Privacy policy

Last updated: Jan 29th 2026

This Privacy Policy describes how Good Tracking (“we”, “us”, “our”) collects, uses, and processes data when you use our website and services.

1. Scope

This Privacy Policy applies to:

  • The marketing website goodtracking.ai
  • The application app.goodtracking.ai

Good Tracking is a business-to-business (B2B) service intended for companies and professionals.

2. Data We Process

We process limited information necessary to provide the Service, including:

  • Account information (email address, authentication details)
  • Business-related information submitted by customers, such as:
    • Company names, keywords and domains
    • Competitor names and domains
    • Prompts submitted for tracking and analysis
  • AI-generated outputs and historical statistics related to the above inputs

We do not intentionally collect or process sensitive personal data.

Account data and project data (including prompts, competitor information, and AI-generated outputs) are stored in our database provided by Supabase, hosted in the EU.

3. Use of Artificial Intelligence Services

Good Tracking uses third-party artificial intelligence services to deliver analytics, insights, and tracking functionality.

OpenAI
To generate AI-based insights, we transmit certain user-provided inputs to OpenAI, including:

  • Company names, keywords and domains
  • Competitor names and domains
  • Prompts

AI-generated outputs are stored and displayed in the Service to provide historical analytics.
Inputs and outputs may be used by OpenAI to improve and train their models, in accordance with OpenAI’s policies.

Google AI Overview
To retrieve AI-generated answers from Google AI Overview, Good Tracking uses third-party search and data retrieval services, including SerpAPI.

  • Only the prompt is transmitted to SerpAPI
  • Company names, competitor information, account data, or other customer-specific identifiers are not transmitted
  • Good Tracking has no direct relationship with Google or Alphabet in connection with Google AI Overview results

4. Legal Basis for Processing

We process personal data on the following legal bases under GDPR:

  • Contractual necessity – to provide and operate the Service
  • Legitimate interests – to maintain, improve, and develop the Service, including AI-based analytics
  • Consent – where required by law, such as for non-essential cookies and marketing technologies

Our legitimate interests are limited to business-related analytics and do not involve the processing of sensitive personal data.

5. Data Retention

We retain data for as long as necessary to provide the Service and its features, including access to historical statistics and analytics.

  • If a customer deletes a project, all data associated with that project is permanently deleted when the current billing period ends.
  • If a subscription is canceled or terminated (for example due to failed payment), the project is disabled and data is retained for a 90-day grace period. After this period, all data associated with the project is permanently deleted, unless retention is required by law.

6. International Data Transfers

Some of our service providers, including AI providers, may process data outside the EU/EEA, including in the United States. Where such transfers occur, we rely on appropriate safeguards such as standard contractual clauses to protect the data.

7. Cookies and Analytics

Cookie usage is managed through a consent solution provided by Enzuzo, allowing users to opt in or opt out of non-essential cookies.

Detailed information about cookies is available on our Cookies page.

8. Sub-processors

We use the following sub-processors to provide the Service:

  • Vercel – application hosting (EU)
  • Fortrabbit – CMS backend hosting (EU)
  • Supabase – database and authentication services (EU)
  • OpenAI – AI processing and analysis (global)
  • SerpAPI – search results retrieval (global)
  • Google – authentication and analytics services (global)
  • Plausible Analytics – privacy-focused analytics (EU)
  • Enzuzo – cookie consent management
  • Meta – marketing and advertising services (subject to consent)

This list may be updated as the Service evolves.

9. Your Rights

Where applicable under GDPR, you have the right to request access to, correction of, or deletion of personal data, as well as to object to or restrict certain processing activities.

Requests can be made by contacting us at hello@goodtracking.ai.

Delivered by Good Morning