Security

Your passwords stay with Goematic. Your AI gets the work done without ever seeing them.

Your passwords

• Kept encrypted (AES-256-GCM) in Goematic's vault. Each member's data has its own key.
• Typed by Goematic on the site's own sign-in form, or by you on Goematic's page. Never in a chat.
• You can show or remove any login from your Goematic pages.

Your AI assistant

• It asks Goematic to log in and gets a session to work in: never a password, never a code.
• It connects only after you sign in to Goematic and press Allow. Its pass lasts an hour, renews itself, and stops at once when you press Disconnect in Settings.
• It cannot reach your Goematic pages through Goematic: those stay yours.

Your Goematic account

• No password: you sign in with a code sent to your email.
• By invitation only, so every member is known to another.

Every step on record

• Each login and each step your AI asks for is logged with what was asked. Typed values are logged by length only, and the log can't be deleted.

On the sites

• Goematic signs every request it sends, so sites can recognise it (for site owners).
• It never solves or bypasses robot checks: you pass them.

Found a problem? Write to admin@goematic.com.