Privacy

GoodRep Privacy Policy

This page explains what information GoodRep collects, how we use it, and the choices you have. It is written in plain language to be easy to understand and may evolve as the product matures.

1. Who we are

GoodRep (goodrep.io) is operated by Reputation Management, Ltd., which provides this software-as-a-service to help businesses monitor and manage their online reputation across locations and review platforms. In this policy, "we" and "us" refer to that company.

Mailing location and inbox cited on Toll-Free Messaging and comparable carrier questionnaires: 222 W 8th St #613, Durango, CO 81302, and support@goodrep.io.

2. Information we collect

  • Account information: your name, email address, organization name, and login credentials (passwords are stored only as bcrypt hashes).
  • Organization & billing: organization details, subscription plan, and Stripe customer and subscription identifiers (we do not store full card numbers).
  • Review data: locations and reviews synced from connected platforms such as Google Business Profile, including review text, rating, author name (if provided), and timestamps.
  • Google Business Profile (OAuth): When you connect Google, Google's consent screen describes the access you grant (for example, seeing, editing, creating, and deleting your Google business listings for accounts you authorize). How GoodRep uses that access: we list accounts and locations you have access to, sync location and review data into your dashboard, and send replies to reviews on Google only when you explicitly approve a reply in GoodRep. If we materially change how we use Google access, we will update this policy when appropriate.
  • Usage data: basic product usage information such as pages viewed, actions taken, and sync status, used to operate and improve the service.
  • Hosted SMS consent records: when consumers use GoodRep-controlled consent URLs, we persist the lawful consent wording version, timestamps, and network identifiers strictly for Toll-Free Messaging and audit purposes.

Telephone numbers & SMS opt-in for review requests

When you opt in on a business's hosted consent page or through an in-store kiosk, GoodRep collects your name and mobile number solely to transmit review request text messages on behalf of the SMB you consented to hear from. SMS opt-in data is not shared, sold, or transferred to third parties for marketing purposes.

GoodRep does not broker, sell, or rent telephone numbers outside of operating the SaaS itself. Telephone numbers are not pooled, auctioned, or packaged for unrelated advertising outreach.

When a business sends review request text messages you have expressly opted into, GoodRep routes those messages through telecommunications vendors (currently Telnyx) strictly for message delivery, acknowledgement, and legal compliance. That processing stays inside the lawful messaging pathways described in Telnyx's privacy and acceptable-use materials and is unrelated to marketing resale.

Customers may reply STOP to halt future texting. GoodRep also maintains suppression records so a STOP acknowledgement blocks additional platform-wide texting until restarting is legally allowed.

Review request email

When a business uses GoodRep to email a review request, GoodRep processes the recipient address and delivery events (opens are not required; we track clicks on the review link and unsubscribe actions). Email is delivered through Resend. You can unsubscribe via the link in the message. Bounce and complaint events may suppress further review-request email to that address across the platform.

3. How we use your information

  • To provide and maintain the GoodRep service.
  • To sync, display, and manage reviews and locations you connect, including posting replies you approve to platforms such as Google Business Profile.
  • To send transactional emails such as account notices and low-rated review alerts, and to send review-request emails to your customers when you use that feature (with unsubscribe and bounce handling).
  • To understand how the product is used and improve it over time.
  • To meet legal, accounting, or security obligations.

4. Service providers and data sharing

We use trusted third-party providers to run GoodRep. These providers process data on our behalf and are bound by their own security and privacy commitments:

  • Vercel: hosts the web application.
  • Supabase: hosts the Postgres database where application data is stored.
  • Stripe: processes payments and manages subscriptions.
  • Nango: manages OAuth connections to providers such as Google Business Profile.
  • Telnyx: transmits opt-in SMS review reminders on behalf of GoodRep customers via regulated messaging infrastructure.
  • Resend: delivers transactional and review-request emails on behalf of GoodRep and GoodRep customers.

We do not sell your personal information. We may disclose data if required by law or to protect our rights, users, or the service.

5. Data retention

We retain account and review data for as long as you have an active subscription and for a reasonable period afterward for backup, security, and accounting purposes. You can contact us if you would like specific data removed, subject to legal and contractual requirements.

6. Your choices

  • You can update basic account information (such as your password) from within the app.
  • You can disconnect integrations (Google Business Profile, Facebook Pages) from the dashboard if you no longer wish GoodRep to access that data.
  • You may cancel your subscription at any time; access will continue through the end of your billing period.
  • SMS recipients can reply STOP to halt future texting; GoodRep also tracks platform-wide STOP responses so texting does not restart without lawful consent.
  • Review-request email recipients can use the Unsubscribe link in those messages. Hard bounces and spam complaints may stop further review-request email to that address.

7. Security

We take reasonable steps to protect your data, including encrypted connections (HTTPS), hashed passwords, and reliance on reputable cloud providers. No online service can guarantee perfect security, but we work to keep GoodRep in line with modern best practices.

8. Changes to this policy

We may update this Privacy Policy as GoodRep evolves. When we make material changes, we will update the date on this page and, where appropriate, notify you in the app or by email.

9. Contact

If you have questions about this policy or your data, contact us at support@goodrep.io (or the support address listed in your account or billing emails).