Privacy policy

What we collect

The website you enter. We read its public pages (and its robots.txt, sitemap and llms.txt) to work out what the business does and where, the same way a search engine would.

Your report. The prompts we wrote, every AI assistant's answer, your score, your competitors and your fix list. If you change the numbers in the cost estimate, those stay in your browser.

Payment details are collected by Stripe, our payment processor, not by us. We see your name, email, what you bought and the amount, never your card number. For Pro we also ask for a phone number so we can book your call.

Website usage: pages visited and actions such as starting a scan or checkout, through the tools described below. To limit abuse we keep short-lived counters tied to your IP address, which expire within a day.

Cookies and advertising

To show examples from your own town, the homepage looks up your approximate city from your IP address with GeoJS. Nothing is stored.

We use PostHog to understand how people use the site, such as which pages they visit and where they drop off. PostHog may record sessions to help us fix problems.

We use the Meta Pixel and Meta's Conversions API to measure our ads on Facebook and Instagram. They record visits and actions such as starting a scan or buying. When you buy, we send Meta your email and phone number in hashed (scrambled) form, with your IP address and browser details, so Meta can match the purchase to an ad.

You can control ad tracking in your Facebook ad preferences, block cookies in your browser, or email us to opt out.

Who we share it with

We don't sell your personal information. We share it only with the services that run Goodword:

Amazon Web Services (hosting, storage, email), Stripe (payments), PostHog (site analytics) and Meta (ad measurement, as above).

OpenAI, Anthropic, Google and Perplexity receive the prompts we write about your business, with the city it's in, because asking their assistants is the scan. We also use Anthropic's Claude to read your public website and grade the answers. We send them your business's public details, not your name, email or payment information. Browserless may load your website when it blocks a plain request.

Who can see your report

Your report lives at a private link that can't be guessed. Anyone you share the link with can open it, so treat it like a shared document link. Reports aren't listed in search engines.

How long we keep it

We keep reports so your link keeps working, and so Pro re-scans can compare against the first one. Payment records are kept as tax law requires. Ask us and we'll delete your report and everything in it.

Your choices

Email support@heygoodword.com to see, correct or delete your information, or to opt out of ad measurement. We reply within 30 days. Depending on where you live, you may have further rights under laws like GDPR or the CCPA; we honor those requests the same way.

Changes

If this policy changes, we'll update the date at the top. Big changes that affect existing customers will be emailed to them.