Privacy Policy

1. Information We Collect

1.1 Information You Provide to Us

Account Information

• Name
• Email address
• Phone number (if provided for SMS notifications)
• Password (stored using industry-standard hashing and security practices)

Booking Information

• Artist selections
• Appointment dates and times
• Communications with artists through the Platform

Payment Information

• Payments are processed by Stripe, our third-party payment processor
• We do not store full credit card numbers on our servers
• We may store limited payment details (such as card type and last four digits) for display and record-keeping purposes

Artist Information

• Studio or service location
• Styles, specialties, and pricing
• Portfolio images uploaded to your profile
• Availability and scheduling preferences

User-Generated Content

• Photos you upload
• Messages sent through the Platform
• Reviews or feedback, if applicable

1.2 Information Collected Automatically

Device Information

• IP address
• Device type, operating system, and browser type

Usage Information

• Pages viewed
• Features used
• Time spent on the Platform
• Interactions within the Platform

We do not track detailed browsing behavior outside of our Platform or create comprehensive user profiles for third-party advertising purposes.

1.3 Cookies and Similar Technologies

We use cookies and similar technologies to:

• Maintain user sessions
• Remember preferences
• Improve Platform performance and usability

You may control cookies through your browser settings, though disabling cookies may affect Platform functionality.

2. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Platform
• Process bookings and payments
• Facilitate communication between clients and artists
• Send transactional notifications (confirmations, reminders, updates)
• Improve features, performance, and user experience
• Detect fraud, abuse, or security issues
• Comply with legal obligations

3. How We Share Your Information

We do not sell personal information.

3.1 With Artists

When you make a booking, we share relevant contact and booking details with the selected artist so they can provide the requested service.

3.2 With Service Providers

We share information with trusted third-party services that help operate the Platform:

• Stripe — Processes all payments, deposits, and artist payouts. Stripe receives payment card details, bank account information (for artists), and transaction data. See Stripe's Privacy Policy for details.
• Twilio — Sends SMS notifications for booking confirmations, reminders, and updates. Twilio receives phone numbers for users who opt in to SMS.
• Base44 — Our application platform and database host. Stores account information, bookings, messages, and uploaded content.
• Google — Provides authentication ("Continue with Google") and may be used for analytics.
• Email providers — Sends transactional emails like booking confirmations, password resets, and account notifications.

These providers are contractually required to protect your information and use it only for the purposes we authorize. We do not sell your data to any of these providers.

3.3 Legal and Safety Reasons

We may disclose information when required by law or to:

• Enforce our Terms of Service
• Protect users, artists, or GoodWork
• Prevent fraud or security threats

3.4 Business Transfers

If GoodWork is involved in a merger, acquisition, or asset sale, user information may be transferred as part of that transaction.

3.5 With Your Consent

We may share information with third parties when you explicitly consent.

4. Data Retention

We retain personal information only as long as necessary to:

• Operate the Platform
• Comply with legal obligations
• Resolve disputes

Some data may remain in backup systems for a limited period.

5. Your Privacy Rights

Depending on your location, you may have the right to:

• Access or update your information
• Request deletion of your account and data
• Opt out of marketing communications

California Residents (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

Right to Know

You can request that we disclose what personal information we have collected about you, the sources, the purposes for collection, and the third parties we've shared it with.

Right to Delete

You can request that we delete your personal information. We will delete your data unless we need to retain it for legal compliance, completing transactions, or security purposes. You can also delete your account directly in Account Settings.

Right to Opt Out of Sale

We do not sell your personal information to third parties. Because we don't sell data, there is no need to opt out.

Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights. You won't receive different pricing or service quality for making a privacy request.

How to Submit a Request

To exercise any of these rights, email us at [email protected] with the subject line "CCPA Request." We will verify your identity and respond within 45 days.

6. Data Security

We use reasonable administrative, technical, and organizational safeguards to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security.

7. Children's Privacy

The Platform is intended for individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18.

8. Third-Party Links

The Platform may link to third-party websites or services. We are not responsible for their privacy practices.

9. International Users

The Platform is operated in the United States. If you access it from outside the U.S., your information may be transferred to and processed in the United States.

10. SMS Communications

If you provide your phone number and opt in to SMS notifications:

• We collect and store your phone number to send you text messages
• Messages may include booking confirmations, appointment reminders, payment notifications, and account updates
• We share your phone number with Twilio, our SMS service provider, solely to deliver messages
• We record the date you consent to receive SMS for compliance purposes
• Message and data rates from your carrier may apply
• You can opt out at any time by replying STOP to any message or disabling SMS in your account settings

We do not sell or share your phone number for marketing purposes.

11. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on the Platform with a revised "Last Updated" date.

12. Contact Us

• Email: [email protected]
• Company: GoodWork Innovations LLC
• Location: Los Angeles, California