clause.watch Contracts Recent changes Start monitoring

Monitored company

GoCo

clause.watch tracks 3 legal documents published by GoCo (goco.io), re-reading each one every six hours. Below is what each document covers, in plain English.

API Terms and Conditions

16,066 characters · Read the original

GoCo.io API Agreement: Key User Terms and Risks

> Scope note: This agreement does not contain a detailed privacy policy. It incorporates GoCo.io’s separate, “then-current” Privacy Policy, so important data practices—including specific data categories, retention, and user rights—must be confirmed there.

1. Data Collection and Usage

  • GoCo.io may collect information through the API or GoCo.io Offering about the Licensee and its employees, contractors, and agents.
  • The agreement does not identify precisely:
  • What personal data is collected;
  • How long it is retained;
  • Where it is stored;
  • Whether it is sold, used for advertising, or combined with other data; or
  • What security and deletion procedures apply.
  • Data use is governed by the then-current Privacy Policy and applicable data-protection requirements. By accessing or providing information through the API, the Licensee consents to GoCo.io’s actions described there.
  • The Licensee warrants that it has obtained all rights, consents, and permissions necessary to transmit or store data through the API. GoCo.io disclaims liability for unauthorized use or misuse of that data by the Licensee or others.
  • “Confidential Information” includes information transmitted to, stored on, or processed by systems used with the API or GoCo.io Offering. Each party must use commercially reasonable safeguards and protect the other party’s confidential information.

2. User Rights Regarding Data

The API Agreement itself grants no specific individual data rights, such as access, correction, deletion, portability, or objection rights. Those rights, if available, must be determined from:

  • GoCo.io’s Privacy Policy;
  • Applicable law, such as privacy laws governing employees or consumers; and
  • Any separate service or data-processing agreement.

The Licensee—not necessarily GoCo.io—must provide legally required privacy notices and obtain end-user consents. Licensees should confirm that their contracts and notices cover API data transfers and identify who handles data-subject requests.

3. Third-Party Sharing

The agreement does not provide a detailed list of third parties or service providers receiving data. It generally permits GoCo.io to process information consistently with its Privacy Policy.

The Licensee may not disclose GoCo.io Confidential Information to third parties unless authorized, and must protect it with commercially reasonable measures. The Licensee remains responsible for its own end users and for their conduct in connection with the API.

Review the Privacy Policy for disclosures to hosting providers, affiliates, analytics providers, professional advisers, governmental authorities, or other processors.

4. AI/ML Training

The agreement is silent on whether API or personal data is used to train, fine-tune, evaluate, or improve AI/ML models. It also does not state whether submitted data is excluded from model training.

Do not assume that data is excluded. Confirm the position in the Privacy Policy or obtain a written contractual commitment, particularly before transmitting employee, health, benefits, or other sensitive information.

5. Key Obligations and Restrictions

The Licensee must:

  • Keep API keys confidential and is responsible for all activity conducted under them.
  • Use the API only to integrate with its own Licensed Application.
  • Comply with law, GoCo.io documentation, usage guidelines, and rate limits.
  • Monitor users for fraudulent, harmful, inappropriate, or unlawful activity and restrict offending users.
  • Obtain all required privacy notices, consents, and data permissions.
  • Protect the API against unauthorized access, misuse, theft, and infringement.
  • Ensure end users comply with applicable agreement provisions.

The Licensee may not:

  • Copy, modify, sublicense, sell, distribute, reverse engineer, or derive the API;
  • Circumvent rate limits or security controls;
  • Interfere with API operations or use unauthorized access methods;
  • Disable GoCo.io consent screens, alerts, settings, or communications;
  • Use the API to replicate or replace the GoCo.io product experience;
  • Conceal its identity or the application’s identity; or
  • Combine the API with unauthorized software or services.

Feedback may be used by GoCo.io worldwide, permanently, royalty-free, and without compensation.

6. Liability and Disputes

  • The API is provided “as is,” without warranties, including warranties of security, accuracy, availability, compatibility, error-free operation, or fitness for purpose.
  • GoCo.io excludes liability for lost profits, corrupted data, business interruption, system failures, and other indirect or consequential damages.
  • Total liability is capped at $50, to the maximum extent permitted by law.
  • Claims must be brought within one year after the relevant event.
  • Either party may terminate at any time; GoCo.io may revoke access. A Licensee breach causes automatic termination.
  • Texas law governs. Disputes must be brought exclusively in federal or Texas state courts in Houston, Harris County.

7. Changes and Notices

GoCo.io may modify the Agreement with 30 days’ prior notice. The Licensee may terminate if it objects; otherwise the changes apply.

The Licensee consents to electronic notices, which satisfy legal writing requirements. Because privacy practices are governed by a separate, changing Privacy Policy, users should monitor both documents and retain copies of the versions applicable when data is submitted.

Privacy Policy

32,804 characters · Read the original

Privacy Policy Overview

GoCo.io, Inc. — last revised June 3, 2025

This policy applies to GoCo.io’s websites, apps, subdomains, and other services that link to it. By using the Services—or opting in where legally required—you accept the policy. It does not cover third-party websites or services linked to or embedded in GoCo.io’s Services.

1. Data Collection & Usage

Information collected

GoCo.io says it may collect nearly all information you provide or that it receives from devices, partners, and integrated services, including:

  • Contact and profile data: name, address, telephone number, email, account identifiers.
  • Sensitive identifiers: Social Security number, passport number, and driver’s-license number.
  • Demographic and protected-class information: age, birthday, gender, national origin, marital status, and potentially other information you choose to provide.
  • Employment information: employer, job title, job history, résumé, and education history.
  • Commercial information: products or services purchased or used and consumer profiles.
  • Device and online activity: IP address, device ID, browser, domain, search and browsing history, page interactions, access logs, and referring websites.
  • Location: general or potentially precise location, including IP-based location and device signals.
  • Photos and other communications: photos and information in emails, texts, letters, or other communications.
  • Inferences: profiles about user attributes, behavior, preferences, or characteristics.

It may obtain information from employers, partners, vendors, and third-party services integrated with GoCo.io, such as payroll, insurance, background-check, and HR providers.

