Security & compliance
Honesty rule
GotoDeck outputs are decision-support checklists, not legal advice, certifications, or guarantees of market access. We do not claim 100% coverage, never-miss detection, or automatic compliance. Heavily regulated sectors (finance, health, children) need specialist counsel beyond this tool.
Inputs & retention
Product descriptions you paste are used to generate your scan result. They are not sold. Retention, sub-processors, and data-subject rights are described in our Privacy Policy. Enterprise plans can include a DPA on request.
AI path integrity (P0)
Live AI paths never return fake success under HTTP 200 when the model is unavailable. Explicit Demo mode returns demo:true. Missing keys return 503 AI_NOT_CONFIGURED. Upstream failures return 502. Quota exhaustion returns 429 before the model call.
Payments
Checkout is minted server-side via Waffo (/api/checkout). Webhook signatures are verified; fulfilment is idempotent. Contact: lixingliangsy@163.com.