Typical forOnline shopsRetail chainsBrandsSubscription boxes
AI on customer service. Your customers' names stay in the EU.
Answer refunds, late parcels and complaints faster. GoalCube swaps names, order numbers, addresses and account numbers for codes before the AI reads a message – and puts them back into the reply on your side.
- Same-day repliesThe AI sorts the messages and drafts replies. You send.
- Account numbers stay at homeIBANs, order numbers and phone numbers become codes, even in free text.
- Ready for Article 50Your chatbot gets a ready-made notice saying it's an AI.
| Customer | Customer no. | Location | Topic |
|---|---|---|---|
| Sarah Kenny | KN-104233 | Kilkenny | Refund |
| Oliver Grogan | KN-104871 | Athlone | Delivery |
| Emma Sheridan | KN-105002 | Drogheda | Refund |
| Matteo Grech | KN-105310 | Mosta | Exchange |
Message Hi, my name is Sarah Kenny. I returned order 7012345678 two weeks ago but still haven't had my money back. Please transfer it to IE33 GCXB 9320 4418 6023 95. Kind regards, Sarah
| Customer | Customer no. | Location | Topic |
|---|---|---|---|
| [PERSON_1] | [KUNDENR_1] | [STED] | Refund |
| [PERSON_2] | [KUNDENR_2] | [STED] | Delivery |
| [PERSON_3] | [KUNDENR_3] | [STED] | Refund |
| [PERSON_4] | [KUNDENR_4] | [STED] | Exchange |
Message Hi, my name is [PERSON_1]. I returned order [ID_1] two weeks ago but still haven't had my money back. Please transfer it to [IBAN_1]. Kind regards, [PERSON_1]
Sarah Kenny and Emma Sheridan are waiting for refunds and should get a reply today. Oliver Grogan has waited 10 days for a parcel. Suggested reply to Sarah Kenny: “Dear Sarah Kenny, thank you for your patience. Your refund is on its way and will be in your account within 5 working days.”
[PERSON_1] and [PERSON_3] are waiting for refunds and should get a reply today. [PERSON_2] has waited 10 days for a parcel. Suggested reply to [PERSON_1]: “Dear [PERSON_1], thank you for your patience. Your refund is on its way and will be in your account within 5 working days.”
Fictitious data. Point at a name or a pseudonym to see what belongs together.
What can you use AI for?
Choose a task. GoalCube works out the risk under the EU AI Act with fixed rules and tells you what to do.
Low risk. Approved automatically under your rules; names, addresses and account numbers are hidden.
Customers must be able to see they're chatting with an AI (Article 50 AI Act). GoalCube has a ready-made notice.
Minimal risk under the AI Act. Profiling needs a legal basis, and customers can always say no to marketing (Article 21 GDPR).
An automatic refusal can hit a customer hard. A person must be able to step in (Article 22 GDPR).
AI that manipulates people into decisions that harm them is prohibited (Article 5 AI Act).
The example is simplified. In GoalCube you answer a few questions, and the classification follows fixed rules.
What the law says
Customer data is personal data
Names, addresses, orders and emails in a prompt are personal data. Use only what you need, and have a data processing agreement (DPA) with the AI provider.
Articles 5, 6 and 28 GDPR
Chatbots must say they're AI
From 2 August 2026 customers must be able to see that they're talking to an AI, unless it's obvious.
Article 50 AI Act
Account numbers in free text
Customers often put account numbers and phone numbers in their messages. They shouldn't be passed on to an AI outside the EU.
Articles 32 and 44 GDPR
Profiling needs a legal basis
Recommendations based on purchases are profiling. Customers must be able to say no to direct marketing.
Article 21 GDPR
Short and simplified. GoalCube helps you follow the rules; it is not legal advice.
Your staff keep working. GoalCube keeps track of the rest.
Low risk is approved automatically under fixed rules. Anything that needs a human lands on This week’s list – typically around 5 minutes a week.
Summarise September's customer messages, and find the urgent ones.
Most are about refunds and delivery; three cases are urgent. The draft replies with the real names are at GoalCube.
4 awaiting a human · approx. 5 minutes
Waiting for you
- Confirm new use: chatbot on the online shopLimited risk · must show it's an AI
- Check use: blocking orders for fraudDecision about a person · needs a person
Approved automatically
- Summary of customer enquiriesLow risk · approved automatically on Monday
- Overview of supplier contractsLow risk · approved automatically on Tuesday
What you need
Start free with the overview. Add protection when you want to use AI on real data.
AI Map
Map
0 € per month
- AI inventory and AI policy
- Training with proof
- Deadlines, templates and report
Data Vault
Map and protect
from 9 € per month
- Everything in AI Map
- AI on your data, data stays in the EU
- Secret terms and documents
Data Vault + Human Decision
GoalCube for HR
from 15 € per month
- Everything in Data Vault
- A person decides on cases about people
- Passkey, log and timestamps
See all prices All prices are per month and exclude VAT. Pay yearly and get 2 months free. Prices apply from launch, which we expect in November 2026.
Questions and answers
Can we use ChatGPT for customer service?
Yes, with a business plan, a data processing agreement (DPA) and control over what data the AI gets. With GoalCube the AI only sees codes instead of names, addresses and account numbers.
Do we have to say our chatbot is an AI?
Yes. From 2 August 2026 customers must be able to see it, unless it's obvious. A short notice at the top of the chat is enough.
What if a customer writes their account number in the message?
It happens all the time. GoalCube finds IBANs, account numbers, phone numbers and ID numbers from every EU country in free text and swaps them for codes.
Can the AI block a customer for fraud?
It can flag a risk, but a refusal that matters to the customer should always be open to review by a person.
Read more
- AI in practice
AI in customer service: How to use AI on customer enquiries
2 min readAI can sort enquiries and draft replies in seconds. The rules for customer data, chatbots and decisions – and how your customers' names stay in the EU.
- The EU AI Act explained
Does our chatbot have to say it is an AI? Article 50 explained
3 min readFrom 2 August 2026, people must be able to see that they are talking to an AI, and deepfakes must be labelled. The rules and a notice you can use.
- ChatGPT, Copilot and other AI services
ChatGPT and GDPR: Can businesses use ChatGPT on personal data?
2 min readBusinesses can use ChatGPT, but only with the right plan, a data processing agreement and control over the data. The checklist, and how names stay in the EU.
- AI in practice
AI in marketing: What can you do with customer data, profiling and AI content?
2 min readPersonalised offers, segments and AI images: the rules on profiling, consent, labelling deepfakes and the ban on manipulation.
Other solutions for customers
- Guests
- Software users
- Members
- Subscribers
- Patients and clients in healthcare
- Clients of advisers
- Students and learners
- Tenants
- Policyholders
- Borrowers and credit customers
- Passengers and travellers
- Donors and supporters
- Event attendees and registrations
- B2B customers
- Property buyers and sellers
- Residents in care and supported living
- Citizens
Ready to use AI on customer data?
We expect to launch in November 2026. Join the waitlist and we’ll let you know when you can get started.