Purposes

GoCo.io may use information to:

  • Provide, personalize, maintain, and improve the Services;
  • Create or verify accounts and facilitate integrations;
  • Communicate with users and respond to requests;
  • Perform analytics, security, fraud prevention, and business operations;
  • Send or support marketing and targeted advertising;
  • Comply with legal obligations and protect GoCo.io, users, customers, or the public;
  • Pursue other stated “legitimate interests.”

Cookies, heat maps, log files, session replay, pixels, and similar tools may track activity and preferences. The Services do not respond to browser “Do Not Track” signals.

2. User Rights

Depending on your location, you may request to:

  • Access or obtain copies of your information;
  • Correct inaccurate information;
  • Delete, block, or restrict use of information;
  • Object to certain processing;
  • Download information you provided;
  • Obtain details about processing, retention, and third-party disclosures;
  • Confirm whether information is stored in the United States.

Requests may be made by calling 888-284-2894 or writing to the listed Privacy Department address. GoCo.io may verify your identity and may refuse or limit requests where legally permitted or where other people’s rights are affected.

California residents may additionally have CCPA/CPRA rights, including access, deletion, correction, opting out of sale or sharing for cross-context behavioral advertising, restriction of sensitive-information processing, and protection against discrimination for exercising rights.

3. Third-Party Sharing

GoCo.io may share information with:

  • Affiliates, partners, contractors, agents, and service providers;
  • Analytics, communications, marketing, security, and cloud vendors;
  • Third parties you authorize or authenticate, including integrated HR, payroll, insurance, and background-check providers;
  • Authorities or other parties when legally required, to protect rights or safety, investigate suspected unlawful activity, or enforce agreements;
  • Parties involved in a merger, sale, bankruptcy, or other corporate transaction.

GoCo.io states that end-user information, including employee information, will not be shared with advertising partners or unrelated third parties except to provide the Services or complete a customer-requested integration. However, its own targeted advertising may involve limited advertising-network activity for other collected information.

Information posted in public reviews or feedback may be viewed, copied, and redistributed by others. You bear the risk of publicly posting it.

4. AI/ML Training

The policy does not expressly say that personal information is used to train artificial-intelligence or machine-learning models. It does permit GoCo.io to use aggregated, anonymized, and de-identified information for research, trend analysis, reporting, and optimizing the Services. Although such information is stated not to be reasonably re-identifiable, the policy does not provide a specific prohibition on using it for AI/ML development.

5. Key User Obligations and Restrictions

  • Do not use the Services if under 16, or below the applicable local age of consent.
  • Provide information only if you are permitted to do so and understand it may be shared with integrated providers.
  • Comply with local laws when accessing the Services internationally.
  • Manage cookies through browser or device settings; disabling them may impair functionality.
  • Avoid posting sensitive information publicly.
  • Continued use after policy changes generally constitutes acceptance.

6. Liability, Security & Disputes

GoCo.io describes security measures but does not guarantee that information will never be lost, stolen, or accessed improperly. It may retain information for operational, legal, backup, audit, fraud-prevention, and dispute-resolution purposes, sometimes after the original service need ends.

This policy contains no detailed dispute-resolution, arbitration, governing-law, or liability provisions. Those terms may appear in the GoCo Service Agreement (GSA) or other customer agreements. Users should review those documents, particularly because the Privacy Policy does not itself promise unlimited remedies for privacy incidents.

7. Changes

GoCo.io may revise the policy at any time by posting an updated version at its privacy-policy webpage. It may also send email notices. Unless additional consent is legally required, continued use after posting means acceptance of the revised policy.

Service Agreement

5,769 characters · Read the original

GoCo Service Agreement: Key Terms and Risks

*This summary is based only on the Service Agreement text provided. The Agreement incorporates GoCo’s separate Privacy, Data Security, Data Retention, and e-Discovery Policy, which should be reviewed for more detailed privacy terms.*

1. Data Collection and Usage

Data GoCo may receive

The Agreement defines “Client Data” broadly as all electronic data and information submitted to or through the Services by the Client or Authorized Users. For an HR and benefits platform, this may include:

  • Employee names, contact details, identifiers, and employment information
  • Payroll, benefits, compensation, time-tracking, and attendance information
  • Information entered by employees or administrators
  • Account credentials and usage-related information
  • Data transferred through integrations with third-party products

The Agreement itself does not provide a detailed list of personal-data categories, retention periods, collection methods, or specific purposes. Those details are in the referenced Privacy Policy and related data policies.

GoCo’s permitted uses

The Client grants GoCo a worldwide, perpetual, royalty-free license to host, copy, transmit, and display Client Data:

1. As necessary to provide the Services; and

2. For GoCo’s other legitimate purposes, provided the data is aggregated or de-identified so it cannot be separated and identified as coming from the Client.

This license survives termination. The survival language is a significant risk because it does not expressly state when all data must be deleted or whether de-identification is irreversible.

GoCo may also access data to provide support, prevent or address technical problems, or comply with law.

2. User and Client Data Rights

The Agreement does not expressly grant individuals rights to:

  • Access or correct their personal data
  • Delete their data
  • Restrict or object to processing
  • Receive data in a portable format
  • Withdraw consent

Those rights, if available, must be determined from the separate Privacy Policy and applicable law.

The Client retains responsibility for the accuracy, quality, legality, and collection method of Client Data. Clients should therefore establish procedures for responding to employee data requests and ensuring lawful collection.

The Agreement places export responsibility on the Client, especially for Free, Free-Trial, and Beta Services. Trial or beta data may be permanently lost unless exported before the applicable period ends.

3. Third-Party Sharing and Integrations

GoCo may share or permit access to Client Data through:

  • Affiliates, employees, agents, and subcontractors with a need to know, subject to confidentiality obligations
  • Non-GoCo products and service providers used through integrations
  • Government or legal authorities when disclosure is legally compelled
  • Providers such as ADP or other integration partners where interoperability requires data access

GoCo disclaims responsibility for a third-party provider’s use, disclosure, modification, or deletion of Client Data. Integration availability may also end without a refund or credit. Clients should separately review each third party’s privacy and security terms.

4. AI/ML Training

The Agreement does not expressly state that Client Data is used to train artificial-intelligence or machine-learning models.

However, GoCo may use aggregated or de-identified Client Data for “other legitimate purposes.” This could potentially include analytics, product improvement, or model development, but the Agreement does not confirm or exclude that possibility. Clients seeking a clear restriction should request written clarification or a data-processing addendum prohibiting AI/ML training using Client Data, including de-identified data if desired.

