GoodRep Privacy Policy

1. Who we are

GoodRep is a software-as-a-service application that helps businesses monitor and manage their online reputation across locations and review platforms.

2. Information we collect

• Account information: your name, email address, organization name, and login credentials (passwords are stored only as bcrypt hashes).
• Organization & billing: organization details, subscription plan, and Stripe customer and subscription identifiers (we do not store full card numbers).
• Review data: locations and reviews synced from connected platforms such as Google Business Profile, including review text, rating, author name (if provided), and timestamps.
• Usage data: basic product usage information such as pages viewed, actions taken, and sync status, used to operate and improve the service.

Information we do not collect

We do not collect, track, or share your customers' personal information. GoodRep syncs reviews and ratings from platforms you connect (such as Google Business Profile), but we do not sell, rent, or share that data with third parties for marketing or advertising. We do not track your customers across the web, build profiles of them, or use their information for purposes other than displaying reviews in your dashboard.

3. How we use your information

• To provide and maintain the GoodRep service.
• To sync, display, and manage reviews and locations you connect.
• To send transactional emails such as account notices and low-rated review alerts.
• To understand how the product is used and improve it over time.
• To meet legal, accounting, or security obligations.

4. Service providers and data sharing

We use trusted third-party providers to run GoodRep. These providers process data on our behalf and are bound by their own security and privacy commitments:

• Vercel: hosts the web application.
• Supabase: hosts the Postgres database where application data is stored.
• Stripe: processes payments and manages subscriptions.
• Nango: manages OAuth connections to providers such as Google Business Profile.
• Resend (or similar): sends transactional emails such as alerts.

We do not sell your personal information. We may disclose data if required by law or to protect our rights, users, or the service.

5. Data retention

We retain account and review data for as long as you have an active subscription and for a reasonable period afterward for backup, security, and accounting purposes. You can contact us if you would like specific data removed, subject to legal and contractual requirements.

6. Your choices

• You can update basic account information (such as your password) from within the app.
• You can disconnect integrations (Google Business Profile, Facebook Pages) from the dashboard if you no longer wish GoodRep to access that data.
• You can cancel your subscription at any time; access will continue through the end of your billing period.

7. Security

We take reasonable steps to protect your data, including encrypted connections (HTTPS), hashed passwords, and reliance on reputable cloud providers. No online service can guarantee perfect security, but we work to keep GoodRep in line with modern best practices.

8. Changes to this policy

We may update this Privacy Policy as GoodRep evolves. When we make material changes, we will update the date on this page and, where appropriate, notify you in the app or by email.

9. Contact

If you have questions about this policy or your data, contact us at support@goodrep.io (or the support address listed in your account or billing emails).