Terms of Service & Privacy Policy
Version 2.1 — Effective October 26, 2026
These documents describe how AI Asset Vault works today. We plan to have them reviewed by legal counsel, and we will let you know when an updated version is published.
Terms of Service
1. Who we are and this agreement
AI Asset Vault & Launcher ("AI Asset Vault", "the Service") is provided by Gord Isman, operating as Gord Isman Consulting, of Collingwood, Ontario, Canada ("we", "us"). These Terms are an agreement between you and us. By ticking the box on the acceptance screen and using the Service, you agree to these Terms and to our Privacy Policy.
2. Who can use the Service
You must be at least 18 years old. The Service is built for business and professional use. If you use it on behalf of a company or organisation, you confirm you are allowed to accept these Terms for it. The Service is offered to customers in Canada and the United States.
3. Your account
- You sign in with an email and password, or with your Google account.
- Keep your login details private. You are responsible for activity under your account. Tell us right away if you think someone else has used it.
- When you accept these Terms, we record which version you accepted, when, and the email you accepted with.
4. Workspaces and who can see them
- Your content lives in one or more workspaces. Each workspace belongs to the person it is set up for, its account holder.
- Your workspace is never visible to other customers.
- At present, we set up each workspace for you. Our platform-owner account is a member of your workspace so we can provide setup, support and fixes. Every time the platform owner enters your workspace, the reason is recorded in your workspace's Access Log (see Privacy Policy, section 6).
5. Your content
- You own everything you create or upload: prompts, assets, variables, threads, notes and files.
- You give us permission to store, copy, process and display your content only as needed to run the Service for you. This includes sending content to our AI provider when you use an AI-assisted feature (section 6).
- We do not use your content to train AI models, and we do not sell it.
- You are responsible for having the right to store and use your content. If it includes other people's personal information, such as your clients' names or emails, you are responsible for having their permission and following the privacy laws that apply to you. Please do not store passwords, payment card numbers, or government ID numbers in the Service.
6. AI-assisted features and AI-generated content
- Some features use artificial intelligence: title, tag and category suggestions, content intake, link details, and semantic thread search. These send the relevant content to Google's Gemini service to process (Privacy Policy, section 5).
- AI output can be wrong, incomplete, or similar to output given to others. Review it before you rely on it. It is not legal, financial, medical or other professional advice.
- You decide whether to use AI suggestions, and you are responsible for how you use them.
7. The Launcher and other AI platforms
The Launcher opens third-party AI platforms such as ChatGPT, Claude or Gemini, and passes prompt text to them, or copies it to your clipboard, only when you choose to open a prompt on one of those platforms. What happens on those platforms is governed by their own terms and privacy policies, not ours.
8. Acceptable use
You agree not to:
- store or share illegal content, or content that infringes someone else's rights;
- upload malware, or try to break, overload or get around the Service's security;
- access another customer's data, or try to;
- resell, rent or share access to the Service without our written permission;
- use the Service to harass, defraud or harm anyone.
If we become aware of a violation, we may remove the content concerned and suspend or end the account involved.
9. Plans, billing and cancellation
- Prices, plan features and currency are shown at checkout. Applicable taxes are added at checkout.
- Checkout runs on GoHighLevel, and card payments are processed by Stripe. We never receive your full card number.
- Paid plans renew automatically, monthly or annually, until you cancel.
- For annual plans, we email you a reminder between 15 and 30 days before each renewal.
- You can cancel any time from Manage subscription in the app, or by emailing us. Cancellation takes effect at the end of the period you have paid for, and you keep access until then.
- 14-day guarantee. If the Service isn't right for you, email us within 14 days of your first payment and we will refund that payment in full. Your access ends when the refund is issued. The guarantee applies to your first payment only, not to renewals.
- Apart from the 14-day guarantee, we don't give refunds for partial billing periods, including the unused part of an annual plan, except where the law requires it.
