Good Company Privacy Policy

This Privacy Policy explains how Good Company Collective, Inc. collects, uses, shares and protects personal information when people use Good Company.

1. Information we collect

Depending on how a person uses Good Company, we may collect:

Account information

• Name
• Email address
• Login and authentication information
• Account status
• Age confirmation
• Terms and policy acceptance records

Profile information

• Profile photo
• Biography
• General location
• Job title
• Industry
• Career level
• Employer or workplace information
• Interests and connection preferences
• Selected Milestones
• Circles and community participation
• Other information a member chooses to provide

Community activity

• Posts
• Comments
• Reactions
• Circle participation
• Connection requests
• Invitations
• Messages and communications
• Reports submitted to Good Company

Anonymous posting features may hide a member's identity from other members, but Good Company may retain the identity internally for safety, moderation and legal purposes.

Verification information

Depending on the verification method selected, we may collect:

• Work-email verification status
• Invitation or access-code information
• LinkedIn verification information
• Phone or personal-email verification
• Identification or workplace documents voluntarily submitted for review

Verification documents are stored separately, protected with restricted access and deleted when they are no longer reasonably needed.

Device and usage information

• IP address
• Device and browser type
• Operating system
• App interactions
• Login dates
• Referring source
• Error and diagnostic information
• Cookie or similar technology identifiers

Location information

Good Company may collect a city, region, approximate location or distance-based information when a member enables location-related features.

Good Company does not collect or display precise location unless it is clearly necessary, separately disclosed and affirmatively enabled by the member.

Communications and support

We may collect information included in emails, support requests, surveys, feedback or other communications with Good Company.

2. How we use information

We may use personal information to:

• Create and maintain accounts
• Verify members
• Personalize profiles, Milestones, Circles and recommendations
• Enable posts, messaging and community interactions
• Operate privacy and visibility controls
• Send essential service communications
• Send optional marketing communications when permitted
• Moderate content and investigate reports
• Prevent fraud, abuse and security incidents
• Analyze and improve the service
• Provide employer-sponsored access without disclosing individual private activity
• Comply with legal obligations
• Enforce our Terms and Community Guidelines

We will not use private community activity to provide employers with individualized employee-monitoring information.

3. How we share information

Other members

Information is shared according to a member's profile, visibility and activity settings. Members should review their settings before posting or joining a Circle.

Service providers

We may use service providers to operate the platform, including providers for:

• Hosting and database infrastructure
• Authentication
• Email delivery and customer communications
• Analytics
• Error monitoring
• Maps and location features
• Payments
• Customer support
• Security and fraud prevention

Current providers include Lovable and Supabase (hosting, authentication and database infrastructure) and Loops (email delivery and customer communications).

Service providers may process information only for authorized business purposes and subject to their contractual obligations.

Employers and organizational sponsors

When access is sponsored by an employer or organization, Good Company may share aggregated or deidentified participation information.

We do not share private messages, individual posts, personal Milestones, individual engagement history or identifiable member activity with an employer unless the member clearly directs or authorizes it.

Legal and safety disclosures

We may disclose information when reasonably necessary to:

• Comply with law, legal process or valid government requests
• Protect the rights, safety or security of Good Company or others
• Investigate fraud, abuse or violations
• Respond to an emergency
• Establish, exercise or defend legal claims

Business transfers

Information may be transferred as part of a merger, financing, acquisition, reorganization or sale of assets, subject to appropriate confidentiality protections and notice where required.

We do not sell member personal information for money.

4. Email communications

Good Company sends essential service emails, such as account verification, password resets, security notices and important account or Circle updates.

Members may separately choose whether to receive marketing emails, including community news, recommendations, product updates and offers.

Marketing consent is optional. Members may unsubscribe using the link in an email or through Email Preferences in account settings.

Unsubscribing from marketing does not stop essential service communications.

Commercial emails include Good Company's valid physical postal address and a functioning unsubscribe method, as required by the FTC.

5. Cookies and analytics

Good Company may use cookies, local storage, software development kits and similar technologies to:

• Maintain sessions
• Remember preferences
• Measure product usage
• Diagnose technical problems
• Prevent fraud
• Improve performance

Good Company will provide a cookie notice and preference tool before adding nonessential advertising or cross-site tracking technologies.

6. Data retention

We retain information only for as long as reasonably necessary for the purposes described in this policy, including operating the service, maintaining security, resolving disputes and complying with legal obligations.

Good Company maintains internal retention periods for deleted accounts, verification documents, private messages, moderation reports, system logs, marketing consent records and backups. Verification documents and precise location information are not retained indefinitely.

7. Security

We use reasonable administrative, technical and organizational safeguards designed to protect information.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Members are responsible for protecting their login credentials and promptly reporting suspected unauthorized access.

8. Member choices

Members may:

• Update profile information
• Control profile and location visibility
• Manage marketing-email preferences
• Block or mute other members
• Request access to or correction of information
• Download certain account information
• Delete their account
• Contact Good Company with a privacy request

Requests may be submitted to [PRIVACY EMAIL]. We may need to verify a person's identity before completing a request.

9. Account deletion

An in-app account-deletion process is available under Account Settings.

When an account is deleted, Good Company will delete or deidentify associated personal information except information that may need to be retained for security, fraud prevention, legal compliance or enforcement purposes. Some information may remain temporarily in secure backups.

10. Children and age eligibility

Good Company is intended only for people who are at least 17 years old.

We do not knowingly permit children under 17 to create accounts.

If we learn that an ineligible child has provided personal information, we will take reasonable steps to remove the account and information.

11. California privacy information

California residents may have privacy rights under applicable California law. Good Company will respond to valid privacy requests as legally required.

12. International users

Good Company is initially intended for use in the United States.

13. Changes to this policy

We may update this Privacy Policy periodically. When a change is material, we will provide reasonable notice and request renewed acknowledgment or consent when required.

14. Contact

Good Company Collective, Inc.
[BUSINESS ADDRESS]
[PRIVACY EMAIL]