Privacy Policy

Baby Goat Kidnap LLC, a California limited liability company operating GoatAtlas (“GoatAtlas,” “we,” “us,” or “our”), explains in this policy how we collect, use, disclose, and retain personal information.

This policy applies to visitors, account holders, business representatives, people who contact us, and individuals whose information appears in business listings.

Our Terms of Service separately govern use of GoatAtlas. Our Cookie Policy provides additional information about cookies and similar technologies.

Information you provide

We may collect:

• Account information: your email address, account preferences, and information needed to verify your authority to represent a business.
• Business and contact information: names, business names, telephone numbers, email addresses, street addresses, hours, services, service areas, license information, website addresses, map links, social links, logos, keywords, and descriptions.
• Listing content: text, images, files, and updates you submit or approve.
• Support communications: messages, reports, attachments, and information you provide when requesting help.
• Subscription and transaction information: selected plans, subscription status, invoices, payments, refunds, discounts, referral credits, and transaction identifiers.
• Privacy-request information: details needed to identify, verify, and respond to a request.

Some business information may also be personal information, particularly when it identifies a sole proprietor, employee, or other individual.

Information from other sources

We may obtain business information from public business websites, the Better Business Bureau website (including ratings and complaint counts reviewed by our team), and other publicly available sources consulted during listing review.

Our team may use this information to prepare a listing before a business owner creates or claims an account. When you provide a website address, we may read its public pages to suggest listing details and check existing information.

We may also receive information from payment, authentication, security, and other service providers as needed to operate GoatAtlas.

Payment information

Stripe processes payments. GoatAtlas does not receive or store full payment-card numbers or card security codes.

We may receive limited payment information, such as card brand, last four digits, billing contact details, transaction status, and invoice information.

Stripe’s handling of information is also described in its own privacy disclosures.

Listing activity

We count visits to listings and interactions with telephone, email, website, map, and business-profile links. We may also identify the general source of a visit, such as a search engine, AI assistant, or direct visit.

Listing reports display aggregate totals rather than named visitor records. These reports are estimates and may be affected by automated traffic, tracking restrictions, and technical limitations.

We do not retain records of individual visits. Each visit or link interaction increments a daily aggregate count for the relevant listing, categorized by interaction type and general source. These counts are not associated with an IP address, cookie, or other visitor identifier.

Technical logs

GoatAtlas and its hosting, security, and other infrastructure providers may process request information such as IP address, browser type, device information, requested page, referring page, timestamps, and error details.

We use this information to deliver the site, troubleshoot problems, prevent abuse, and maintain security. Aggregate listing reports do not mean that all underlying technical information is anonymous.

Abuse prevention

When someone submits a form or reports a listing, we may process their IP address and create a temporary hashed or otherwise transformed identifier to detect repeated or abusive submissions.

These identifiers are intended to reduce exposure of the original address. We do not treat hashing alone as a guarantee of anonymity.

Abuse-prevention identifiers are retained with the associated report record. GoatAtlas does not store the original IP address; however, it may appear temporarily in request logs maintained by our hosting provider.

We use information to:

• Create, review, publish, maintain, and correct listings.
• Verify account access and authority to represent a business.
• Process subscriptions, payments, refunds, discounts, and referral credits.
• Send sign-in messages, receipts, renewal and price notices, listing decisions, and service reports.
• Respond to support requests, listing reports, and privacy requests.
• Prepare aggregate activity reports and improve the directory.
• Detect fraud, investigate misuse, and protect accounts and systems.
• Maintain records, resolve disputes, and meet legal obligations.

We do not use information for materially different purposes without providing any additional notice or obtaining any consent required by applicable law.

Information displayed in a published listing is publicly available. This may include a contact person’s name, business telephone number, email address, and street address.

Please provide contact information intended for public use. If your business operates from your home, consider whether publishing your street address is appropriate and use any available service-area or address-visibility options.

Your private sign-in email is not displayed merely because it is used for your account. If you separately provide that same address as a public listing contact, it may appear in the listing.

We do not publish billing records or private support communications as part of your listing.

Public listings may be indexed, copied, cached, or otherwise accessed by search engines, AI assistants, and other third parties. We make listing information available in formats intended to help people discover businesses.

