Privacy Policy
How American Gold Council handles account information, applications, documents and site visits.
Updated November 12, 2026
Status and controller
This notice is a draft for American Gold Council. Its full legal entity identity, registered address, jurisdiction and privacy contact have not yet been confirmed. These details and the retention schedule must be completed and reviewed before commercial launch. This notice is not a claim of GDPR compliance.
Information you provide
We store account identifiers and email through account authentication; profile names, affiliations and company details; membership and certification applications; institutional due-diligence answers; uploaded documents; logo files and public listing descriptions; self-attested learning progress; credential records; contact inquiries and privacy requests. Do not upload unnecessary personal or financial information.
Purposes and lawful grounds
Information is used to operate accounts, respond to inquiries, assess applications, manage member listings and credentials, and safeguard the service. Depending on the activity and applicable law, grounds may include pre-contractual steps or contract performance, legal obligations, legitimate interests, or consent. The Council must document the applicable basis and any additional conditions for sensitive information; consent is not assumed for every use.
Public and private information
Approved individual and company members appear in the public Member Directory with their public name, category, description, website and approved logo. Applications, account email, documents and privacy requests are not public. Credential verification displays the member name, credential type, status and validity dates. Uploading a logo does not grant accreditation.
Service providers and international access
Lovable provides hosting, Lovable Cloud account and data services, storage and visitor analytics. Google processes sign-in data if you choose Google sign-in, and Google Fonts receives ordinary network request information when fonts load. The gold-price service supplies market quotations through the Council’s server. No payment checkout is currently enabled. Data may be processed outside your country; the Council must confirm processor contracts, locations and appropriate transfer safeguards before launch.
Visitor analytics
Lovable’s visitor analytics uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify visitors. It records pages visited, where visitors came from, country, browser, operating system and device type, time on page, page-loading speed and errors. On this site, these measurements are recorded for every visitor. Detailed data is kept for 90 days and daily summaries for a year. Lovable collects this data for us. Lovable’s privacy policy explains how it handles it: https://lovable.dev/privacy.
Lovable’s privacy policyRetention and security
Private documents use restricted storage and temporary access links. Council administrators can review records relevant to their duties. The Council has not yet approved retention periods for account, application, document, contact and credential records; those periods and deletion procedures must be finalized before launch. No system can guarantee absolute security.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability, withdraw consent where consent is the basis, and complain to your supervisory authority. Requests are stored in the Council review queue through the Data Rights page after sign-in, or through Contact Us. Identity and legal exceptions may need review; a request does not automatically delete an account. GDPR requests generally require a response within one month, subject to lawful extensions.
Changes
Material changes will be reflected in an updated notice. The Council must establish any additional notification procedure required by law.