5. Key Client Obligations and Restrictions

Clients must:

  • Control Authorized User access and keep credentials confidential
  • Mark terminated employees as terminated within 24 hours
  • Use encrypted connections, current operating-system patches, and active anti-malware
  • Report relevant security incidents within 72 hours
  • Prevent unauthorized access and comply with applicable laws
  • Maintain accurate HR, benefits, and time-tracking data
  • Resolve employee disputes and comply with wage, overtime, break, and employment laws
  • Pay fees, taxes, and renewal charges

Users may not resell, copy, reverse engineer, disrupt, overload, misuse, or benchmark the Services. Competitors may not access the Services for monitoring or competitive purposes.

6. Liability and Disputes

The Services are provided “as is” and “as available.” GoCo disclaims warranties that the Services will be accurate, secure, uninterrupted, error-free, or suitable for the Client’s needs.

GoCo generally excludes liability for lost data, revenue, profits, goodwill, business interruption, and indirect, incidental, special, consequential, or punitive damages. Its total liability is capped at the amount paid to GoCo by the claimant during the 12 months before the event giving rise to the claim.

Clients provide broad indemnity for claims involving Client Data, unauthorized use, legal violations, intellectual-property infringement, and employee disputes.

Disputes require an initial negotiation period, followed by binding JAMS arbitration. The Agreement waives jury trials and class, collective, representative, and class arbitration proceedings. Texas law applies, and arbitration procedures are tied to the Houston-area JAMS office.

7. Changes and Notice

GoCo may modify or withdraw Services at its discretion and may update Documentation. The Agreement does not clearly promise advance notice for general contractual or privacy-policy changes.

Specific notice provisions include:

  • Reasonable advance electronic notice of planned downtime
  • At least 30 days’ notice before subscription-end fee increases
  • At least 30 days’ notice for non-renewal
  • At least 15 days’ notice before suspension for overdue amounts in some circumstances

Users should periodically review the Agreement, Documentation, and referenced Privacy Policy.

Change history

2026-09-04 · Service Agreement

shrank 87.8% · Observed by clause.watch

Summary of the Change

  • Approximately 6,544 words have been removed from the document.
  • No replacement language or specific surviving provisions is provided, so the legal effect of the deletions cannot be determined reliably from this diff alone.

Key Legal Risks

Scope of Removed Obligations

The deleted text may have included important provisions concerning:

  • Confidentiality and permitted disclosures
  • Data security and breach notification
  • Privacy-law compliance
  • Intellectual-property ownership and licensing
  • Data retention and deletion
  • Audit rights and recordkeeping
  • Indemnities, warranties, and liability limits
  • Customer termination and post-termination obligations
  • Subcontractors and third-party service providers

Removing these provisions could materially reduce the provider’s obligations or leave important issues unaddressed.

Customer Data and AI Training

The diff does not identify whether customer data may be used to train, fine-tune, evaluate, or improve AI models. However, because a large portion of the document has been deleted, provisions addressing these topics may have been removed.

Important questions include whether the revised document:

  • Prohibits or permits using customer data for AI training or model improvement
  • Requires customer consent before such use
  • Limits use to aggregated, anonymized, or de-identified data
  • Allows use of prompts, outputs, metadata, usage data, or uploaded content
  • Gives the provider ownership or a broad license over customer data or derived data
  • Applies the restriction to subcontractors, affiliates, or third-party AI providers
  • Requires deletion of customer data from training datasets, model weights, logs, or backups
  • Explains whether opt-out rights are available and how they operate
  • Addresses whether AI-generated outputs may be used to train future models

Until the deleted text is reviewed, it is not possible to determine whether customer data protections have been strengthened, weakened, or eliminated.

Recommended Review

Obtain:

1. The full prior and revised versions, or a complete redline showing the deleted language.

2. The surviving data-use, privacy, confidentiality, intellectual-property, and AI provisions.

3. Confirmation of whether any separate privacy policy, data-processing agreement, or product terms govern AI training.

Bottom line: The wholesale deletion is potentially material, but the provided diff is insufficient to identify the specific changes or determine the treatment of customer data for AI training.

2026-09-03 · Privacy Policy

grew 14.3% · Observed by clause.watch

The wording changed. No written summary was produced for this revision.

2026-09-03 · Privacy Policy

shrank 12.5% · Observed by clause.watch

The wording changed. No written summary was produced for this revision.

2026-09-01 · Service Agreement

grew 719.3% · Observed by clause.watch

Summary

The supplied diff does not include the actual contractual language. It only states:

> “Added approximately 6544 words to the document”

Accordingly, it is not possible to identify:

  • What provisions were added, deleted, or replaced;
  • Any changes to customer data rights or obligations;
  • Whether customer data may be used to train, fine-tune, evaluate, or improve AI models;
  • Whether data is shared with affiliates, vendors, or model providers;
  • Changes to confidentiality, security, retention, deletion, or data-ownership terms;
  • New indemnities, liability limitations, audit rights, or compliance obligations.

AI-Training Risk Assessment

No conclusion can be reached from the information provided regarding whether the contract permits or restricts the use of customer data for AI training. The added language could materially affect the customer if it:

  • Grants a broad license to use customer content, prompts, outputs, usage data, or personal information;
  • Permits use for “product improvement,” “analytics,” or similar terms that include model training;
  • Allows data to be aggregated, de-identified, or anonymized and then used without customer consent;
  • Permits sharing with third-party AI providers or subcontractors;
  • Removes opt-out rights or makes training use the default;
  • Allows retention of data after termination or deletion requests;
  • Disclaims responsibility for model memorization, disclosure, or generated outputs.

Information Needed

Please provide the full redline or the actual added, deleted, and replacement text. The analysis should include, at minimum:

1. Data-use and data-ownership provisions;

2. AI or machine-learning training clauses;

3. Confidentiality and security terms;

4. Retention and deletion provisions;

5. Third-party provider and subprocessors provisions;

6. Privacy, regulatory, and data-transfer language;

7. Indemnity and limitation-of-liability provisions.

Without the underlying text, the only reliable conclusion is that the document has materially expanded, but the legal significance and risk of those additions cannot be assessed.

