Privacy Policy

Last updated: March 4, 2026

Good Standing Co (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

1. Information We Collect

Information You Provide

• Account information: Name, email address, and password when you create an account.
• Business information: Business name, address, and details you provide during onboarding.
• Customer data: Customer names and email addresses you upload for review request campaigns.
• Lead form submissions: Name, email, and business name submitted through our website forms.
• Payment information: Billing details processed securely through Stripe. We do not store your full credit card number.

Information Collected Automatically

• Usage data: Pages visited, features used, and actions taken within the Service.
• Device information: Browser type, operating system, and device identifiers.
• Log data: IP address, access times, and referring URLs.
• Cookies: We use cookies and similar technologies for authentication, preferences, and analytics.

Information from Third Parties

• Review platforms: Reviews, ratings, and reviewer information from Google Business Profile and other connected platforms.
• OAuth providers: Basic profile information (name, email) when you sign in with Google.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and manage your subscription
• Send review request campaigns on your behalf
• Generate AI-powered review response suggestions
• Display analytics and insights about your reviews
• Send administrative communications (account updates, security alerts)
• Improve and develop the Service
• Respond to your inquiries and provide support
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share your information with:

• Service providers: Third parties that help us operate the Service, including Supabase (hosting and database), Stripe (payments), and email delivery providers.
• Review platforms: When you post responses through the Service, they are published on the connected review platform.
• AI providers: Review content is sent to AI services (Anthropic) to generate response suggestions. This data is processed according to the AI provider's data processing terms and is not used to train models.
• Legal requirements: When required by law, regulation, or legal process.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred.

4. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest, row-level security policies on our database, and secure authentication. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes).

6. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information.
• Portability: Request a machine-readable copy of your data.
• Objection: Object to certain processing of your information.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at daniel@goodstandingco.com.

7. Cookies

We use essential cookies for authentication and session management. We may also use analytics cookies to understand how the Service is used. You can control cookie preferences through your browser settings.

8. Children's Privacy

The Service is not intended for use by children under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We take steps to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website or by email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at daniel@goodstandingco.com.