roughly the last three months and the next two months: titles, start and end times, locations, attendee names and email addresses, response status, and video-call links.
• Google Contacts — names, email addresses, phone numbers, organisations and job titles.
• Microsoft Outlook / Microsoft 365 (when available) — the equivalent calendar and contact information through Microsoft Graph.

Information collected automatically

• Essential cookies that keep you signed in. We don't use advertising cookies.
• Basic technical logs (such as IP address, browser type and error reports) used to keep the service secure and working.

3. How we use information

• To provide Gooseberry's features: finding past catch-ups in your calendar for you to confirm, matching meetings to the right people, preparing meeting notes, turning voice notes into follow-ups, reminders, the Relationship Map, revenue reporting and team insights.
• To work out a contact's organisation from a business email domain, to save you typing it.
• To keep accounts and workspaces secure, prevent abuse and fix problems.
• To respond to you and, if you joined the waitlist, to email you about access to Gooseberry.
• To improve Gooseberry using aggregated, de-identified usage information.

We never sell personal information, never use it for advertising, and never send emails or messages to your contacts. Calendar events stay private to you until you confirm them; only confirmed catch-ups become part of your shared workspace.

4. Google user data

Gooseberry's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google Calendar and Contacts data only to provide and improve the user-facing features described above.
• We do not use Google user data for advertising, and we do not sell it.
• We do not use Google user data to develop, improve or train generalised artificial-intelligence or machine-learning models.
• People at Gooseberry do not read your Google data unless you ask us to (for example, for support), it is necessary for security or to comply with the law, or the data has been aggregated and de-identified.
• We transfer Google user data to others only as needed to provide the service (see our service providers below), for security, or to comply with the law.

You can disconnect Google at any time in Settings → Integrations. Disconnecting revokes Gooseberry's access and deletes the stored access tokens. You can also remove access from your Google Account at myaccount.google.com/permissions.

5. Microsoft user data

When Microsoft sync is available, we will access Outlook calendar and contact data through Microsoft Graph with read-only, delegated permissions, and handle it under the same rules as Google data above. You can disconnect at any time, or remove access at myapps.microsoft.com.

6. Automated and AI-assisted features

Some features — such as meeting prep and organising voice notes — process your workspace content automatically to produce a draft. Drafts are never saved until you approve them, and external facts are labelled with their source. If we use a third-party AI provider to generate drafts, we will list it below, send it only the content needed for that draft, and require that it does not use your data to train its models.

7. Who we share information with

Within your workspace: information you add is visible to colleagues in your workspace, except items marked private (private notes are visible only to their author) and your calendar review list and uploaded address books, which only you can see.

Service providers who process data on our behalf, under contract:

We may also disclose information if required by law, to protect people's safety or our rights, or as part of a sale or restructure of our business (with this policy continuing to apply).

8. Where information is stored

Gooseberry data is stored in secure, managed cloud data centres operated by our hosting providers. Some providers may process information outside New Zealand. Where that happens, we take reasonable steps under Information Privacy Principle 12 to make sure it is protected in a way that, overall, is comparable to the Privacy Act.

9. How we protect information

• Encryption in transit (HTTPS/TLS) everywhere.
• Calendar access tokens encrypted at rest (AES-256) and accessible only to our servers — never to the browser.
• Each workspace's data is isolated at the database level with row-level security, checked by automated tests.
• Read-only access to connected accounts and least-privilege access within our team.

See our Security page for more. If a privacy breach is likely to cause serious harm, we will notify affected people and the Office of the Privacy Commissioner as the Privacy Act requires.

10. How long we keep information

We keep your information while your account is active. When you delete your account (Settings → Account), we delete your profile, your private notes and interactions, your connected-account tokens and your private review lists; if you were the only member of your workspace, the whole workspace is deleted. Shared workspace content you created stays with your firm. Waitlist details are kept until you ask us to remove them or the beta ends. Backups are retained for a limited period and then overwritten.

11. Your rights and choices

• Access and correction — you can ask for a copy of your personal information and ask us to correct it (Information Privacy Principles 6 and 7). Most of it you can edit in the app directly.
• Export — download your data at any time from Settings.
• Delete — delete your account from Settings → Account, or ask us to.
• Disconnect — remove Google or Microsoft access at any time.

Contact privacy@usegooseberry.com for any request; we will respond within 20 working days. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner.

12. Your contacts' information

Gooseberry holds information about the people you work with. You are responsible for having a lawful reason to keep it — usually your existing professional relationship — and for using it consistently with privacy law. If someone asks us about their information, we will refer them to the workspace that holds it and help where we can.

13. Children

Gooseberry is a business tool and isn't intended for anyone under 16.

14. Changes to this policy

If we make material changes, we will update the date above and tell account holders by email or in the app before the changes take effect.

15. Contact us

Nyada Ventures Ltd · 2/23 Customs Street East, Auckland CBD, Auckland 1010, New Zealand · privacy@usegooseberry.com