Privacy Policy

1. Information we collect

• Account registration details, email address, business name and contact information.
• Authentication and security information, including session information and security events.
• Meta authorization information and stored access credentials when a supported connection is authorized, together with advertising account and Facebook Page identifiers and connection status.
• Campaign configurations and, when retrieval is enabled, authorized advertising performance data.
• Lead submissions and contact details, device information provided by leads, and information entered by customer businesses.
• Phone acquisition and resale records, including purchase costs, resale revenue, repair costs, fees and related financial information.
• Technical logs, usage information and security events generated while operating the service.

Subscription plan information may be stored in the app. Stripe billing is not currently activated; payment processing and subscription billing information will be handled when that integration is enabled and the applicable terms are provided. We do not describe future payment collection as a current feature.

2. How we use information

We use information to operate and secure the platform, authenticate users, maintain organization accounts, provide support, meet legal obligations, and connect the Meta business assets customers authorize.

Current software supports ad template selection, campaign preparation, lead recording, phone purchases and resales, profitability reporting, and internal quality monitoring. Launching or managing Meta campaigns and retrieving live campaign metrics or leads are conditional on those functions being enabled. Subscription billing will be supported only when billing is activated.

3. Meta integration and authorization

Customers explicitly authorize supported Meta advertising accounts and Facebook Pages. The current connection functionality is intended to identify accessible business assets and store the customer’s selected account and Page; it is not a representation that live advertising operations are available to all customers.

When additional advertising functions are enabled, Meta APIs will be used for the advertising actions customers request and the metrics and leads they authorize us to retrieve. Access depends on permissions, Meta review, account eligibility and technical availability.

Goodfit Growth does not sell Meta access tokens or use customer advertising data for unrelated purposes. Customers can disconnect Meta in Settings and request deletion of eligible stored information using our Data Deletion Instructions. Meta independently processes data under its own policies.

4. Sharing and service providers

Goodfit Growth does not sell customer information to third-party data brokers. Information is handled by service providers as necessary to operate the platform, including Lovable Cloud infrastructure for hosting, authentication, storage and database services, and Meta Platforms when customers authorize supported integrations.

Stripe will handle relevant payment information once billing is activated; it is not currently used for active subscription billing. Support information you send is used to respond to your request. Information may also be disclosed when required by law or necessary to protect rights, investigate fraud, or address security incidents.

5. Security and retention

Implemented safeguards include account access controls, organization-level data isolation, encryption of stored Meta credentials, and activity logging for supported operations. These safeguards reduce risk but do not guarantee absolute security.

We retain information as needed to provide services and support business records, and for legitimate legal, security, financial, fraud-prevention and dispute-resolution purposes. Retention depends on the type of information, customer instructions and applicable obligations. We review eligible deletion requests manually; disconnection alone is not deletion of all business records.

6. Customer organization data

Customer organizations control the business information they enter, subject to the Terms of Service and applicable law. Goodfit Growth processes that information to provide the software and authorized integrations. Access and deletion of organization records may require authorization from the organization.

7. Advertising leads and communications

Businesses using Goodfit Growth are responsible for lawful collection, use and follow-up of advertising leads, including providing appropriate notices and obtaining any required consent for communications. Goodfit Growth supplies software infrastructure and authorized integrations. For information a customer business collected about you, contact that business or identify it when contacting us.

8. Privacy requests and contact

Contact brian@goodfitgrowth.com to request access to, correction of, or deletion of eligible personal information. We may verify your identity and authority and coordinate with the relevant customer organization. Rights and exceptions depend on your location, applicable privacy law and the context in which information is processed; this policy does not claim universal compliance with every privacy law.

See Data Deletion Instructions for the request procedure. If a request cannot be fulfilled in full, we will explain the outcome and any applicable retention reasons. Policy updates will be reflected in the last-updated date on this page.