Privacy Policy

Goodmentions (goodmentions.com), operated by Johan Larsen, Portugal. Contact: [email protected]. Last updated 3 September 2026.

1. What we collect

Account data: your email address, name if you give one, company name and country for invoicing, and login timestamps. Sign-in is by emailed link, so we store no passwords.

Order data: the content you submit, targets, schedules, order status and history, and the resulting public URLs.

Payment data: top-up amounts, currency and a reference from our payment processor. We never receive or store card numbers or wallet keys.

Support data: messages you send us in the app.

Technical data: IP address, browser type and basic logs, for security and fraud prevention.

2. Why we process it

To perform our contract with you: accounts, wallet, orders and support.

To meet legal obligations: invoicing, tax and accounting records.

For our legitimate interests: fraud prevention, moderation, service security and abuse prevention.

Marketing email only with your consent, or to existing customers about similar services, always with an opt-out.

3. Who we share it with

Hosting and database, payment processing, email delivery and internal operations tooling providers, each acting on our instructions.

The independent contractors who carry out placements see the order content and the target. They do not see your identity, your balance or your contact details.

We do not sell personal data. Where a provider sits outside the EEA, transfers rely on adequacy decisions or standard contractual clauses.

4. Retention

Account and order records are kept for the life of the account plus the period tax and accounting law requires. Support messages and logs are kept for a limited period and then deleted. On a verified deletion request we erase or anonymise data that is not subject to a retention duty.

5. Your rights

You may request access, correction, erasure, restriction, portability, or object to processing, at [email protected]. You may also complain to your data protection supervisory authority.

6. Cookies

The app uses strictly necessary cookies and local storage for your session. Any non-essential analytics on the marketing site is disclosed with a consent banner.

7. Security

Encrypted in transit, encrypted at rest through our hosting provider, role-scoped internal access, and sign-in links that expire.

8. Changes

We tell account holders by email about material changes at least 14 days before they take effect.