2026-08-31 · Service Agreement

shrank 87.8% · Observed by clause.watch

Structured Summary of Important Changes

1. Client Data License and AI-Training Risk

  • The revised text expressly grants GoCo a worldwide, perpetual, royalty-free license to host, copy, transmit, and display Client Data:
  • As necessary to provide the Services; and
  • For GoCo’s “other legitimate purposes,” provided the data is aggregated or de-identified so it cannot be separated from the aggregate data and identified as originating from the Client.
  • The license survives termination of the Agreement and termination of the Client’s relationship with a Partner.
  • The provision does not expressly mention artificial intelligence, machine learning, model training, product development, or analytics. Therefore, the diff does not clearly authorize GoCo to train AI models using identifiable Client Data.
  • However, the broad “other legitimate purposes” language could potentially cover development, testing, analytics, or training of AI models using aggregated or de-identified data. The Agreement does not define the de-identification standard, prohibit re-identification, address model outputs, or state whether human resources or benefits data may be used for AI training.
  • Clients seeking to prohibit AI training should request express language stating that Client Data and personal data will not be used to train, fine-tune, validate, or improve generative AI or machine-learning models, except with the Client’s prior written consent.

2. Expanded and Clarified Definitions

The revision adds or standardizes definitions for:

  • Authorized User;
  • GoCo Platform;
  • Beta Services;
  • Client Data;
  • Client Full Access Administrator;
  • Client Limited Access Administrator;
  • Documentation;
  • Free Services and Free-Trial Services;
  • Non-GoCo Products & Services;
  • Order Form;
  • Partner;
  • Purchased Services; and
  • Services.

These definitions clarify the agreement’s scope but also make clear that Beta, free, and trial services may be subject to materially weaker protections.

3. Service Changes and Availability

  • GoCo reserves the right, in its sole discretion, to amend, modify, withdraw, or discontinue any portion of the Services.
  • Availability commitments exclude planned downtime, force majeure events, internet-provider failures, denial-of-service attacks, and failures involving third-party applications.
  • Support requests may need to be routed first through the Client’s employer or Partner.

4. Payment and Suspension Risks

  • Fees are generally non-cancelable and non-refundable, and usage quantities cannot be reduced during a subscription term.
  • Late balances may incur 1.5% monthly interest.
  • After amounts are at least 30 days overdue, GoCo may charge the Client’s payment method, accelerate all remaining subscription fees, and suspend Services, subject to limited notice requirements.

5. Security and Client Responsibilities

Clients must:

  • Keep credentials confidential;
  • Mark terminated employees as terminated within 24 hours;
  • Use encrypted connections and updated security software;
  • Notify GoCo of relevant security incidents within 72 hours; and
  • Ensure data accuracy, legal compliance, and correct workflow configuration.

The Client also assumes broad responsibility for employment-law compliance and must indemnify GoCo for related claims, fines, penalties, and costs.

6. Third-Party Integrations

Clients authorize third-party providers to access Client Data for integrations. GoCo disclaims responsibility for those providers’ use, disclosure, modification, or deletion of Client Data.

7. Liability and Disputes

  • Broad warranty disclaimers apply.
  • GoCo’s aggregate liability is capped at fees paid in the preceding 12 months.
  • Lost data and consequential damages are excluded.
  • Jury trials and class or representative actions are waived.
  • Disputes must proceed through negotiation and then JAMS arbitration under Texas law.

8. Drafting/Presentation Issue

The diff contains apparent website-navigation text and formatting corruption in the Service Provision section. The final published version should be reviewed to ensure these artifacts are not legally operative or incorporated into the Agreement.

2026-08-30 · Service Agreement

grew 719.3% · Observed by clause.watch

Summary

The diff only states that approximately 6,544 words were added. It does not include the text of those additions or identify any deletions or replacements.

Legal and Risk Analysis

Because the substantive language is missing, it is not possible to reliably determine:

  • New obligations or rights for either party;
  • Changes to liability, indemnities, warranties, termination, confidentiality, or governing law;
  • Whether customer data may be used for product improvement, analytics, advertising, or other purposes;
  • Whether the provider may use customer data to train, fine-tune, evaluate, or improve AI or machine-learning models;
  • Whether customer data will be anonymized, aggregated, de-identified, or shared with affiliates or third-party service providers;
  • Whether the customer can opt out of AI training or similar secondary uses;
  • Data retention, deletion, security, or breach-notification changes; or
  • Any expansion of the provider’s license or ownership rights over customer content.

AI-Training Review

No conclusion can be reached regarding AI-model training from the supplied diff. The added language should be reviewed specifically for terms such as:

  • “train,” “fine-tune,” “develop,” “improve,” or “evaluate” models;
  • “machine learning,” “artificial intelligence,” or “generative AI”;
  • “customer content,” “inputs,” “outputs,” “usage data,” or “telemetry”;
  • Rights granted to affiliates, contractors, or subprocessors;
  • Aggregation, anonymization, or de-identification provisions; and
  • Opt-out, deletion, confidentiality, and data-use limitations.

Required Information

Please provide the actual 6,544 words of additions, together with any marked deletions and replacements. Without the underlying text, the only confirmed change is that the document became materially longer, and the legal impact cannot be assessed.

2026-08-30 · Privacy Policy

grew 14.3% · Observed by clause.watch

The wording changed. No written summary was produced for this revision.

2026-08-29 · Service Agreement

shrank 87.8% · Observed by clause.watch

Key Changes and Risks

1. Broader, surviving license to Client Data

The revised agreement adds an express license allowing GoCo to:

  • Host, copy, transmit, and display Client Data as necessary to provide the Services; and
  • Use Client Data for GoCo’s “other legitimate purposes,” provided the data is aggregated or de-identified so it cannot be separated from the aggregate data and identified as originating from the Client.

The license is worldwide, perpetual, royalty-free, and survives termination of the Agreement and any relationship with a Partner.

Risk

This is a significant expansion of GoCo’s post-termination rights. The phrase “other legitimate purposes” is broad and undefined. Although the clause requires aggregation or de-identification, it does not specify:

  • The permitted categories of use;
  • Whether re-identification is prohibited;
  • The de-identification standard or methodology;
  • Whether third-party vendors may receive the resulting data; or
  • Whether GoCo may commercialize insights derived from the data.

2. AI-model training

The diff does not expressly state that GoCo may use Client Data to train, fine-tune, evaluate, or improve artificial-intelligence or machine-learning models.

