Privacy Policy
Effective August 22, 2026
The Good CFO (“TGCFO,” “we,” “us,” or “our”) operates the website at thegoodcfo.com (the “Site”) and The Good CFO Hub (the “Service”), a software platform that provides financial intelligence and reporting tools to TGCFO clients. This Privacy Policy explains what information we collect across the Site and the Service, how we use it, and the choices you have. By using the Site or the Service, you agree to the practices described here.
1. Information we collect
We collect the following categories of information:
- Information you provide. When you contact us, request a conversation, or apply to the CFO Collective through forms on our Site, we collect the details you submit — such as your name, email address, company, role, and message.
- Account information. Name, email address, and authentication credentials when you sign in to the Hub.
- Client financial data. Information from your connected accounting and operational systems (for example, QuickBooks Online), or files you upload — including invoices, vendor records, transactions, and balances. We collect only the data needed to power the tools you use.
- Usage and diagnostic data. Standard server logs (IP address, browser, timestamps), pages viewed, feature interaction events, and error reports — collected across the Site and the Service to operate and improve them.
2. How we use information
We use the information above to:
- respond to your inquiries, schedule conversations, and follow up about our services;
- provide the Service — render dashboards, reports, and analyses for you;
- authenticate users and protect your account;
- operate, maintain, troubleshoot, and improve the Site and the Service;
- communicate with you about your account, security incidents, and service updates;
- comply with legal obligations.
We do not use your client financial data to train machine-learning models, sell to third parties, or for advertising.
3. How we share information
We share information only with the service providers we use to run the Site and the Hub:
- Forms. Inquiry and application forms submitted through our Site are processed by our own systems rather than a third-party form provider. Two services support that: Cloudflare runs a spam check (Turnstile) when you submit, and Resend delivers the resulting notification email to us.
- Cloud hosting. Vercel and Supabase host the website, application, and database.
- Authentication. Clerk manages user sign-in and identity for the Hub.
- Source integrations. Intuit (QuickBooks Online), and similar accounting/operational integrations you authorize, provide your data to the Service through their APIs.
- AI-assisted profile enrichment. When a team member uses our optional “Fill with AI” feature to look up a client’s public company details, we send only that company’s name and website to Anthropic (the Claude API) to research and suggest profile information. We do not send financial data or transactions for this purpose.
These providers process information on our behalf, under written agreements requiring confidentiality and appropriate security safeguards. We do not sell or rent your information, and we will not share it with any other party except (a) with your consent, (b) to comply with valid legal process, or (c) in connection with a corporate transaction (with notice to you).
4. How we protect information
We use industry-standard administrative, technical, and physical safeguards to protect information, including encryption in transit (HTTPS/TLS) and at rest, role-based access controls, and credential vaults for third-party access tokens. No system is perfectly secure, but we work to ensure your data is handled appropriately.
5. Data retention
We retain information you submit through the Site for as long as needed to respond to you and for our legitimate business records. We retain Customer Data in the Hub for as long as your account is active and as needed to provide the Service. On request, or upon termination of our engagement with you, we will delete or return your data within a reasonable period, except where retention is required by law.
6. Your rights
You may request that we access, correct, export, or delete the information we hold about you. Some rights vary by location (for example, residents of California or the European Union may have additional rights under CCPA or GDPR). To exercise any right, email support@thegoodcfo.com. We’ll respond within a reasonable period.
7. Cookies and similar technology
On our Site, we use Google Analytics to understand which pages people find useful. It sets cookies in your browser so that repeat visits can be distinguished from new ones. We also use Vercel Web Analytics, which counts page views without setting cookies and without tracking you across other sites. When you submit a form, Cloudflare’s spam check may set a short-lived cookie for that purpose alone.
We run no advertising, retargeting, or cross-site tracking cookies on the Site, and we do not sell or share what analytics collects.
In the Hub, cookies set by Clerk keep you signed in, and we measure product usage to operate and improve the Service. You can control cookies through your browser. Disabling them will not stop you reading the Site, but it may prevent parts of the Hub from working.
8. Children
The Site and the Service are intended for business use by adults. They are not directed at children under 18, and we do not knowingly collect personal information from anyone under 18.
9. International users
The Site and the Service are operated from and store data in the United States. If you access them from another country, you acknowledge that your information will be transferred to and processed in the U.S.
10. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated policy at this URL and revise the effective date. Material changes will be communicated by email or in-app notice when appropriate.
11. Contact
Questions, concerns, or requests can be sent to support@thegoodcfo.com.
