Goodshout is run by [legal name] (NZBN [number]), New Zealand. We follow the Privacy Act 2020.

Our privacy officer is Tom Wrench: privacy@goodshout.nz.

Everyone who visits

• A random ID for your browser: made by Goodshout and kept on your device, not your name, internet address or device details. It means a view counts once a day, signed in or not, so we can show businesses fair numbers. It also stops a report from your browser being made twice.
• Your choices: the town you pick, and light or dark mode, kept on your device.
• Standard logs: like most websites, our hosting providers keep short-lived technical logs (such as internet addresses) to run and protect the site.

If you create a free account

• your email address, the home location you choose, and a first name if you add one;
• the shouts you love, the businesses you follow and the job ads you save;
• any reports you make, with the reason and note.

If you run a business on Goodshout

• your first and last name, your email, and whether you're an Owner or Staff;
• the business's name, category, address and map point, place, phone, email, website, social links, description and logo, and which of those you show publicly;
• the shouts, photos and job ads you post;
• billing details, which Stripe handles: we see things like your card's type and last four digits, never the full number;
• your browser's Goodshout ID when you open your dashboard, so your own views and taps don't count towards your numbers.

If you join a waitlist

• Locals: your email and the town you're waiting for.
• Businesses: your email, your business's name and the address you picked, plus your first name and phone if you add them.
• If you're signed in when you join, we link it to your account.

To keep Goodshout fair

When you love a shout, follow a business or make a report, we record your internet address and basic device information (your browser and operating system). We use it only to spot fake loves and abuse, never to identify you or for marketing, and we delete it after 90 days.

Your location

If you use the Closest sort, or “Use my location” to find a town, your phone shares its location to work out distances. We use it for that one request and never store it.

• To run Goodshout: sign you in, show your loves, follows and saved job ads, and show businesses in the right town.
• To send the emails you need: sign-in codes, and for businesses, emails about approval, billing, free periods and your shouts and job ads. Any other email (like a weekly round-up of businesses you follow) will always let you opt out.
• To show businesses how their shouts and job ads are going, as numbers only (for example, how many people saw or loved a shout). Never who.
• To keep Goodshout safe and fair: spotting fake loves or abuse, and checking shouts and job ads against our rules.
• To tell you when Goodshout opens in a town you're waiting for.

• Shouts, job ads and business profiles, including the contact details and address each business chooses to show.
• Love counts, and a business's follower count once it reaches 10.
• Private: who loved, followed, saved or reported what; your email, name and home location; and the names of the people who run a business.

We don't sell your information. We use these service providers to run Goodshout, and they only use it to provide their service to us:

• Supabase: our database, sign-in and file storage.
• Nordcraft: hosts the Goodshout website.
• Stripe: payments (businesses only).
• addy: looks up a business's address as it's typed at signup.
• Postmark: sends our emails.
• Anthropic: an AI model that checks shouts, job ads and businesses' own details (name, description and logo) against our rules. Only that business content is sent, never anything about locals.
• Google Workspace: our email inbox, when you email us.

Some of these providers store information outside New Zealand (for example, in Australia, the United States or Europe). We choose providers that protect it to a standard comparable to NZ privacy law.

We'll also share information if the law requires it.

• Internet addresses and device information (to spot abuse): 90 days.
• Records that make a view count once a day: 2 days. After that, businesses only ever get daily totals.
• A business's own browser IDs: 90 days after its people last opened the dashboard there.
• Your account: while it's open. If you close it, we delete it within 30 days, apart from anything the law says we must keep.
• Businesses that cancel: the profile, followers and old shouts for 12 months, in case they come back, then deleted.
• Billing and tax records: 7 years, as NZ tax law requires.
• Waitlists: until we've told you Goodshout's open in your town, or until you ask us to take you off.

We keep your sign-in on your device (for up to 90 days, unless you sign out), plus a few things that make Goodshout work: your town, light or dark mode, the random ID that counts views, and a business signup in progress. We don't use advertising cookies or third-party trackers.

You can ask to see or correct the personal information we hold about you, or ask us to delete your account. Email privacy@goodshout.nz.

If you're not happy with how we've handled a privacy concern, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

If we change this policy in a way that matters, we'll tell you before the change takes effect.