Privacy

Privacy notice

Draft — requires legal review before production use. This describes how the Goodrun cloud service is designed to handle data. It is not yet a final privacy notice. The operator’s legal identity, contact details, legal bases, retention periods and processor list will be confirmed before the service accepts customer data in production.

What Goodrun is

Goodrun is a hosted cloud service for game studios’ revenue, payout and cash planning. Data you add to an organization is processed and stored on servers operated by Goodrun and its infrastructure providers.

Data we process

• Account data: your name, email address and organization memberships, provided through our sign-in provider. We do not store your password.
• Organization financial data: games, storefront reports you import, payouts, receipts, costs, forecasts and plans. Each organization’s financial data is kept in its own dedicated database.
• Billing data: subscription status, plan and game allocation. Card and payment details are handled by our payment provider and are not stored by Goodrun.
• Operational data: request metadata such as IP addresses and timestamps, used for security, abuse prevention and diagnostics.

Storefront reports can contain more than finance needs. Goodrun is designed to keep financial totals and not buyer names or email addresses.

How we use it

To provide the service you sign up for: calculating revenue, payout estimates and cash plans, enforcing your organization’s permissions, billing, and keeping the service secure. We do not sell your data and do not send raw financial or personal data to advertising or analytics tools.

Your data is not used for cross-customer benchmarks or model training without a separate, explicit agreement.

AI features

AI analysis is optional and off by default. If an organization owner enables it, calculated figures and evidence for the games in scope are sent to the AI provider shown in AI & Data Controls (currently Anthropic) to produce explanations. Owners can also supply their own provider key. Nothing is sent while AI is off.

Service providers

The service is being built on these providers. The final list, their roles and any international transfers will be confirmed here before launch:

• Cloudflare — website and application hosting, request handling and file storage.
• Clerk — sign-in and organization membership.
• Turso — organization databases.
• Creem — subscription checkout, payments and invoices, under its own privacy notice.

Your choices

You can export your organization’s data at any time. Cancelling a subscription does not delete your data; deletion is a separate request. Access, correction and deletion requests will be handled through a contact channel that will be published here.