Privacy
Privacy Policy
Effective July 28, 2026. This launch-candidate policy describes how Goopuh handles founding-pilot data and must receive legal review before commercial launch.
Information we process
Account identity, company settings, customer and lead records, estimates, proposals, jobs, costs, invoices, communications metadata, schedules, team assignments, automation state, subscription status, support messages, and security/audit events you create through Goopuh.
How information is used
To authenticate accounts, provide the estimate-to-profit workflow, deliver owner-requested communications, process authorized payments, operate support, prevent abuse, protect tenant boundaries, and improve reliability. Goopuh does not sell personal information.
Service providers
Goopuh uses Vercel for web hosting, Supabase for authentication and data services, Stripe for configured payments and subscriptions, and may use Resend and Twilio for owner-enabled email, text, and calling. Each provider processes only the data required for its configured function.
Demo isolation
The interactive demo uses browser-local sample records. It does not send customer email or text, collect payment, or write sample trade records into a production company workspace. Reset or exit controls clear the demo session.
Storage and retention
Production business records remain in the account-backed workspace while the account is active or as reasonably needed for service, security, dispute, tax, and legal obligations. Browser recovery caches are not backups or queued offline writes. Owners may export account data and request deletion subject to required retention.
Security
Goopuh uses authenticated sessions, tenant-scoped row security, least-privilege grants, server-verified provider webhooks, idempotent mutations, and encrypted provider transport. No system can promise absolute security; report suspected access immediately.
Your choices
Account owners can correct company data, export workspace data, change passwords, revoke device sessions, manage configured subscription billing, and request account or data deletion through the verified support channel.
Children and geography
Goopuh is a business service and is not directed to children. The founding pilot is intended for United States trade businesses; broader regional requirements must be reviewed before expansion.
Contact and changes
Material policy changes will be dated here. Privacy and deletion requests must use the verified support channel shown on the Support page so account ownership can be confirmed.