- Founder rate. If you joined at a Founder rate, that price stays locked for as long as your subscription remains active, and the price changes described below do not apply to it. If you cancel, the Founder rate ends and can't be restored; if you return later, current prices apply.
- We work to keep prices fair and stable. If our running costs rise significantly, for example because AI features are used far more than we planned for, we may need to adjust prices or add fair-use limits to a plan. If that happens, we will give you at least 30 days' notice, the change will only apply from your next renewal, and you can cancel before it takes effect. If one account's use is far beyond normal and affects the Service or its running costs, we will contact you first to work out a solution, and may temporarily slow that account down if we need to.
10. Suspension
- We may suspend a workspace for non-payment, at the end of a cancelled subscription, after a refund, or for a breach of section 8.
- Suspension is a pause, not a deletion. Members can still sign in and see that the workspace is paused, but cannot open or change its content, and its share links stop working.
- We keep a suspended or cancelled workspace's data for at least 60 days. During that time you can ask us to reinstate it or to export your data. We will contact you before anything is permanently deleted.
- Once the reason is resolved, the workspace is reinstated exactly as it was.
11. Deleting content, workspaces and your account
- Items you delete (assets and threads) are removed from view straight away and permanently deleted after 30 days. Within those 30 days, contact us and we can recover them.
- Skills are deleted immediately and cannot be recovered. A Skill's previous version, kept when you upload a new one, is deleted after 30 days.
- Deleted workspaces are kept for at least 60 days, can be restored during that time, and can then be permanently deleted.
- Your account: ask us to delete it and we will do so within 30 days of verifying the request. This removes your login, your acceptance records, every workspace you own and everything in them, and your access to any other workspace.
- Backups and legal holds can delay final deletion, as described in the Privacy Policy, section 7.
12. Backups, export and import
- Any workspace member can export the workspace as a JSON file at any time. Keep your own copies of anything important.
- Before an import changes anything, the Service saves a safety snapshot. If the import fails, your workspace is restored automatically. The snapshot is deleted automatically within 2 days.
- We keep rolling database backups for 7 days to recover from technical failures. They are not a substitute for your own exports.
13. Our access to your workspace
We only enter your workspace to give support you asked for, set up or add content at your request, fix a problem, review security or abuse, or meet a legal requirement. Each visit is recorded in your Access Log. The Privacy Policy, section 6, explains exactly what is and isn't recorded.
14. Changes to the Service
We may add, change or remove features. If a change significantly reduces a paid feature you rely on, we will tell you in advance.
15. No warranties
The Service is provided "as is" and "as available". To the extent the law allows, we make no promises that it will be uninterrupted, error-free, or fit for a particular purpose.
16. Limit of liability
To the extent the law allows, we are not liable for indirect or consequential losses, such as lost profits or lost data. Our total liability for any claim is limited to the greater of what you paid us in the 12 months before the claim, or CAD $100.
17. Your responsibility to us
If a claim is brought against us because of your content or your breach of these Terms, you agree to cover our reasonable costs of dealing with it.
18. Ending this agreement
- You can stop using the Service and ask us to delete your account at any time (section 11).
- We may end your access for a serious or repeated breach of these Terms. If we stop offering the Service altogether, we will give at least 30 days' notice so you can export your data.
19. Our software
The Service's code, design and structure belong to us. Your content stays yours (section 5). If you send us suggestions, we may use them without obligation to you.
20. Legal requests and legal holds
We may preserve or disclose information when the law requires it, such as a court order. While a legal hold applies to a workspace, its data is not deleted, even if a deletion would otherwise happen.
21. Changes to these Terms
We will tell you about changes by email or in the app. For significant changes, the app will ask you to review and accept the new version before you continue. Each version carries a version number and date.
22. Governing law
These Terms are governed by the laws of Ontario and the federal laws of Canada that apply there. Disputes go to the courts of Ontario. This does not take away any consumer-protection rights that the law of the place you live gives you.
