Privacy policy

Last updated 10 November 2026

Your Gloath account is one sign-in for every Gloath Limited product. This policy covers the account itself (accounts.gloath.com). Each product also has its own privacy policy for what happens inside that product.

Who we are

Gloath Limited, New Zealand. Contact: support@gloath.com.

What we hold

• Your email address, and whether you have confirmed it. We do not use passwords: you sign in with a code or link sent to that address.
• Which Gloath products you use and when you first and last signed in to each.
• Your plans and purchases: subscriptions, one-time purchases, credits, gift codes redeemed and refunds. Card details are entered on Stripe's pages and never reach us; we keep Stripe's customer and payment references.
• Your name, if you add one, and whether you want product news emails (off unless you switch it on).
• Sign-in history: for each sign-in, the time, IP address, approximate country, browser and the app you signed in to. You can see it on your account page; it is kept for 90 days.
• Security records: sign-in attempts and limits (to stop abuse), and a log of changes made to your account by you or our staff.

We do not hold the files you work on in Gloath products through this account.

What we use it for

To sign you in, to give you what you paid for on each product, to send sign-in emails and purchase notices, to answer support requests, to prevent fraud and abuse, and to meet tax and accounting duties. We do not sell your information or use it for advertising.

Cookies

accounts.gloath.com sets only the cookies needed to keep you signed in and to protect the sign-in process. There are no advertising or analytics cookies here. Each product explains its own cookies.

Who processes it for us

• Cloudflare: hosting, the database, and the "verify you are human" check on the sign-in page (Turnstile), which looks at signals from your browser to tell people from bots.
• Stripe: payments, invoices and the billing portal.
• Resend: delivery of sign-in and purchase emails.

These providers may process information outside New Zealand, including in the United States and the European Union, under their own safeguards.

How long we keep it

For as long as you have an account. When you delete your account, the Gloath products you have used are told, so that they delete what they hold for you too (each product's policy says how long that takes; public pages come down within minutes). Sign-in codes are deleted within days, sign-in history after 90 days, security logs within two years. Payment records are kept for as long as tax law requires (seven years in New Zealand), detached from your account if you delete it.

Your rights

On your account page you can see your plans, purchases, invoices and recent sign-ins, change your name, email address and email preferences, download a copy of your information, sign out of every device, and delete your account. You can also email support@gloath.com from your account's address for any of these. These rights apply under the New Zealand Privacy Act 2020, and under the GDPR and similar laws where they apply to you. You may also complain to the New Zealand Privacy Commissioner or your local regulator.

Changes

We will post changes here and, for significant ones, email you.