However, the new license could potentially be interpreted to permit some AI-related uses if GoCo characterizes them as an “other legitimate purpose” and uses aggregated or de-identified data. This could include training models on workforce, HR, benefits, or usage patterns derived from Client Data.

AI-specific concerns
  • No express prohibition on using de-identified Client Data for AI training.
  • No definition of “aggregated” or “de-identified.”
  • No commitment that prompts, outputs, embeddings, metadata, or derived datasets will not be used for training.
  • No restriction on use by GoCo’s affiliates, subcontractors, or AI/cloud providers.
  • The permission survives termination indefinitely.

Customers seeking to prevent AI training should request an express provision stating that Client Data, including personal data and derived information, may not be used to train or improve general-purpose or third-party AI models without the Customer’s prior written consent.

3. Expanded customer responsibilities

The revised text adds or emphasizes customer obligations concerning:

  • Data accuracy, quality, legality, and collection methods;
  • Authorized-user security and credential management;
  • Marking terminated employees as terminated within 24 hours;
  • Encrypted connections, current operating-system patches, and anti-malware;
  • Notification of security incidents within 72 hours;
  • Timekeeping, meal and rest breaks, overtime, and employee disputes;
  • Configuration and workflow accuracy.
Risk

The agreement places substantial operational, compliance, and employment-law responsibility on the Client and requires indemnification for certain employment-law violations and employee disputes.

4. Commercial and termination risks

The agreement permits GoCo to:

  • Modify, withdraw, or discontinue Services;
  • Terminate the Agreement or an Order Form for any reason;
  • Automatically renew subscriptions annually;
  • Increase fees with advance notice; and
  • Suspend Services and accelerate unpaid subscription fees after delinquency.

These provisions create continuity, pricing, and data-access risks, particularly given the agreement’s broad post-termination data license and limited stated data-retrieval protections.

2026-08-28 · Service Agreement

grew 719.3% · Observed by clause.watch

Summary of Important Changes

AI Training and Use of Customer Data

  • The revised agreement grants GoCo a worldwide, perpetual, royalty-free license to host, copy, transmit, and display Client Data.
  • GoCo may use Client Data for:

1. Providing the Services; and

2. Its “other legitimate purposes,” provided that the data is aggregated or de-identified so it cannot be separated from aggregate data and identified as originating from the Client.

  • The agreement does not expressly mention artificial intelligence, machine learning, model training, foundation models, or generative AI. It therefore does not clearly confirm whether de-identified or aggregated Client Data may be used to train AI models.
  • Because the license is perpetual and survives termination, any permitted aggregated or de-identified use—including potentially AI development or model training—could continue after the customer relationship ends.
  • The agreement does not explain:
  • What de-identification standard applies;
  • Whether re-identification is prohibited;
  • Whether customer-specific or derived insights may be retained;
  • Whether subprocessors or AI vendors may receive the data; or
  • Whether customers can opt out of secondary uses.
  • Customers handling employee, benefits, health, payroll, or other sensitive information should seek clarification or a contractual restriction expressly prohibiting use of Client Data for AI/model training unless separately authorized.

Expanded Service and Company Rights

  • GoCo may amend, modify, withdraw, or discontinue any part of the Services at its sole discretion and for any reason, without an express refund or transition obligation.
  • GoCo may provide similar services to third parties, creating no exclusivity protection for the Client.
  • The agreement grants only a limited, non-exclusive, non-transferable right to use the Services for internal HR and benefits administration.
  • GoCo may increase fees by any amount for renewal terms, with at least 30 days’ notice before renewal.

Payment and Termination Risks

  • Fees are generally non-cancelable and non-refundable, quantities cannot be reduced during a subscription term, and subscriptions automatically renew annually unless timely notice is given.
  • GoCo may terminate the Agreement and Order Forms for any reason.
  • Late payments may incur 1.5% monthly penalties, accelerated future subscription fees, and service suspension.

Data, Security, and Customer Responsibilities

  • The Client remains responsible for data accuracy, legality, security, employee disputes, legal compliance, and extensive indemnification obligations.
  • Security incidents affecting GoCo or the Services must be reported within 72 hours.
  • Free, trial, and Beta Services may be terminated without notice, and data may be permanently lost unless exported in time.
  • GoCo’s data-protection obligations are tied partly to an external privacy/security policy that may be updated separately.

Dispute and Liability Provisions

  • Liability is broadly disclaimed, including for lost data, business interruption, and consequential damages.
  • GoCo’s aggregate liability is capped at fees paid in the preceding 12 months.
  • Jury trials and class or representative proceedings are waived.
  • Disputes require negotiation followed by binding JAMS arbitration, generally in or near Houston, Texas, under Texas law.

2026-08-27 · Service Agreement

shrank 87.8% · Observed by clause.watch

Key Changes and Risks

1. Customer Data Use and AI Training

  • The agreement grants GoCo a worldwide, perpetual, royalty-free license to host, copy, transmit, and display Client Data:
  • As necessary to provide the Services; and
  • For GoCo’s other “legitimate purposes,” provided that the data is aggregated or de-identified so it cannot be separated from the aggregate data and identified as originating from the Client.
  • This license expressly survives termination of the Agreement and any relationship with a Partner.
  • The diff does not expressly mention artificial intelligence, machine learning, foundation models, model training, or model improvement.
  • Nevertheless, the broad “other legitimate purposes” language could potentially support using aggregated or de-identified Client Data for:
  • Training or improving AI or machine-learning models;
  • Analytics, benchmarking, or product development; and
  • Other secondary commercial purposes.
  • The agreement does not provide a clear customer opt-out right, consent requirement, restriction on use of sensitive HR data, or requirement that trained models be deleted or modified after termination.
  • “De-identified” is not defined in the agreement, and the standard appears to focus on whether data can be identified as originating from the Client—not necessarily whether individual employees can be re-identified. This creates uncertainty for employee, payroll, benefits, and other sensitive data.
  • The data-use license is separate from the confidentiality provisions, meaning confidentiality does not necessarily prevent permitted aggregated or de-identified use.

2. Broader GoCo Control Over Services

The added provisions state that GoCo may, in its sole discretion:

  • Amend, modify, withdraw, or discontinue any portion of the Services;
  • Provide the same or similar services to third parties; and
  • Terminate Free Services without notice.

