Scope and roles

This policy applies when Good Productivity determines why and how personal information is processed. When we process business data solely on a customer’s instructions, the customer may be the controller or business and Good Productivity may act as its processor or service provider under the applicable agreement. The customer remains responsible for having authority to connect its accounts and provide business data.

Information we collect or access

Account and identity information. Name, business email, stable account identifiers, tenant membership, role, and authentication events provided directly by the user or an identity provider such as Google or ChatGPT.

Customer-provided information. Objectives, project context, instructions, approvals, uploaded or selected files, decision records, feedback, and support communications intentionally submitted to the service.

Connected-service information. With an authorized user’s permission, we may access scoped advertising, analytics, search, website-behavior, CRM, marketplace, commerce, booking, revenue, finance, and operational evidence. Each connection has its own disclosure and permission screen.

Technical and usage information. Request metadata, device and browser information, IP address, timestamps, security events, feature usage, and diagnostics needed to operate, secure, and improve the service. We do not currently use the public marketing site for interest-based advertising.

We receive information from users, their business, the services they choose to connect, AI clients they choose to use, and our hosting, security, and support providers.

How we use information

We use information to authenticate users; provision tenants and products; provide reporting, reconciliation, attribution, decision support, recommendations, authorized operations, verification, and audit records; preserve customer-directed operating context; respond to support and privacy requests; secure and troubleshoot the service; enforce agreements; comply with law; and improve reliability and user-facing functionality.

We do not sell personal information or Google user data. We do not use connected business data for third-party advertising, unrelated surveillance, credit-worthiness, or training generalized artificial-intelligence models.

How we disclose information

We may disclose the minimum information needed to service providers that host, secure, monitor, or support the product under contractual restrictions; a user-selected AI client to fulfill that user’s request; professional advisers or authorities when legally required or necessary to protect rights and security; or a successor in a merger, financing, acquisition, or sale, subject to applicable notice and consent requirements.

We do not provide provider credentials to AI clients. A connected provider remains a separate service governed by its own terms and privacy practices.

ChatGPT, Codex, Claude, and other AI clients

When a user connects the Good Productivity MCP to an AI client, bounded product results and the context needed for the requested feature may be sent to that selected client. The AI client controls its own conversation retention and account settings. Good Productivity keeps provider credentials server-side and does not place passwords, API keys, access tokens, or refresh tokens in chat or MCP tool arguments.

Google API Services User Data Policy

For the Google measurement connection, information can include Google Analytics reports, Search Console performance, values from files the user explicitly selects, aggregate metadata from calendars owned by the account, and Tag Manager configuration. The exact purposes and access levels appear on our Google data access page.

Good Productivity’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is used only to provide or improve the user-facing features disclosed before consent. We do not transfer it for advertising, data brokerage, credit decisions, or training generalized AI models.

Storage, retention, and security

Offline provider credentials are encrypted and bound to the specific tenant and connection. Access grants are scoped to the authorized user, business, client, product profile, connections, and assets. Provider identifiers are protected references and are not exposed through ordinary model inputs or outputs.

We retain account information while the account is active; connection credentials while the connection remains active; customer-directed memory and business artifacts as required to provide the service; and security, support, operational, or audit records only as reasonably necessary for the disclosed purpose, contractual obligations, dispute resolution, fraud prevention, or law. Retention may also depend on customer instructions and connected-provider rules.

No security method is perfect. We use administrative, technical, and organizational safeguards designed for the sensitivity of the information, including access controls, tenant isolation, credential encryption, and revocation paths.

Your choices and privacy rights

An authorized tenant operator can disconnect a provider. For Google, disconnection disables the tenant connection, removes the locally stored offline credential, and requests provider revocation. A user can also revoke access from Google Account permissions.

Depending on applicable law, an individual may have rights to know or access, correct, delete, obtain a portable copy of, restrict, or object to certain processing. Good Productivity does not sell personal information or use it for cross-context behavioral advertising. To exercise a right, request provider disconnection, or request tenant-account deletion, email hello@goodproductivity.com. We verify identity and business authority before acting and may retain information where law or legitimate security and contractual needs require it. Authorized agents may submit requests where permitted by law.

The service is intended for business users age 18 or older and is not directed to children. Information may be processed in the United States and other locations where authorized providers operate, subject to applicable safeguards. We may update this policy when practices change and will update the effective date or provide additional notice when required.

Contact

Good Productivity, LLC · Miami, Florida. Privacy questions, access requests, deletion requests, or complaints may be sent to hello@goodproductivity.com.