Privacy Policy

1. The short version

We collect two things, and neither of them is your data or your users' data:

• On the website: product analytics through PostHog, so we can see which pages and buttons people use and catch broken ones.
• In the GoModel software: an update check that reports the running version, the distribution, and an anonymous install identifier, so we know how many instances of each version exist when a vulnerability is found.

GoModel runs on your own infrastructure. Your prompts, completions, API keys, provider credentials, model names, usage records, and audit logs never reach enterpilot. There is no hosted GoModel service that we operate on your behalf.

2. Website analytics

The GoModel website uses PostHog to understand how the site is used and to spot errors. PostHog is a product analytics service; for this website it processes data on PostHog's US cloud infrastructure.

What we collect through PostHog:

• Page views and the path of the page you are on.
• Clicks on tagged elements: navigation links, call-to-action buttons, copy-to-clipboard buttons, and outbound links to GitHub, Discord, the documentation, and the demo.
• Referring URL and UTM campaign parameters, so we can tell where traffic comes from.
• Technical information your browser sends with every request: browser and operating system, screen size, language, and IP address. PostHog derives an approximate location (typically country or city level) from the IP address and does not store the full address on the event.
• A pseudonymous device identifier stored in a cookie or in your browser's local storage, so repeat visits within a session can be counted as one visit rather than many.

We do not run accounts, logins, or user profiles on this website. PostHog is configured so that person profiles are only created for identified users, and the website never identifies anyone, so visits stay pseudonymous. We do not use this data for advertising, we do not sell it, and we do not share it with advertising networks or data brokers.

Opting out: analytics are not required to use the site. Blocking analytics scripts with your browser's tracking protection, an ad blocker, or a content blocker stops this collection entirely, and the site continues to work normally.

3. The GoModel version check

GoModel checks once a day, and on the first admin dashboard visit of each day, whether a newer release exists. The check is a request to the release manifest at gomodel.enterpilot.io/version.

The request carries:

• the running GoModel version;
• the distribution name (the open-source build or GoModel Pro);
• an anonymous install identifier: a random UUID generated on first use and stored in the gateway's data directory. It is random, it encodes nothing about your host, your organization, or your configuration, and its only purpose is to keep one deployment from being counted as many;
• when the check is triggered by an admin dashboard visit rather than the background schedule: your browser's user agent, accepted language, browser client hints (browser name and version, platform, mobile flag), and a random per-browser visit identifier with the date of the visit, so a single browser is counted once per day.

As with any HTTP request, our server also sees the network address the request arrives from and the time it arrives.

The request never carries:

• API keys or provider credentials;
• prompts, completions, embeddings, or any request or response body;
• model names, usage data, cost data, or audit logs;
• your users' addresses or identities;
• the hostname your gateway is served on;
• your configuration file or environment variables.

Why we collect it: to know how many instances of each version are running. When a vulnerability is discovered, that count is how we judge how many deployments are affected, how urgently to publish a fix, and how long to keep supporting an older release. It also tells us whether an update actually reaches people.

Turning it off: the check is on by default and can be switched off completely. Set GOMODEL_VERSION_CHECK_ENABLED=false in the environment, or set version_check.enabled: false in your configuration file. With it off, this subsystem makes no outbound requests at all and GoModel simply reports the version you are running. You can also point GOMODEL_VERSION_CHECK_URL at a private mirror of the manifest, in which case the request goes to your own host instead of ours.

The dashboard cookie: the admin dashboard stores a cookie named gomodel_version_check holding a date and a random identifier, so the dashboard checks at most once per browser per day. That cookie is set by your own gateway in your own browser. It is not set by enterpilot and we never receive it; only the random identifier inside it travels with an update check.

4. Services we link to

The website links out to services we do not control: GitHub, Discord, Cal.com for booking a call, and the GoModel documentation. Following such a link, joining our Discord, or booking a call means that service processes your data under its own privacy policy, and we receive whatever that service shows us, such as the name or handle you sign up with and the details you enter when booking a call. We use those details only to reply to you.

5. Retention

Website analytics are retained inside PostHog under its standard retention for our plan and are deleted when that period lapses. Version check records are kept only as long as they are useful for counting deployments per version and assessing the reach of a security advisory, after which they are deleted or reduced to counts that identify no install.

6. Legal bases and your rights

Where the GDPR or UK GDPR applies, we rely on our legitimate interest in operating, securing, and improving GoModel and this website. Counting versions so that security fixes reach affected deployments is part of that interest, and the data involved is deliberately minimal and not tied to a named person.

Subject to applicable law, you may ask us to access, correct, or delete data relating to you, ask us to restrict or stop processing it, or complain to your data protection authority. Because the data described above is pseudonymous, we may need information from you, such as a device identifier or install identifier, to locate anything at all; if we cannot identify data as yours, we may be unable to act on the request.

We do not sell personal information and we do not share it for cross-context behavioral advertising, as those terms are used under California law.

7. International transfers

enterpilot, Inc. is based in the United States and the services described here process data in the United States. If you use the website or the GoModel version check from outside the United States, the data described in this policy is transferred there.

8. Children

GoModel is a developer tool. The website and the software are not directed at children, and we do not knowingly collect data from them.

9. Changes

We may update this policy as the website and the software change. The current version always lives at this address, with the date it was last updated at the top. Material changes to what we collect will be reflected here before they take effect.

10. Contact

Questions about this policy, or a request about your data, go to abuse [at] enterpilot.io.

enterpilot, Inc., a Delaware corporation.