Privacy Policy

Last updated: 23 October 2026

This policy explains how ExportDat handles personal information across our website, customer application, API and AI assistant connections.

Who we are

ExportDat is operated by BIG GOFER LTD, registered in England and Wales, company number 14561573. Our registered office is 28 Stephendale Road, Farnham, Surrey, England, GU9 9QP. We are the controller of personal information used to run ExportDat. Contact us at hello@exportdat.com for privacy questions or requests.

Information we collect

• Account information: your name, email address, verified account identifier and sign-in/session information. WorkOS provides authentication.
• Content you submit: extraction URLs and the available post text, captions, images, transcripts, author details and other source information retrieved to fulfil your request. Source material may contain personal information about other people.
• Service records: job identifiers, usage totals, activity outcomes, account balances and transaction/credit records where applicable.
• Technical information: network and browser information, security events, request categories, status and timing information used by us and hosting providers to operate and protect the service.
• Communications: information you provide when you email us, request access or contact support.

Google sign-in

When you choose Google sign-in, Google and our authentication provider supply basic identity information, such as your name, email address, profile information and account identifier. We use it to create or identify your account, authenticate you, maintain sessions and protect access.

Google is used only for sign-in. We do not request access to your Gmail messages, Google Drive files, contacts or calendars. We do not sell Google user data, use it for advertising or use it to train AI models. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements where applicable.

You can remove Google access through your Google Account connections. This stops future authorisation; it does not automatically delete your ExportDat account. Email us to request account deletion.

How and why we use information

We use information to provide extraction and account features, deliver results, manage usage, respond to support requests, secure the service and meet applicable legal obligations. Our legal bases are performance of our contract with you, legitimate interests in running and protecting the service, compliance with legal obligations, and consent where required for optional features or tracking. You may withdraw consent without affecting processing already carried out.

ExportDat retrieves content; your chosen AI assistant interprets it. We do not use submitted or Google user data to train AI models. Submit only content you are entitled to process, and avoid submitting sensitive personal information that is unnecessary for your task.

Who receives information

We use service providers to deliver the product: OpenAI Sites and its hosting/security infrastructure for the marketing website, Railway for the customer application and API, and WorkOS for authentication. Extraction requests may be processed by configured content-acquisition or transcription services when needed to retrieve the requested source material. These providers receive information necessary for the relevant operation, subject to applicable arrangements.

When you use an AI assistant connection or send results to another application, that provider receives the content you choose to retrieve. Its own privacy policy and retention rules also apply. ExportDat cannot withdraw copies already delivered to your assistant or application. We may also disclose information when legally required, to protect rights and security, or in a business transfer subject to appropriate protections. We do not sell personal information.

How long we keep information

• Extraction jobs and results: normally one hour. Continuation/media handles normally expire ten minutes after first retrieval.
• Operational logs and daily usage counters: up to 30 days; the current monthly usage counter is also maintained.
• Customer activity: where prepaid accounts are enabled, outcome and deduction records are retained for 90 days without source URLs or content.
• Accounts and access-control records: retained while needed to provide and secure access. Credit balances and their audit ledger are retained for reconciliation, subject to deletion requests and legal retention needs.
• App sessions: up to seven days; temporary login state up to ten minutes.
• Recovery backups: approximately four weeks. Deleted or expired information may remain in recovery copies until those backups expire.
• Support and legal records: retained as needed to resolve requests, meet legal obligations and handle disputes.

These periods describe ExportDat’s service storage. External source platforms, authentication providers and AI assistants may retain their own copies under their policies.

Cookies and planned analytics

See our Cookies Policy for essential session and security technologies. Google Tag Manager is installed on this marketing website, and its published container includes Google Analytics configuration for website measurement. Analytics may process page views, interactions, browser and device information, and online identifiers. Microsoft Clarity is being considered. See the Cookies Policy for further details.

International processing and security

Our providers may process information outside the UK. Where required, we use recognised transfer safeguards, such as adequacy decisions or appropriate contractual protections. Contact us for details. We use access controls, HTTPS and session safeguards to protect information, but no internet service can guarantee absolute security.

Your choices and rights

Depending on your circumstances and applicable law, you can request access, correction, deletion, restriction or portability of personal information, and object to processing based on legitimate interests. Email hello@exportdat.com; we may need to verify your identity. You can delete owned extraction jobs through the authenticated API. Requests may be subject to lawful exceptions and necessary account/security records.

You can complain to the UK Information Commissioner’s Office or your local supervisory authority. Please contact us if you have concerns so we can try to resolve them.

Children and policy changes

ExportDat is not directed at children under 18. Contact us if you believe a child has provided personal information. We will update this policy when our practices change and provide additional notice or seek fresh consent where required.