Privacy Policy

1. Introduction

Goodword, Inc. ("the Company," "we," "us," or "our") operates withgoodword.com and the Goodword professional relationship management service (collectively, the "Service"). This Privacy Policy describes how we collect, use, store, and share information when you use the Service, and the choices available to you.

Goodword's core product processes the professional contact information, interaction history, and communication context that users bring into the Service. That includes email headers and calendar event context synced from Gmail and Outlook, LinkedIn notes you capture, and contact records you create or import. This processing exists to do one thing: help you remember your professional relationships and act on them at the right moment. We do not use this data to build advertising profiles or sell it to third parties.

We are based at 1420 Fifth Avenue, Suite 2200, Seattle, WA 98101 and can be reached at [email protected].

2. Information We Collect

2.1 Information You Provide Directly

When you create an account or use Goodword, we collect:

• Account credentials (name, email address, password hash);
• Contact records you create or import (names, roles, companies, phone numbers, notes, interaction dates);
• Manual notes and interaction logs you add about professional relationships;
• LinkedIn notes you capture via the Service's capture feature;
• Messages you send to us through contact forms or support channels.

2.2 Information Collected Through Connected Integrations

If you connect a Gmail or Outlook account, Goodword reads email headers (sender, recipient, subject, date) and calendar event metadata (attendees, event titles, dates) to build and refresh your contact interaction timeline. We do not read or store the full body of your emails. We access only the data required to construct relationship context: who you have communicated with and when.

Integration access is scoped to the minimum permissions required and can be revoked at any time from your account settings.

2.3 Information Collected Automatically

When you visit withgoodword.com, we automatically collect limited technical information:

• IP address and approximate location (city/region level);
• Browser type, operating system, device class;
• Pages visited, referring URLs, time on page;
• Cookie and similar identifiers (see Section 5).

2.4 We Do Not Knowingly Collect Children's Data

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it promptly.

3. How We Use Information

Goodword uses the information we collect to:

• Provide the core Service: building and displaying your professional contact memory, generating relationship reminders, and computing warm-path introductions through your network;
• Sync and refresh contact interaction timelines from connected email and calendar integrations;
• Send transactional service notifications (reminder nudges, account alerts, integration health notices);
• Send product updates and (with your consent where required) marketing communications;
• Improve Service features based on aggregated, non-identifiable usage patterns;
• Detect, investigate, and prevent fraud, abuse, or security incidents;
• Comply with applicable legal obligations.

We do not use your contact records, email metadata, or interaction history to train machine learning models without your explicit written consent. We do not sell personal information for monetary value.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf (hosting, email delivery, analytics, customer support tooling) under contractual confidentiality and data-processing terms;
• Authorities, when required by law or to protect rights, safety, or property;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy and prior notice to users.

We do not sell personal information to third parties. For Teams tier customers, the shared relationship graph is visible to designated members of your team only; it is not shared outside your team workspace.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, maintain your session, remember preferences, and measure usage. For details and choices, see our Cookie Policy.

6. Data Retention

We retain your account data, contact records, and integration-sourced interaction history for as long as your account is active. When you delete a contact record, it is removed from your workspace within 30 days. When you close your account, we purge your personal data within 60 days, except where retention is required for legal or accounting obligations.

Server access logs are retained 90 days then aggregated. Marketing-list contacts who have not engaged are purged after 24 months.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, encrypted storage for credentials, restricted-access databases, and least-privilege access controls. Integration tokens for Gmail and Outlook are stored encrypted and scoped to minimum required permissions. No system is perfectly secure; we cannot guarantee absolute security.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable law, and no later than 45 days.

9. Washington Residents

Washington State does not currently have a comprehensive consumer privacy statute. As a matter of policy, we extend the following baseline rights to all U.S. residents regardless of state of residence.

9.1 Baseline Rights

• Right to Know: request the categories of personal information we have collected about you.
• Right to Delete: request deletion of personal information you have provided.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Marketing: unsubscribe from marketing emails or opt out via the link in each marketing message.

9.2 How to Exercise

Email [email protected] with a description of your request and enough detail for us to verify your identity. We respond within 45 days.

9.3 Sector-Specific Rights

If you are protected by federal sector laws (e.g., HIPAA, GLBA, FERPA), those laws may give you additional rights with respect to data covered by them.

9.4 California Visitors

If you are a California resident, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. We do not sell personal information and do not "share" personal information for cross-context behavioral advertising.

To submit a CCPA / CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice within the Service. Continued use of the Service after the effective date of the updated Policy constitutes acceptance.

11. Contact

Questions, requests, or complaints can be sent to:

Goodword, Inc.
1420 Fifth Avenue, Suite 2200
Seattle, WA 98101
Email: [email protected]
Phone: +1 (206) 598-0171