Privacy policy

Who we are

GoodMorning is operated by Good Morning Co LLC (“we”, “us”, or “our”). We provide weekly Meta Ads performance reports to marketers, agencies, and ecommerce operators. You can reach us at support@goodmorningco.com.

Information we collect

When you create an account and connect a Meta Ads account, we collect and store:

• Account information: your email address and an encrypted password (managed by Supabase Auth).
• Business information: your brand name, website URL, vertical, and logo (pulled from Brandfetch if you use the automatic option).
• Meta Ads data: with your explicit permission via Facebook Login for Business, we access your Meta Ads account to pull performance metrics (spend, impressions, clicks, conversions, ROAS, CTR, CVR, frequency) at the campaign, ad set, and ad level. We store a long-lived access token to refresh this data weekly.
• Shopify order data: with your permission, we connect to your Shopify store via OAuth to read your order history — order totals, order dates, and an anonymous numeric customer identifier — so we can calculate revenue, customer lifetime value, and customer acquisition cost. We do not access your customers' names, email addresses, phone numbers, or physical addresses, and we never write to your store.
• Billing information: payment information is collected and stored by Stripe. We only retain your Stripe customer ID and subscription status.

How we use your information

We use the data you provide to:

• Generate your weekly performance report, including the PDF, email, and dashboard views.
• Run diagnostic analysis on your ad account performance and deliver recommendations.
• Process your subscription and payment via Stripe.
• Send you service emails (weekly reports, billing notifications).

In-app support chat

When you message us through the support chat in your dashboard, we store your messages along with your account email so we can respond and improve our help content. To operate the chat, we share these messages with two service providers acting on our behalf: Slack (Slack Technologies, LLC), which routes your message to our support team, and Resend (Resend, Inc.), which delivers our email replies when you are offline. We keep support conversations for as long as your account is active and delete them when your account is deleted.

Anonymized benchmark data

When we generate your weekly report, we also write an anonymized snapshot to our benchmark dataset. This snapshot contains only aggregated metrics (average ROAS, CTR, CPM, CPC, CPA, frequency) tagged with your industry vertical and spend tier. It does not contain your account ID, brand name, email, or any identifying information. We use this dataset to provide peer benchmarks to all our customers. You cannot be identified from this data. Because this data is fully anonymized and contains no personal information, it is retained even if you delete your account or request data deletion. This is consistent with GDPR and CCPA definitions of anonymous data, which is not considered personal data.

How we share your information

We do not sell your personal information. We only share data with:

• Service providers that help us operate GoodMorning: Supabase (database and auth), Vercel (hosting), Stripe (payments), Resend (email delivery), Slack (support-chat routing), Brandfetch (brand asset lookup), and Meta (to access your ad account with your permission).
• Legal requirements: if required by law, subpoena, or to protect our rights.

Data retention

We retain your account data for as long as your account is active. Meta Ads performance data is retained at daily granularity for the lifetime of your account to enable historical trend analysis and long-term benchmarking. Generated weekly reports and PDFs are also retained for the lifetime of your account.

Shopify order data is deleted immediately when you disconnect your Shopify store from Settings, and again automatically within 48 hours if you uninstall the app directly from your Shopify admin. You can request deletion of your data at any time by emailing support@goodmorningco.com. When you request deletion, we erase your account and associated data, send you a confirmation that the deletion was completed, and retain only (a) anonymized benchmark aggregates that cannot identify you, (b) billing records held by our payment processor as required by tax law, and (c) a minimal record evidencing the deletion, which we delete after seven years.

Your rights

You can access, update, or delete your account data by logging into your dashboard or emailing us. You can also disconnect your Meta Ads or Shopify account at any time from Settings, which revokes our access, stops all future data pulls, and — for Shopify — immediately erases your stored order history. If you are in the EU, UK, or California, you have additional rights under GDPR and CCPA, including the right to request a copy of your data and the right to erasure.

Security

We use industry-standard security practices including encrypted connections (HTTPS/TLS), row-level security on the database, encrypted password storage, and secure token handling. No system is perfectly secure, but we take your data protection seriously.

Meta Platform compliance

GoodMorning uses the Meta Marketing API and Facebook Login for Business in accordance with Meta's Platform Terms and Developer Policies. We only access the data you explicitly authorize. You can revoke our access at any time from your Facebook Business Settings.

Google API Services compliance

GoodMorning's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. When you connect a Google account (such as Google Ads or Google Analytics), we access only the data you explicitly authorize, use it solely to provide reporting and recommendations to you inside GoodMorning, and never sell it, use it for advertising, or allow humans to read it except with your consent, for security purposes, or as required by law. You can revoke our access at any time from your Google account permissions or by disconnecting the integration in your GoodMorning settings.

Shopify Platform compliance

GoodMorning connects to Shopify using OAuth with read-only access to your store's orders. We request only the minimum scope needed to power your dashboard analytics — order totals, dates, and an anonymous customer identifier — and never request access to your customers' names, emails, phone numbers, or addresses. You can disconnect your Shopify store at any time from Settings, which immediately revokes our access and erases your stored order history.

Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Significant changes will be communicated via email.

Contact

Questions about this privacy policy? Email support@goodmorningco.com.