Privacy Policy

This Privacy Policy describes how Bogart Computing LLC(“we,” “us,” “our”), doing business as AllGoodWeb, collects, uses, and protects your information when you use our services at allgoodweb.com. By creating an account or using our service, you agree to this policy.

For questions or data requests, contact us at info@allgoodweb.com.

1. Information We Collect

Account information

Your email address and a hashed password, stored by Supabase Auth. We do not store your password in plain text.

Uploaded files

Image files you upload for processing are stored in your private storage bucket and are only accessible to your account. Full-resolution output files are automatically deleted one hour after generation. Preview thumbnails are retained for your history view.

Usage data

We track basic usage metrics (credits used, images processed, subscription status) to provide account functionality and improve the service.

Payment information

Billing details are handled entirely by Stripe. We never see or store your full credit card number.

Etsy connection data

If you connect your Etsy shop, we store your Etsy OAuth access and refresh tokens, encrypted at rest using AES-256-GCM. We also store your Etsy shop ID, shop name, and Etsy user ID. These are used solely to publish listings to your shop on your behalf. We do not access, store, or share any Etsy buyer data, order data, or other Etsy member data beyond what is necessary to create and manage your own listings. You may disconnect your Etsy account at any time from your Etsy settings page, which deletes all stored tokens.

2. How We Use Your Information

• To provide and maintain our services
• To manage your account and subscription
• To send transactional emails (account verification, password resets)
• To publish listings to your connected Etsy shop when you request it
• To improve the service based on aggregate, anonymized usage patterns

We do not use your data for advertising. We do not use any data accessed via the Etsy API for analytics, machine learning, or AI model training.

3. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We use the following services to operate AllGoodWeb:

• Supabase — Authentication, database, and file storage
• Stripe — Payment processing
• Hostinger — Application hosting
• Etsy — Listing publication (only when you initiate a publish action)

Each provider has their own privacy policy and handles your data according to their terms. We are not responsible for the privacy practices of third-party websites linked from our service.

4. Data Retention

Uploaded original images and preview thumbnails are retained in your account until you delete them or close your account. Full-resolution processed output files are deleted automatically one hour after generation. Etsy OAuth tokens are retained until you disconnect your Etsy account. Account data is retained for as long as your account is active. Accounts with no activity for twelve (12) or more months may be treated as inactive and deleted. If you request account deletion, we will remove your personal data within 30 days.

5. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Withdraw consent for processing where consent is the legal basis
• Request restriction of processing in certain circumstances
• Request a portable copy of your data

You can access, update, or delete your account at any time through your Account Settings page. To disconnect your Etsy account, visit your Etsy settings page. To request a full data export or account deletion, contact us at info@allgoodweb.com.

6. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, AES-256-GCM encryption for OAuth tokens, and row-level security policies on all database tables. However, no method of transmission over the Internet is 100% secure.

7. Cookies

AllGoodWeb uses essential cookies only — specifically, authentication session cookies managed by Supabase. We do not use advertising, tracking, or analytics cookies. You may disable cookies in your browser settings, but doing so may prevent you from logging in or using the service.

8. Children

AllGoodWeb is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a minor, we will delete it promptly.

9. Data Location

Your data is stored and processed in the United States via Supabase and Hostinger. By using AllGoodWeb, you consent to the transfer and processing of your data in the United States, regardless of where you are located.

10. California Privacy Rights

California residents may request information about the disclosure of their personal information to third parties for direct marketing purposes. As noted above, we do not share personal information with third parties for marketing. We do not respond to Do Not Track signals at this time. To exercise your California privacy rights, contact us at info@allgoodweb.com.

11. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

Bogart Computing LLC
AllGoodWeb
info@allgoodweb.com