Privacy Policy

We store the minimum needed to deliver your daily report: your account, an encrypted copy of your SiteGiant login, your Telegram recipient, and daily totals for your channels. We don't collect your buyers' personal data and we don't sell or share any of it.

Account data

• Your email address (used for login and service email).
• A password hash (managed by Supabase Auth).
• Your selected plan and subscription status.

SiteGiant login

• Your SiteGiant username and password, kept in an encrypted database hosted on AWS. We use them only to log in on your behalf. We never display or send them in plain text.

Telegram recipient

• The chat ID and handle of the Telegram account you connect, plus a recipient label you choose. Used only to send your daily report.

Channel data (totals only)

• Daily totals for your channels: GMV, order counts, product stats, channel health. We do not store your buyers' names, emails, phone numbers, or addresses.

Operational data

• Logs of our sign-in checks, delivery status of Telegram messages, billing events from Stripe, and records of sensitive actions.

• To deliver the Service (check your channels, build reports, send Telegram messages, show the dashboard).
• To bill you correctly (via Stripe).
• To send service emails (verification, password reset, important account changes).
• To debug, monitor, and prevent abuse.

We do not use your data to train AI models. We do not sell or share it for advertising.

We use the following service providers to run GoalKeeper:

• Supabase — our database, sign-in, and file storage, running on AWS infrastructure.
• Vercel — web hosting for the dashboard and APIs.
• Stripe — payment processing. Stripe receives your card details directly; we never see or store them.
• Telegram — delivery of daily reports and alerts to recipients you connect.
• Resend — transactional email (verification, password reset).

Each provider has its own privacy policy. We share only the minimum data each provider needs to do its job.

• Your SiteGiant login is kept in an encrypted database hosted on AWS.
• Connections to the dashboard use a secure (HTTPS) connection.
• Each account can read only its own data.
• Only our system and our admin tools can read across accounts, and every access is logged.

• Account data: kept while your account is active.
• Daily totals and reports: kept for the life of the account (used for trends and history).
• System logs: kept for 90 days.
• Stripe billing records: retained per Stripe's requirements (typically 7 years for accounting).

If you delete your account, we deactivate your account immediately and permanently delete your data within 30 days. Billing records that we're legally required to retain remain in Stripe's ledger.

• Access: The dashboard shows everything we store under your account. Email us if you need a structured export.
• Correct: Update your SiteGiant login, recipient labels, and goals in Settings.
• Delete: Settings → Account → Delete. Or email us.
• Object / restrict: Email us if you have a specific request and we'll work with you in good faith.

The Service is not directed to anyone under 16. We don't knowingly collect data from children.

We'll update the “Last updated” date above and, for material changes, email account holders before the change takes effect.

For privacy questions or to exercise your rights: privacy@goalkeeper.example.