Privacy policy.

What we collect, why, where it lives, and who else handles it.

Draft of 13 October 2026.

Who we are

Good Local Gov ([TO CONFIRM: the legal name, form, and state of the entity that operates the Service]) runs goodlocalgov.com and the One(GLG) workspace at app.goodlocalgov.com, together “the Service.”

Our approach

The Service is built for local government. We collect what we need to run it, our database and workspace run in the United States, and we do not sell personal data.

What we collect on this site

When you send the contact form: your name, email address, organization, role, the topic you chose, your message, and the page you sent it from.
Your network address, used only to limit repeated form submissions. [TO CONFIRM: how long rate-limit records are kept]
Your browser keeps your theme, whether you have seen the welcome, and your score in the hidden-heart game. These stay in your browser and are not sent to us.

What we collect in the workspace

Account details: your name, email address, and organization.
What you and your colleagues create: tasks, documents, projects, conversations, and the rest of your organization’s work.
If you connect a Google or Microsoft account: the mail and calendar data the features you use need, such as messages synced into OneBox.
A record of meaningful actions (who did what, and when), and a receipt for every AI call.
Billing details. Payment happens on Stripe’s checkout page, so card numbers go to Stripe, not to us.
Technical logs from our hosts. [TO CONFIRM: what host logs contain and how long they are kept]

Connected accounts

When you connect a Google or Microsoft mail account, the Service can read your mail, draft replies, send a reply or a new message when you click Send, and archive a message when you ask it to. Its access tokens are sealed with AES-256-GCM before they are stored. Disconnecting the account deletes them.

AI processing

When AI is on for your organization, the text a feature needs is sent through our AI gateway to a model provider. [TO CONFIRM: the model providers switched on in production; Anthropic is the one named in our setup notes] Each call leaves a receipt with the model, tokens, cost, and outcome, and a fingerprint of the inputs rather than the inputs themselves.

[TO CONFIRM: whether any model provider may use customer content for training, and under what terms. This draft makes no promise about training until that is confirmed.]

Analytics and tracking

This site and the workspace load no analytics, advertising, or cross-site tracking scripts. Where error reporting is switched on, error reports go to Sentry. If we ever add analytics, we will update this policy before turning it on.

Where your data lives

Our database runs on Supabase in the United States (us-west-1). The workspace runs on Vercel in its pdx1 region (Portland, Oregon). The outside services that handle data are listed on our trust page.

Retention and deletion

[TO CONFIRM: how long customer content is kept after an account ends, the export window, and how a deletion request is carried out]

Your rights

Depending on where you live, you may have rights to see, correct, or delete personal data about you. To use them, email hello@goodlocalgov.com. [TO CONFIRM: a dedicated privacy address]

Changes

We will post changes to this policy on this page, with the date they take effect.