23. Contact
Gord Isman Consulting, Collingwood, Ontario, Canada — support@gordisman.com
Privacy Policy
1. Who is responsible for your information
Gord Isman, operating as Gord Isman Consulting, Collingwood, Ontario, Canada, is responsible for the personal information handled by AI Asset Vault. Gord Isman is our Privacy Officer. Contact: support@gordisman.com.
2. What we collect
| Information |
What it includes |
| Account |
Email address, account ID, sign-up and last sign-in dates. With Google sign-in, also your name and profile photo from Google. Passwords are held by Google as a secure hash; we never see them. |
| Terms acceptance |
Which version you accepted, when, and the email you accepted with. |
| Workspace details |
Workspace name, member account IDs, invited emails, the client email it was set up for, and its status and suspension history. |
| Your content |
Assets, prompts, variables, threads, conversation notes and saved AI output, uploaded files, and links. |
| Search data |
Short text excerpts and numeric search representations of thread content, used for semantic thread search. |
| Activity |
Run, launch and copy events (account ID, type, time) that power the History feature. |
| Access Log and Status History |
Platform-owner visits to your workspace, and suspension or reinstatement changes (sections 6 and 7). |
| Error reports |
When something breaks: your account ID, the error, and your browser type. Never your content or email. |
| Server logs |
Request IDs, account IDs, counts and error codes. Never your content. |
| Browser storage |
Your sign-in session, your active workspace, and display preferences, stored on your device. We use no cookies and no advertising or analytics trackers. |
| Purchases |
From our payment provider: name, email, billing address, plan and payment status. Never your full card number. |
| Emails |
Your email address and whether you agreed to receive news and offers. |
3. How we use it
- To run the Service: sign-in, storing and showing your content, search, AI-assisted features, export and import.
- To keep it secure: access rules, rate limits, abuse prevention, and the Access Log.
- To support you and fix problems.
- To bill you and manage your plan.
- To send service emails, and news or offers only if you agreed (section 4).
- To meet legal obligations.
We do not sell your information, show you ads, or use your content to train AI models.
4. Emails we send
- Service emails go to every customer: account, billing, renewal reminders, security, maintenance, and changes to these documents.
- News and offers go only to customers who agreed, for example by ticking the box at checkout. You can unsubscribe at any time with the link in every such email.
- Every email identifies us and includes our mailing address.
- Signing up for the app itself never adds you to a marketing list.
5. Who we share it with
We use these service providers to run the Service. Each only gets what it needs to do its job.
| Provider |
What they do |
What they receive |
Where |
| Google Cloud and Firebase |
Hosting, database, sign-in, file storage, server functions |
All the information in section 2 except purchases and emails |
United States. Server logs may be processed wherever Google operates. |
| Google Gemini |
AI-assisted features |
The content needed for the feature you use, such as an asset's text for a title suggestion, or thread text for semantic search |
Wherever Google operates. Under Google's paid terms, it is not used to train Google's models, and we have turned off request storage. |
| Sentry |
Error monitoring |
Account ID, error details, browser type |
United States |
| GoHighLevel |
Checkout, customer records and emails |
Name, email, billing address, plan, purchase history and email preferences |
United States and other countries where it operates |
| Stripe |
Card payment processing |
Payment details you enter at checkout |
United States and other countries where Stripe operates |
- Third-party AI platforms such as ChatGPT receive your prompt text only when you choose to open a prompt there. Their own privacy policies apply.
- Semantic thread search sends thread text to Google Gemini only in workspaces where that feature is turned on.
- Legal requirements: we disclose information only when the law requires it, such as a valid court order.
6. Platform-owner access and your Access Log
The platform owner can technically reach workspace data to provide support and keep the Service running. Here is how that access is controlled and recorded.
- What is recorded. Before the platform owner enters your workspace, opens its Workspace Setup, or takes an action on it (Export JSON Backup, Verify & Import Data, Rollback Import, Confirm & Purge Data, Delete Permanently), the app requires a reason and writes an entry to your workspace's Access Log.
