Privacy Policy

Last updated: May 28, 2026

go4gr8 is operated by MGStrategy, LLC ("MGStrategy," "we," "us," or "our"). This Privacy Policy describes how we collect, use, and protect your information when you use the go4gr8 platform at app.go4gr8.ai (the "Platform").

go4gr8 is built for leaders who need a space to think honestly. Our privacy architecture reflects that mission—it isn't a policy bolted on after the fact. It's how the system was designed from the ground up.

No one at MGStrategy, no one in your organization's HR team, no one anywhere reads your conversations with your sparring partner.

This is not just a policy we adopted—it is a technical reality baked into our architecture. Policies can be revised. This one can't.

Your sparring partner conversations are yours. Period.

What we collect and why

Account information. When your organization provisions your account, we receive your name, email address, job title, company, and location. This information is used to create your account and personalize your sparring partner experience.

Coaching and assessment inputs. If your coach or organizational sponsor provides structured input about your development context (such as assessment results, coaching notes, or organizational context), this information is used exclusively to personalize your sparring partner. Your coach and sponsor see only what they themselves provided—never your conversation content.

Conversation data. Your conversations with your go4gr8 sparring partner are stored to enable longitudinal memory, pattern recognition, and development tracking—the features that make your sparring partner more valuable over time. This data is accessible only to you through the Platform.

Usage data. We collect basic usage metrics (login frequency, session duration, feature usage) for platform performance and aggregate reporting. This data is never linked to conversation content and is reported only in aggregate to organizational sponsors—never at the individual level.

Technical data. Standard web application data such as browser type, IP address, and device information, collected automatically for security and performance purposes.

How your data is protected

Encryption. All data is encrypted in transit (TLS 1.2+) and at rest (AES-256) on AWS infrastructure.

Tenant isolation. Your data is architecturally separated from other users' data through row-level security policies enforced at the database level—not just the application layer. Cross-tenant access is not possible, even theoretically.

AI provider protections. go4gr8 uses Anthropic's Claude via their commercial Enterprise API. Under these terms:

Infrastructure. The Platform runs on AWS with encryption, access controls, and monitoring built to SOC 2 standards. For organizations requiring EU data processing, go4gr8 operates infrastructure in the AWS Frankfurt (eu-central-1) region.

What your organization sees—and doesn't

What organizational sponsors receive:

What organizational sponsors never receive:

This boundary is architectural, not administrative. There is no admin override, no escalation path, no exception process that exposes individual conversation content to anyone.

Data retention and deletion

Your conversations are retained for the duration of your active subscription to support the longitudinal memory and pattern recognition that make your sparring partner valuable over time.

When your account is deactivated, all your personal data—including conversation history, personalization files, and profile information—is fully deleted within 30 days.

You may request deletion of your data at any time by contacting support@go4gr8.ai. We will process erasure requests in compliance with applicable data protection regulations, including GDPR Article 17 (Right to Erasure).

Cookies and tracking

go4gr8 uses only essential cookies required for authentication and session management. We do not use advertising cookies, tracking pixels, or third-party analytics that follow you across the web.

Third-party services

Service Purpose Data shared
Anthropic (Claude API) AI processing Conversation messages (not used for training; deleted within 30 days)
AWS Infrastructure and hosting All platform data (encrypted, access-controlled)
SendGrid Transactional email Email address and name (for welcome and account emails only)

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

International data processing

go4gr8 processes data on AWS infrastructure. For organizations based in the European Union, we offer data processing through our AWS Frankfurt (eu-central-1) region to ensure data residency within the EU. Data processing arrangements are available upon request for organizations requiring formal Data Processing Addendums.

Your rights

Depending on your jurisdiction, you may have the right to:

To exercise any of these rights, contact us at support@go4gr8.ai.

Children's privacy

go4gr8 is designed for professional use by adults in organizational settings. We do not knowingly collect information from anyone under the age of 18.

Changes to this policy

We may update this Privacy Policy as our platform and practices evolve. Material changes will be communicated through the Platform or via email. The "Last updated" date at the top of this page reflects the most recent revision.


Contact

For questions about this Privacy Policy or our data practices:

MGStrategy, LLC
Email: support@go4gr8.ai
Web: go4gr8.ai