These rights may allow material functionality changes or service discontinuation without a refund or compensation, particularly where no service-level commitment applies.

3. Payment and Subscription Risks

The provisions add or clarify that:

  • Fees are generally non-cancelable and non-refundable.
  • Purchased quantities cannot be reduced during a subscription term.
  • Late payments may incur a 1.5% monthly penalty.
  • GoCo may accelerate unpaid future subscription fees and suspend Services after delinquency.
  • Subscriptions automatically renew for one-year periods unless timely non-renewal notice is given.
  • GoCo may increase fees at its discretion with at least 30 days’ notice before renewal.

4. Data Loss and Customer Responsibilities

  • Customers are responsible for backing up and exporting data from Free, Free-Trial, and Beta Services.
  • Data may be permanently lost when trials end, access is terminated, or a customer downgrades.
  • Customers bear responsibility for data accuracy, legal compliance, employee disputes, wage-and-hour compliance, and certain resulting indemnification obligations.

5. Liability and Dispute Terms

  • GoCo disclaims broad warranties and limits aggregate liability to fees paid in the preceding 12 months.
  • Consequential, incidental, punitive, and lost-data damages are excluded.
  • Jury trials and class or representative actions are waived.
  • Texas law and JAMS arbitration apply.

2026-08-27 · Privacy Policy

shrank 12.5% · Observed by clause.watch

The wording changed. No written summary was produced for this revision.

2026-08-26 · Privacy Policy

grew 14.3% · Observed by clause.watch

The wording changed. No written summary was produced for this revision.

2026-08-26 · Service Agreement

grew 719.3% · Observed by clause.watch

Summary

The provided diff does not include the actual added contractual language. It only states:

> “Added approximately 6544 words to the document”

Accordingly, it is not possible to determine:

  • What contractual terms were added or changed;
  • Whether liability, indemnity, confidentiality, payment, termination, governing law, or other obligations changed;
  • Whether the customer’s data may be used to train, fine-tune, evaluate, or improve AI models;
  • Whether data is shared with affiliates, subprocessors, vendors, or third parties;
  • Whether the customer receives any opt-out, deletion, confidentiality, or ownership protections; or
  • Whether new security, retention, or regulatory obligations apply.
AI Training and Customer Data

No substantive language concerning AI models or customer-data usage appears in the supplied diff. Therefore, no conclusion can be reached about whether the revised agreement:

  • Permits training or improving general-purpose AI models using customer data;
  • Limits use to providing the contracted services;
  • Requires de-identification or aggregation;
  • Allows use of prompts, outputs, files, telemetry, or metadata;
  • Grants the provider rights to retain or reuse data after termination; or
  • Provides an opt-out or requires express customer consent.
Required Information

Please provide the complete redline or the actual text of the approximately 6,544 added words, including surrounding provisions where additions modify existing terms. Without the substantive text, a legal-risk analysis would be speculative.

2026-08-26 · Privacy Policy

shrank 12.5% · Observed by clause.watch

The wording changed. No written summary was produced for this revision.

2026-08-25 · Privacy Policy

grew 14.3% · Observed by clause.watch

The wording changed. No written summary was produced for this revision.

2026-08-24 · Service Agreement

shrank 87.8% · Observed by clause.watch

Summary of Available Change

Scope of the Diff

The diff states only that approximately 6,544 words were removed. It does not identify:

  • Which provisions were deleted
  • Whether any terms were replaced or added
  • Whether definitions, obligations, limitations, or exceptions changed
  • Whether customer data may be used to train AI models

Key Legal Risks

1. Broad uncertainty from extensive deletions

Removing approximately 6,544 words could materially change the agreement, potentially affecting:

  • Data ownership and licensing rights
  • Confidentiality obligations
  • Data security and breach notification
  • Privacy and regulatory compliance
  • Service-level commitments
  • Liability caps and indemnities
  • Termination and data-return obligations
  • Audit, subcontracting, and intellectual-property provisions

The legal effect cannot be assessed without the text of the deleted provisions and the surrounding contract language.

2. Potential AI-training implications

The provided diff contains no identifiable language concerning AI models or training. Accordingly, it is not possible to determine whether the revised agreement:

  • Permits or restricts using customer data to train, fine-tune, or improve AI models
  • Permits use of prompts, inputs, outputs, files, or metadata for model development
  • Limits AI-data use to de-identified, aggregated, or anonymized information
  • Requires customer consent or provides an opt-out
  • Allows retention of customer data for training after termination
  • Grants the provider ownership or a broad license over customer data or outputs
  • Uses data for human review, automated evaluation, or safety testing
  • Extends training rights to affiliates, subprocessors, or third-party model providers

Any deletion of prior restrictions or safeguards on these topics could substantially increase the customer’s privacy, confidentiality, intellectual-property, and regulatory risks.

Recommended Next Step

Obtain the complete before-and-after versions, or at minimum a deletion redline showing the removed language and its location. The AI-training provisions should be reviewed specifically for:

1. Express authorization to use customer data for training or improving models

2. Scope of covered data, including inputs, outputs, files, and metadata

3. Opt-in/opt-out and consent requirements

4. De-identification and re-identification protections

5. Retention and deletion periods

6. Use by affiliates, subprocessors, or third-party AI providers

7. Ownership and licensing of data and outputs

8. Confidentiality, security, and regulatory safeguards

2026-08-24 · Service Agreement

grew 719.3% · Observed by clause.watch

Summary of Important Changes and Risks

1. Customer Data and AI-Model Training

  • The revised agreement adds a broad license allowing GoCo to host, copy, transmit, and display Client Data worldwide, perpetually, and royalty-free.
  • GoCo may use Client Data:

1. As necessary to provide the Services; and

2. For GoCo’s “other legitimate purposes,” provided the data is aggregated or de-identified so it cannot be separated from aggregate data and identified as originating from the Client.

  • This license survives termination of the Agreement and termination of the Client’s relationship with a Partner.
  • The agreement does not expressly mention artificial intelligence, machine learning, model training, generative AI, or improvement of AI systems. However, the broad “other legitimate purposes” language could potentially be interpreted to permit use of aggregated or de-identified Client Data for analytics, product development, or AI-model training.
  • The agreement does not specify:
  • Whether de-identification meets a particular legal standard;
  • Whether re-identification is prohibited;
  • Whether human resources, payroll, health, benefits, or other sensitive data may be used;
  • Whether Client Data will be used to train general-purpose models or only GoCo-specific models;
  • Whether the Client can opt out; or
  • Whether GoCo will delete data or derived model outputs after termination.