- The reasons: help you asked for; adding content or setup for you; fixing a problem we found; security or abuse review; legal requirement; or other, with a note.
- What an entry shows: "Platform Owner", the date and time, the reason, and any note. Follow-up updates can be added. Entries can never be edited or deleted.
- What one entry covers: up to 8 hours in your workspace in one browser tab. Individual items viewed or changed during that time are not listed one by one.
- Where you see it: Workspace Setup → Access Log, any time. It is also included in your workspace export.
- What is not recorded in the Access Log:
- viewing the list of workspaces, which shows names and status only;
- account-level changes such as suspension, reinstatement or feature switches, which go in your Status History instead;
- updates applied to every workspace at once, such as platform maintenance;
- the platform owner's own workspace, and internal system workspaces;
- direct access to the database through Google's admin console, outside the app. We use that only for maintenance, data recovery, or legal holds.
- If your workspace is suspended, you can't open the Access Log in the app; ask us and we'll send you a copy.
- Logging began on October 6, 2026. The log is kept for the life of the workspace and deleted with it.
7. How long we keep it
| Information |
Kept for |
Then |
| Account and acceptance records |
While your account exists |
Deleted within 30 days of a verified deletion request |
| Workspace content, activity, Access Log, Status History |
While the workspace exists |
Deleted with the workspace |
| Assets and threads you delete |
30 days |
Permanently deleted automatically |
| Skills you delete |
— |
Deleted immediately |
| A Skill's previous version |
30 days |
Deleted automatically |
| Deleted workspaces |
At least 60 days |
Can then be permanently deleted |
| Suspended or cancelled workspaces |
At least 60 days |
Permanently deleted after we contact you |
| Import safety snapshots |
Up to 2 days |
Deleted automatically |
| Files uploaded for content intake |
7 days |
Deleted automatically |
| Share links |
Work for 48 hours, then stop working |
The expired link record is deleted with the item or workspace |
| Error reports |
30 days on our current plan, never more than 90 |
Deleted by Sentry |
| Server logs |
30 days |
Deleted by Google |
| Database backups |
7 days, rolling |
Overwritten |
| Purchase and tax records |
As long as tax law requires |
Deleted |
| Browser storage |
On your device until you sign out or clear it |
— |
- Backups: deleted data can remain in our rolling backups for up to 7 days after deletion.
- Legal holds: if the law requires us to preserve a workspace's data, its deletion is paused until the hold ends.
- After account deletion: your account ID may remain on items you created in other people's workspaces, such as a "created by" field. It no longer links to you. We keep an anonymous record that a deletion happened, with counts only.
- Google's own audit records of changes we make to our cloud project are kept by Google for 400 days. They record our administrative actions, not your content.
8. Where your information is stored
Your data is stored by Google in the United States, across several US data centres. Server logs may be processed in other countries where Google operates. Information stored outside Canada is subject to the laws of those countries, and may be accessible to their courts and authorities.
9. How we protect it
- Database rules let only a workspace's members, and the platform owner, reach its content.
- Google encrypts data in transit and at rest.
- App verification, rate limits and the Access Log help prevent and expose misuse.
- No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will notify you and the Privacy Commissioner of Canada as the law requires.
10. Your rights
- Access and copy: export your workspace at any time, or ask us for the personal information we hold about you.
- Correction: edit your content directly, or ask us to correct account details.
- Deletion: delete items yourself, or ask us to delete your account (Terms, section 11).
- Marketing: unsubscribe from news and offers at any time.
- Complaints: contact us first. You can also complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
We answer requests within 30 days and may ask you to confirm your identity first. We honour these rights for every customer, wherever you live.
11. Children
The Service is not for anyone under 18. We do not knowingly collect information from minors.
12. Changes to this policy
We will tell you about changes by email or in the app. For significant changes, the app asks you to review and accept the new version before you continue.
13. Contact
Privacy Officer: Gord Isman, Gord Isman Consulting, Collingwood, Ontario, Canada — support@gordisman.com