Privacy Policy

Last updated: April 1, 2026

Privacy Policy

At Good4Spot, we take your privacy seriously. This policy explains how we collect, use, and protect your personal data.

1. Data Controller

Good4Spot is operated by CRP SAS, a company based in France.

For any privacy-related inquiries, please contact us at: admin@good4spot.com

2. Data Collected

We collect the following data:

  • Account Data: first name, last name, email address, company name, phone number
  • Authentication Data: passwords (hashed via bcrypt), session information, two-factor authentication (2FA) data
  • Subscription Data: plan type, HubSpot portal IDs, subscription history
  • Usage Data: access logs, IP addresses, browser and device information, pages visited, actions performed
  • Payment Data: processed via Stripe. Good4Spot never stores credit card numbers

3. Purpose of Data Processing

We use your data for:

  • Providing and maintaining our service
  • Managing your account and subscription
  • Processing your payments through Stripe
  • Providing technical and customer support
  • Securing your account (2FA, trusted browser management)
  • Improving our products and services
  • Complying with legal obligations

4. Legal Basis for Processing

We process your data based on:

  • Contract Performance: service provision, billing, subscription management
  • Legitimate Interest: security, fraud prevention, service improvement
  • Consent: for analytics, cookies, and tracking (see our Cookie Policy)

5. Data Retention

We retain your data according to the following schedule:

  • Active Account: as long as your account remains active
  • After Account Deletion: 30-day grace period, then permanent deletion
  • Invoices and Legal Documents: 10 years (legal retention requirement)
  • Access Logs: 12 months

6. Data Sharing

We share your data only with:

  • Stripe: for secure payment processing
  • Email Service Provider: for sending notifications and communications

We never sell your data to third parties.

7. Data Transfers

Good4Spot is hosted within the European Union. Stripe (our payment partner) is based in the United States. This transfer complies with the EU-US adequacy decision.

8. Your Rights (GDPR)

You have the following rights regarding your personal data:

  • Right of Access: obtain a copy of your data
  • Right of Rectification: correct inaccurate data
  • Right to Erasure: request deletion of your data
  • Right to Data Portability: receive your data in a structured format
  • Right to Object: refuse certain processing

To exercise these rights, contact us at: admin@good4spot.com

9. Cookies

We use cookies to enhance your experience. Please refer to our Cookie Policy for details.

10. Security Measures

We protect your data through:

  • Password hashing via bcrypt
  • HTTPS encryption for all communications
  • Session data encryption
  • Strict access controls
  • Regular security audits

11. Changes to This Policy

We may update this policy at any time. Material changes will be communicated via email or through a notification on our platform.

12. Contact

For any questions regarding this policy:

Good4Spot
Operated by CRP SAS
France
Email: admin@good4spot.com

Last Updated: 2026-04-01