Privacy

This policy explains what Goodshout does with personal information. It covers two groups: the businesses who use Goodshout, and their customers who receive review requests.

What we collect

From businesses: your name, email, business name, NZBN, phone, timezone, Google Place ID, and billing details (held by Stripe, not us).

About your customers: the name, email and/or mobile number you give us or that we extract from an invoice you BCC to us, plus whether they opened the link, which option they chose, the review draft and any private message or photo they submit.

How we use it

To send review requests on a business’s behalf, draft a starting point for a review, route private complaints to the business, and show the business their own activity. Review-request messages are sent on a transaction basis (after a job or purchase) and every one carries the sender’s identity and a working unsubscribe, as required by the NZ Unsolicited Electronic Messages Act.

Who we share it with

We use these processors: Supabase (database and file storage, Sydney), Postmark (email), Twilio (SMS), Stripe (payments), Anthropic (AI drafting, and only the tags and note a customer provides, never their contact details), and Vercel (hosting). We do not sell personal information.

Unsubscribing and deletion

Any recipient can unsubscribe from the link in any message; we stop immediately and cancel anything queued. Businesses can request deletion of their account and associated data by emailing us. We keep records needed for legal or accounting reasons for as long as the law requires.

Your rights

Under the NZ Privacy Act 2020 you can ask to see or correct the information we hold about you. Email us and we’ll respond within 20 working days.

Contact

Email privacy@goodshoutapp.com.