Risk: Customers may have limited control over persistent use of de-identified or aggregated employee data, including potential AI-related uses. A customer seeking to prohibit model training should request an express restriction and a clear opt-out or consent requirement.

2. Broader Company Discretion Over Services

The added provisions state that GoCo may, in its sole discretion:

  • Amend, modify, withdraw, or discontinue any portion of the Services;
  • Terminate the Agreement or an Order Form for any reason; and
  • Increase fees by any amount, subject to at least 30 days’ notice before the subscription term ends.

These provisions create substantial continuity, pricing, and renewal risk for Clients.

3. Payment and Suspension Rights

The revised text adds detailed payment provisions, including:

  • Advance credit-card or ACH charges for initial and renewal terms;
  • A late charge of 1.5% per month, or the legal maximum;
  • Acceleration of all remaining subscription fees after failed collection attempts;
  • Suspension of Services for overdue amounts; and
  • Non-refundable, non-cancelable fees and no reduction in purchased quantities during a term.

Although there is an exception for good-faith payment disputes, the collection and suspension rights are strongly Company-favorable.

4. Data Security and Third-Party Access

  • GoCo commits to technical and organizational safeguards and commercially reasonable efforts to prevent unauthorized disclosure.
  • The agreement incorporates GoCo’s online privacy, retention, deletion, and e-discovery policies, which may change over time.
  • Non-GoCo providers may access Client Data for integrations, with GoCo disclaiming responsibility for their use, disclosure, modification, or deletion of that data.

5. Liability and Dispute Terms

The agreement adds or confirms:

  • Broad warranty disclaimers;
  • Exclusion of lost data, indirect, consequential, punitive, and similar damages;
  • A liability cap limited generally to fees paid in the preceding 12 months;
  • Jury-trial and class-action waivers; and
  • Mandatory negotiation followed by JAMS arbitration, governed by Texas law and generally centered in Houston.

2026-08-23 · Service Agreement

shrank 87.8% · Observed by clause.watch

Summary of the Change

  • Approximately 6,544 words were removed from the document.
  • No replacement or added language is provided.
  • Because the deleted text is not identified, the specific legal effect cannot be determined from this diff alone.

Key Legal Risks

Broad reduction in protections

A deletion of this size may remove important provisions concerning:

  • Confidentiality and permitted uses of customer information
  • Data security and breach-notification obligations
  • Privacy-law compliance and data-processing terms
  • Intellectual-property ownership and licensing
  • Warranties, indemnities, and limitations of liability
  • Audit rights, retention, deletion, and return of data
  • Suspension, termination, and post-termination obligations
  • Service levels and remedies

The customer should not assume that omitted language continues to apply. If the deleted provisions are not located elsewhere in the agreement or incorporated policies, the customer may have materially fewer contractual protections.

Customer data and AI-model training

The diff does not provide enough information to determine whether language about using customer data to train AI models was added, deleted, or modified.

However, because approximately 6,544 words were removed, the deleted material could have included:

  • A prohibition or restriction on using customer data to train, fine-tune, or improve AI models
  • Consent requirements for such use
  • Limits on using customer content to train models shared with other customers or the public
  • Requirements to de-identify or aggregate data before AI-related use
  • Customer opt-out rights
  • Restrictions on retaining prompts, outputs, or telemetry for training
  • Ownership and licensing provisions covering AI inputs and outputs
  • Security, confidentiality, and deletion requirements applicable to training data

If protections of this kind were removed, the provider may have broader rights to use customer data for model development or service improvement. The agreement should be checked specifically for terms such as “train,” “training,” “fine-tune,” “improve,” “machine learning,” “artificial intelligence,” “model,” “customer data,” “content,” “inputs,” and “outputs.”

Recommended Follow-Up

  • Obtain the full prior and revised versions, or a redline identifying the exact deleted text.
  • Confirm whether a data-processing addendum, privacy policy, AI policy, or product terms separately govern customer data.
  • Verify that any prohibition on AI training, opt-out right, confidentiality obligation, and deletion requirement remains expressly stated.
  • Do not approve the change based solely on this summary; the missing text may contain material commercial and privacy protections.

2026-08-22 · Service Agreement

grew 719.3% · Observed by clause.watch

Diff Analysis

Summary

The supplied diff states only:

> “Added approximately 6,544 words to the document”

It does not include the actual added, deleted, or replaced legal language. As a result, the substantive changes and risks cannot be reliably analyzed.

AI Training and Customer Data

No conclusions can be drawn about whether the new terms:

  • Permit the provider to use customer data to train, fine-tune, or improve AI models;
  • Restrict training to de-identified, aggregated, or anonymized data;
  • Allow use of prompts, inputs, outputs, files, metadata, or usage data for training;
  • Apply different rules to consumer, business, or enterprise accounts;
  • Provide an opt-out or require affirmative consent;
  • Permit retention of data for model training after termination;
  • Allow human review or sharing with subcontractors for training or evaluation; or
  • Grant the provider ownership or broad license rights over customer data and outputs.

These issues are legally significant because broad AI-training rights may expose confidential information, personal data, regulated information, trade secrets, or customer content to additional processing and retention.

Other Contract Risks

The missing text also prevents review of potential changes concerning:

  • Liability caps and exclusions;
  • Indemnification;
  • Confidentiality;
  • Data security and breach obligations;
  • Data retention and deletion;
  • Intellectual-property ownership;
  • Subprocessors and international transfers;
  • Service suspension or termination;
  • Warranties and disclaimers; and
  • Governing law and dispute resolution.

Information Needed

Please provide the actual redline text, including the portions marked with:

  • {additions};
  • [deletions]; and
  • []{replacements}.

If the document is too long, provide the newly added sections and any provisions addressing data use, privacy, confidentiality, security, intellectual property, AI, machine learning, model training, prompts, inputs, outputs, or service improvement.

2026-08-19 · Privacy Policy

shrank 12.5% · Observed by clause.watch

The wording changed. No written summary was produced for this revision.