Removing information from GoatAtlas does not guarantee its removal from independently operated websites, search indexes, caches, AI services, or other third-party systems.

To correct, claim, or request removal of a listing, contact us using the details below. We may verify your identity or authority before acting.

We disclose information as reasonably necessary to providers that help us operate GoatAtlas, including:

• Payment processors.
• Database, authentication, and file-storage providers.
• Website hosting, infrastructure, and security providers.
• Email delivery and support-email providers.
• AI providers used to prepare and review listing information.
• Address-validation and mapping providers.
• Backup-storage providers.

The information disclosed depends on the service. For example, an address-validation provider may receive a business address, while an email provider receives recipient details and message content.

We use appropriate agreements and access restrictions for providers processing personal information on our behalf. Some providers may also process information for their own purposes as described in their privacy policies.

We may change providers. Any change remains subject to this policy, applicable law, and any additional notice or consent required.

We may also disclose information:

• To comply with legal obligations or valid legal processes.
• To investigate fraud, security incidents, or violations of our terms.
• To protect rights, property, or safety.
• To professional advisers where reasonably necessary.
• In connection with a proposed or completed merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections.
• At your direction or with your consent.

We use Anthropic (Claude) to help extract business details from public websites, suggest keywords, and review listing text.

Information submitted to this provider may include public website text, business details and contact information submitted to GoatAtlas, draft listing content, and keywords.

Under its commercial terms, our AI provider does not use information submitted through its API to train its models. The provider may retain inputs and outputs for a limited period for safety and abuse monitoring, as described in its terms.

AI suggestions may contain errors. Our team reviews new listings, and business representatives should check information they submit or approve.

Making public listing content discoverable by independently operated AI services is separate from our use of AI providers to prepare listings. We do not control how independent services process information they obtain from public pages.

Necessary technologies

We use cookies or similar technologies needed for account access, security, preference storage, and other essential site functions.

Authorized support sessions may use a short-lived session cookie.

Optional technologies

With your consent where required, we may use:

• Embedded Google Maps content.
• Embedded YouTube content.
• Referral-attribution cookies.

Embedded services may receive information such as your IP address, browser details, and the page you are viewing when their content loads or you interact with it. Their providers may use cookies or similar technologies under their own policies.

Embedded maps and videos do not load, and no request is sent to their providers, until you consent or select the option to load the content. Map images displayed on listing and location pages are retrieved by GoatAtlas servers and are not loaded directly from the mapping provider by your browser.

You can manage optional technologies through the Cookie Settings link at the bottom of every page. Withdrawing consent affects future optional processing; it does not necessarily remove information already received by another provider.

Our Cookie Policy explains the technologies used, their purposes and duration, and available controls.

Do Not Track

Browser “Do Not Track” signals are separate from Global Privacy Control.

GoatAtlas does not currently change its processing in response to browser Do Not Track signals.

Global Privacy Control

Global Privacy Control communicates a preference to opt out of certain sales or sharing of personal information.

Where applicable law requires us to recognize this signal, we will process it as an opt-out request for the browser or device transmitting it and, where required and reasonably possible, the associated account.

Our current sale, sharing, and advertising practices are described in Section 10.

For certain account communications, our email provider may report delivery status and whether a tracking image was loaded.

These records help us monitor delivery and maintain communication records. An image load does not reliably establish that a person opened or read an email; automated systems, image proxies, and privacy features may affect the result.

For tracked messages, we retain the time of delivery, the time the message was first opened, and any bounce or spam-complaint report. We do not store IP addresses, device details, or link-click information from these reports. Tracking applies to messages written by our team, decisions regarding listings or requested changes, and notices of price changes.

Routine sign-in messages and receipts are not tracked.

You may be able to limit image-based tracking through your email settings. We retain communication and tracking records according to Section 12.

We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined by applicable California law.

We do not operate an advertising network or use personal information to target advertising across unrelated websites.

Disclosures needed to provide the service, public listing publication, and interactions with third-party embedded content are described elsewhere in this policy. We evaluate these arrangements according to applicable law rather than assuming that the absence of a monetary payment means a disclosure is not a sale or sharing.

