Privacy Policy

1. Overview

Goodli ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using Goodli, you agree to the practices described here.

2. Information We Collect

Account information

When you sign up, we collect your email address and display name. We do not require your legal name at signup.

Identity verification (KYC)

If you post a funding request, you are required to verify your identity through our partner Didit. Didit collects and processes government-issued ID and other verification data. Goodli receives only the verification status (verified / pending / rejected) — we do not store your raw identity documents.

Payment information

Payments are processed by Stripe. We do not store your card number, bank account details, or full financial information. We store only your Stripe account ID and payout status.

Request content

If you post a funding request, we store the title, description, category, goal amount, and location (city/state) you provide.

Usage and technical data

We collect IP addresses at signup to detect VPN or proxy usage as a fraud prevention measure. We may also collect browser type, device type, and pages visited through standard server logs.

3. How We Use Your Information

• To operate the platform and process donations
• To verify your identity before you can receive funds
• To detect and prevent fraud, abuse, and policy violations
• To send transactional emails (donation receipts, account updates)
• To comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising.

4. Information Shared With Third Parties

We share your information only with the following service providers, and only as necessary to operate the platform:

• Stripe — payment processing and connected account management
• Didit — identity verification (KYC)
• Supabase — database and authentication
• Resend — transactional email delivery
• Vercel — hosting and infrastructure
• IPinfo — IP-based fraud detection at signup

5. Anonymity on the Platform

Your legal name is never shown publicly. On the public feed, you are identified only by your display name (chosen by you). Donors may give anonymously. Only Goodli administrators can link your display name to your verified identity for fraud and safety purposes.

6. Data Retention

We retain your account data for as long as your account is active. Donation and transaction records are retained for at least 7 years to comply with financial recordkeeping requirements. You may request deletion of your account by contacting us — note that transaction records may be retained even after account deletion.

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and associated data (subject to retention requirements)
• Opt out of non-transactional communications

To exercise any of these rights, contact us at info@goodliapp.com.

8. Security

We use industry-standard security practices including encrypted connections (HTTPS), row-level security on our database, and access controls. No system is 100% secure — if you believe your account has been compromised, contact us immediately.

9. Children's Privacy

Goodli is not intended for users under 18. We do not knowingly collect personal information from minors. If we learn that a minor has created an account, we will terminate it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. Continued use after changes take effect constitutes acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy? Contact us at info@goodliapp.com.