We don’t hold your data yet.
GoalCadence is in development. There are no customer accounts, no production application and no product data. Today this site holds a waitlist email, anything you sent through the contact form, and — only if you agree to it — website analytics. That is the whole story.
Every row below says exactly what holds today and what does not. We would rather under-claim than decorate this page with badges we have not earned. When something changes, this page changes with it.
Where things stand
| Area | Status | Detail |
|---|---|---|
| Product status | In development | There are no customer accounts and no production application. Signing up joins a waitlist; it does not create an account. |
| Certifications | None | No SOC 2, ISO 27001, HIPAA or PCI DSS. We hold none of them and claim none of them. |
| Customer data | None held | No product data exists because the product is not live. The only records we hold are waitlist entries and contact form messages. |
| Payments | Not collected | We take no card details and run no billing. Nothing on this site asks for payment information. |
| Website analytics | Consent-gated | Google Analytics 4 and Microsoft Clarity, both governed by your consent choice and denied by default in the EU, EEA and UK. |
| Hosting | Vercel | The site is served from Vercel's edge network. No data residency commitment applies yet because there is no customer database. |
| DPA | Not yet available | There is no processing of customer data to cover, so there is nothing meaningful to sign. A DPA will be available before launch. |
| Status page / SLA | Not yet | There is no production service to report uptime for. Both arrive with the product. |
What this site collects
Waitlist signups
Your name, your company name if you give one, and your email address. We use it to tell you when GoalCadence opens up. Nothing else.
Contact form messages
Your name, email, company, the type of enquiry, and the message you wrote. We use it to reply to you.
Analytics, only with your consent
Google Analytics 4 records how the site is used. Microsoft Clarity records heatmaps and session replay of your visit. Both are governed by the cookie banner, and Clarity is not loaded at all until analytics consent is granted.
What we never collect
No payment details, no passwords, and no product data — because there is no product to hold it in yet. Downloading a template or copying an agent skill requires nothing from you at all.
How consent works here
Your region is detected at the edge before any analytics script initializes. In the EU, EEA and UK, analytics and advertising storage are set to denied by default and stay denied until you choose in the banner. Outside those regions analytics defaults to granted, and declining turns it off. Whatever you choose is stored in your browser and applied on every later visit — and it overrides the regional default in both directions.
Advertising storage is denied by default everywhere, for everyone, until explicitly granted.
Who else processes this
| Provider | What it handles |
|---|---|
| Vercel | Hosting and delivery of this website. |
| Google Analytics 4 | Website usage analytics. Only with your consent. |
| Microsoft Clarity | Heatmaps and session replay. Only with your consent. |
| Resend | Email delivery for waitlist and contact form submissions. |
One detail worth stating plainly: what you submit through a form is also written to our hosting provider’s application logs, which is how we make sure a submission is never silently lost. Those logs are retained for a short period and are not used for anything else.
What we will publish before launch
These are commitments, not current facts. Nothing in this list is in place today, and we would rather say that than imply otherwise.
- A data processing agreement covering the live product, available on request.
- A named data residency commitment for customer data.
- Documented technical and organizational measures: encryption in transit and at rest, access control, logging and backups.
- A complete subprocessor list for the product, with advance notice of changes.
- A security contact and a stated response time for reports.
Asking us something this page does not answer
If your security review needs something that is not here, ask and we will answer honestly — including when the answer is that we do not have it yet.
Last reviewed 20 September 2026.
Common security review questions
Is GoalCadence SOC 2 certified?
No. GoalCadence holds no SOC 2, ISO 27001, HIPAA or PCI DSS certification, and we do not claim one. The product is still in development, so there is no production environment to audit yet. If a certification is a requirement for you, tell us which one and we will tell you honestly whether it is on the path to launch.
What data does GoalCadence hold about me right now?
If you joined the waitlist: your name, your company name if you gave one, and your email address. If you used the contact form: those fields plus whatever you wrote in the message. That is the complete list. There are no customer accounts, so there is no product data of any kind.
Do you use my data to train AI models?
No. Waitlist and contact form submissions are used to reply to you and to tell you when GoalCadence launches. They are not sold, not shared for advertising, and not used as training data.
Where is the site hosted?
On Vercel, which serves the site from its global edge network. Because the product is not live, there is no customer database and therefore no data residency commitment to make yet. We will publish one before launch.
How do I get my data deleted?
Email support@goalcadence.com and ask. Since the only records we hold are a waitlist entry or a contact form message, deletion is quick and we will confirm when it is done.
Do you set cookies before I consent?
In the EU, EEA and UK, no analytics or advertising storage is granted until you choose. The consent default is set from your region before Google Analytics initializes, and Microsoft Clarity is only loaded after analytics consent is granted. Outside those regions analytics defaults to granted, and declining in the banner turns it off.
Who do I contact about a security issue?
Email support@goalcadence.com with the details. We would rather hear about a problem on this marketing site early than find out later, and we will acknowledge your report.