2026-08-19 · Service Agreement

shrank 87.8% · Observed by clause.watch

Key Changes and Risks

1. Customer Data License Expanded — High Importance

The revised agreement expressly grants GoCo a worldwide, perpetual, royalty-free license to host, copy, transmit, and display Client Data:

  • As necessary to provide the Services; and
  • For GoCo’s “other legitimate purposes,” provided the data is aggregated or de-identified so it cannot be separated from the aggregate data and identified as originating from the Client.

The license survives termination of the Agreement and any relationship with a Partner. This creates a continuing right for GoCo to retain and use properly aggregated or de-identified information after the customer relationship ends.

2. AI Model Training — No Express Training Right Identified

The diff does not expressly state that Client Data may be used to train, fine-tune, improve, or evaluate artificial-intelligence or machine-learning models.

However, the broad “other legitimate purposes” language could potentially be argued to cover analytics, product improvement, benchmarking, or AI development—particularly if GoCo treats the data as aggregated or de-identified. The agreement does not define:

  • “Other legitimate purposes”;
  • The de-identification standard or methodology;
  • Whether derived data, embeddings, metadata, or model outputs may be retained;
  • Whether human review or subcontractor/third-party AI providers may access the data; or
  • Whether customers can opt out of AI-related use.

Customers handling sensitive employee, payroll, health, or benefits information may wish to obtain an express written clarification or negotiate a restriction stating that Client Data will not be used for AI training without consent.

3. GoCo’s Service Modification and Termination Rights

GoCo may, in its sole discretion:

  • Amend, modify, withdraw, or discontinue any portion of the Services; and
  • Terminate the Agreement or an Order Form for any reason.

This creates continuity and operational risk, particularly because no corresponding termination-for-convenience right or refund protection for the Client is clearly provided.

4. Payment and Renewal Risks

The revised terms provide for:

  • Non-cancelable, generally non-refundable fees;
  • Automatic annual renewals unless timely notice is given;
  • Unilateral fee increases with at least 30 days’ notice before renewal;
  • Late charges of 1.5% per month, subject to the legal maximum;
  • Acceleration of unpaid subscription fees; and
  • Suspension for overdue amounts.
5. Data Loss and Backup Responsibilities

For Free, Free-Trial, and Beta Services, GoCo may terminate access and data may be permanently lost unless the Client exports it in time. Beta Services are unsupported, may be discontinued at any time, and are provided at the Client’s sole risk.

6. Liability and Dispute Restrictions

The agreement adds or confirms:

  • Broad “as-is” warranty disclaimers;
  • Exclusion of lost data, consequential, incidental, and punitive damages;
  • A liability cap generally limited to fees paid in the preceding 12 months;
  • Mandatory individual arbitration;
  • Jury-trial and class-action waivers; and
  • Texas governing law.
7. Client Indemnity Expanded

The Client must defend and indemnify GoCo for claims involving Client Data, unauthorized use, legal violations, intellectual-property claims, and employee disputes, including wage-and-hour and employment-law matters.

2026-08-18 · Privacy Policy

grew 14.3% · Observed by clause.watch

The wording changed. No written summary was produced for this revision.

Between 2024-11-04 and 2025-07-15 · Privacy Policy

shrank 17.5% · Reconstructed from Internet Archive captures

The wording changed. No written summary was produced for this revision.

2025-06-17 · Service Agreement

Date stated by the publisher in the document

The publisher records this document as revised on this date (“Last Updated: Jun 17th, 2025”).

2025-06-03 · Privacy Policy

Date stated by the publisher in the document

The publisher records this document as revised on this date (“Last Revised: Jun 3rd 2025”).

Between 2024-04-17 and 2024-11-04 · Privacy Policy

grew 265.1% · Reconstructed from Internet Archive captures

The wording changed. No written summary was produced for this revision.

Between 2023-09-23 and 2024-04-17 · Privacy Policy

grew 1.6% · Reconstructed from Internet Archive captures

The wording changed. No written summary was produced for this revision.

Between 2023-02-19 and 2023-09-23 · Privacy Policy

shrank 3.0% · Reconstructed from Internet Archive captures

The wording changed. No written summary was produced for this revision.

Between 2019-07-16 and 2021-08-05 · Privacy Policy

grew 4.4% · Reconstructed from Internet Archive captures

The wording changed. No written summary was produced for this revision.

Between 2020-06-04 and 2021-01-23 · Service Agreement

grew 6.5% · Reconstructed from Internet Archive captures

Summary

Information Provided
  • The diff states only: “Removed approximately 6,544 words from the document.”
  • The actual deleted language is not included.
  • No additions, replacements, section headings, or remaining text are provided for review.
AI Training and Data Use
  • It is not possible to determine from the supplied diff whether the contract:
  • Permits the provider to use customer data to train, fine-tune, or improve AI models;
  • Restricts training to aggregated, anonymized, or de-identified data;
  • Prohibits use of customer content for model training;
  • Requires customer consent or an opt-out;
  • Applies different rules to inputs, outputs, personal data, or confidential information;
  • Allows human review or retention of data for AI-development purposes; or
  • Limits use of data to providing the contracted services.
  • Because approximately 6,544 words were removed, provisions addressing AI training or data use could have been deleted, but that cannot be confirmed without the deleted text.
Potential Legal Risks

The large-scale deletion may have materially affected:

  • Data-use rights: The customer may have lost restrictions on use of its data or, alternatively, the provider may have lost an express authorization needed for service delivery.
  • Confidentiality and privacy: Deleted safeguards may have covered confidential information, personal data, security, or regulatory compliance.
  • Ownership and licensing: Deleted provisions may have addressed ownership of customer data, feedback, inputs, outputs, or model-generated materials.
  • Retention and deletion: Data deletion, return, backup, and post-termination obligations may have been removed.
  • Liability and indemnities: Important protections, disclaimers, liability caps, or indemnification obligations may no longer apply.
  • Change control and termination: Deleted language may have affected amendment rights, suspension, termination, or continued data use after termination.
Recommended Next Step

Provide the full redline, including the text shown as deleted, added, or replaced, or at least the affected sections. Without that material, no reliable conclusion can be reached about the legal effect of the changes—particularly whether customer data may now be used to train AI models.

Watch this company's contracts

We re-read these documents every six hours and email you when the wording changes.

Start monitoring free