If our practices change, we will update our disclosures and provide any required choices before beginning the new processing.

Authorized personnel may access account information and dashboard functions when reasonably necessary for support, troubleshooting, security, or requested changes.

Access is restricted according to role and task. Support access is time-limited and logged, including who accessed the account, when, and the stated purpose.

Staff may view limited payment metadata needed for support and billing administration, but not full payment-card numbers or security codes through GoatAtlas.

We use safeguards designed to protect information, including encrypted connections, access controls, and encrypted backups.

No system is completely secure. If a security incident triggers a notification obligation, we will notify affected individuals or authorities as required by applicable law.

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing services, maintaining security, meeting legal obligations, and resolving disputes.

Our retention schedule is:

We may retain relevant records longer when reasonably necessary for a legal hold, active dispute, fraud investigation, or other permitted purpose.

Backup copies are restricted from ordinary use. If a backup is restored, we will take reasonable steps to reapply applicable deletions.

Removing a listing from public view, closing an account, and deleting personal information are different actions. We explain their interaction when responding to your request.

You can review and update available account and listing information through your dashboard.

You may also request access to, a copy of, correction of, or deletion of personal information by emailing admin@babygoat.io or contacting support.

We offer these request options subject to reasonable verification, applicable legal requirements, and permitted exceptions.

We may ask for information reasonably necessary to verify your identity and authority. Please do not send sensitive identity documents unless we specifically request a secure verification method.

We will respond within the period required by applicable law. Where a 45-day response period applies, we will respond within that period or explain a permitted extension and its reason.

If we cannot fulfill a request in whole or in part, we will explain the reason unless legally prohibited. We may retain information for permitted purposes such as legal compliance, security, fraud prevention, or resolving claims.

Active subscriptions

Canceling a subscription does not automatically delete all related information.

If a deletion request affects an active paid account, we will explain how it affects the listing and subscription and coordinate any necessary cancellation. We will not require you to retain an account unnecessarily as a condition of exercising an applicable privacy right.

Authorized agents

Where applicable, an authorized agent may submit a request on your behalf. We may require evidence of authorization and may verify your identity as permitted by law.

Marketing choices

We do not currently send promotional emails. If we begin sending promotional emails, we will update this policy and include an unsubscribe mechanism in each such message.

Depending on whether the California Consumer Privacy Act and related laws apply to GoatAtlas and the information involved, California residents may have rights to:

• Know about and access personal information collected, used, and disclosed.
• Request deletion or correction.
• Obtain personal information in a portable format where required.
• Opt out of the sale or sharing of personal information.
• Limit certain uses or disclosures of sensitive personal information.
• Receive equal treatment for exercising privacy rights.

These rights are subject to applicable conditions and exceptions. We will not unlawfully discriminate against you for exercising them.

Use the request methods in Section 13. Our current position on sale and sharing appears in Section 10, and our handling of Global Privacy Control appears in Section 8.

GoatAtlas is operated from the United States. Personal information may be processed in the United States and in other countries where our service providers or their subprocessors operate, including through our hosting provider’s global network.

Privacy protections may differ between countries. Where applicable law requires safeguards for international transfers, we will use the required safeguards.

This section does not treat your use of the site as consent to a transfer where applicable law requires another legal mechanism.

GoatAtlas is intended for adult users and business representatives. Individuals must be at least 18 to create an account.

We do not knowingly collect personal information directly from children under 18 through accounts or forms.

Listing content, public websites, or submitted materials may incidentally include information about children. Please do not submit children’s personal information or identifiable images unless necessary, lawful, and supported by appropriate permission.

If you believe a child has provided personal information or appears in content that should be removed, contact us. We will review the concern and take appropriate action, including deletion where required or appropriate, subject to lawful retention obligations.

We may update this policy and will post the revised version with an updated date.

For material changes, we will provide appropriate notice, including email to account holders where applicable. If a change requires consent or another legal step, we will complete that step before applying it.

A policy update does not by itself authorize materially different uses of previously collected information where additional notice or consent is required.

Baby Goat Kidnap LLC, operating GoatAtlas

Email: admin@babygoat.io

Support: https://goatatlas.com/support