Privacy Policy

1. Who We Are

Hello Good ("we," "us," or "our") is a cause-driven partnership agency that connects nonprofits and brands through strategic marketing, creative production, and AI-powered matchmaking. We operate the following platforms:

• hellogood.club — our public marketing website
• portal.hellogood.club — nonprofit partner portal
• brands.hellogood.club — brand partner portal
• admin.hellogood.club — internal staff dashboard

This Privacy Policy applies to all four platforms and any services provided through them.

2. Information We Collect

Information you provide directly:

• Account information: name, email address, password (encrypted), organization name, and role when you create an account or accept an invitation
• Onboarding data: organization details, cause areas, budget ranges, marketing needs, partnership goals, and other responses submitted during onboarding
• Contact form submissions: name, email, organization, and message content submitted through our "Let's Talk" form
• Network contacts: names, emails, companies, positions, and LinkedIn URLs of contacts you add or import into GoodMatch
• LinkedIn data: if you choose to import your LinkedIn connections via CSV export, we store the contact information from that export (name, email, company, position)
• Content and communications: messages, comments, files uploaded as deliverables, and any content you create within the platform

Information collected automatically:

• Usage data: pages visited, features used, actions taken within the platform
• Device information: browser type, operating system, screen resolution
• Authentication data: session tokens, login timestamps, IP addresses used for security purposes

Information from third parties:

• Invitation referrals: when you are invited by another user, we receive your email address and the inviter's identity
• AI-generated insights: our AI agents may generate research summaries, partnership recommendations, and content based on publicly available information about you or your organization

3. How We Use Your Information

We use the information we collect to:

• Provide our services: operate the platform, manage accounts, facilitate partnerships between nonprofits and brands, and deliver project management tools
• AI-powered matching: use our GoodMatch system to identify and recommend potential partnership opportunities based on cause alignment, organizational goals, and network connections
• Generate content: our AI agents create campaign content, outreach sequences, research summaries, and donation funnel configurations on your behalf
• Communications: send invitation emails, password resets, notification emails, and weekly reports via our email service provider (Resend)
• Improve our services: analyze usage patterns to enhance platform functionality, fix issues, and develop new features
• Security: detect and prevent fraud, unauthorized access, and other harmful activity

4. AI and Automated Processing

Hello Good uses artificial intelligence to enhance our services. Specifically:

• AI Agents: we use Claude (by Anthropic), Google Gemini, and other AI models to generate content, research contacts, analyze pipelines, and create partnership recommendations
• GoodMatch: our AI matching engine analyzes organizational profiles, cause areas, and contact networks to suggest potential partnerships
• Automated reports: weekly project reports may include AI-generated summaries and recommendations

AI-generated outputs are tools to assist human decision-making. No partnership, outreach, or financial commitment is made automatically without human review and approval.

Your data may be sent to third-party AI providers (Anthropic, Google) for processing. These providers process data according to their own privacy policies and do not use your data to train their models when accessed via API.

5. How We Share Your Information

We do not sell your personal information. We share information only in these circumstances:

• With your partnership counterparts: when a partnership is established between a nonprofit and a brand, both parties can see relevant partnership details, scopes, project status, and deliverables
• Network sharing (opt-in): if you opt in to share your contact network with Hello Good for other clients, your imported contacts may be visible to our admin team for matchmaking purposes. This is always voluntary and may qualify you for a subscription discount
• Service providers: we use Supabase (database and authentication), Vercel (hosting), Resend (email delivery), and AI providers (Anthropic, Google) to operate our platform. These providers access your data only to perform services on our behalf
• Legal requirements: we may disclose information if required by law, legal process, or government request
• Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity

6. Data Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit (TLS/HTTPS) and at rest
• Passwords are hashed using bcrypt and never stored in plain text
• Authentication uses secure JWT tokens with session expiration
• Row-Level Security (RLS) policies ensure users can only access their own data
• Admin operations require a separate service role key
• API keys and secrets are stored in secure environment variables, not in code

7. Data Retention

We retain your information for as long as your account is active or as needed to provide our services. Specifically:

• Account data: retained until you request deletion or your account is deactivated
• Partnership and project data: retained for the duration of the partnership plus 3 years for reporting and audit purposes
• Contact form submissions: retained for 2 years
• AI agent run logs: retained for 1 year for debugging and improvement purposes
• Invitation records: retained for 90 days after acceptance or expiration

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal information, subject to legal retention requirements
• Portability: receive your data in a structured, machine-readable format
• Withdraw consent: withdraw consent for optional data processing (e.g., network sharing) at any time
• Object: object to processing of your data for specific purposes

To exercise any of these rights, contact us at hello@hellogood.club.

9. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising cookies or cross-site tracking. Specifically:

• Authentication cookies: Supabase session cookies that keep you logged in (essential, cannot be disabled)
• No analytics cookies: we do not use Google Analytics, Facebook Pixel, or similar tracking services
• No ad cookies: we do not serve advertisements or use advertising tracking

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Our services are hosted in the United States. If you access our platform from outside the United States, your information will be transferred to and processed in the United States. We rely on standard contractual clauses and our service providers' compliance certifications to ensure adequate data protection.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Hello Good
Email: hello@hellogood.club
Los Angeles, CA — New York, NY — Washington, DC