Privacy Policy

1. Information we collect

We collect information you give us directly and information generated by your use of our service.

Account data — name, email address, and hashed password when you register.
Business listing data — business name, address, contact details, description, photos, and hours that you submit.
Review data — star ratings, review text, and your account identity when you leave a review.
Usage data — pages visited, search queries, and technical details such as your IP address and browser type. For listing statistics we keep only a one-way hash of your IP address, never the address itself.
Messages — what you write when you contact us or another business through GoNeed, and the email address you give. Messages sent through our contact form, and our security and abuse-prevention records, may include your IP address; we keep them only as long as we need them.

2. How we use your information

To provide and improve the GoNeed directory service.
To display your listing and reviews to other users.
To authenticate you and keep your account secure.
To send transactional emails — account confirmation, listing status updates. We do not send marketing email without your explicit opt-in.
To detect and prevent spam, fraud, or abuse.
To comply with legal obligations.

3. Sharing your information

We do not sell your personal data. We may share it in the following limited circumstances:

Public content — business listings and reviews you submit are publicly visible on the site.
Service providers — we use hosting and infrastructure providers who process data on our behalf, and a payment service to take card payments for paid plans (when you pay by card, Stripe receives your card details directly; GoNeed never sees or stores your card number). If you pay by bank transfer we keep a record of the payment and the reference you used.
Other companies your browser contacts — to show a page your browser also loads maps from OpenStreetMap, typefaces from Google Fonts, code libraries from Cloudflare cdnjs and jsDelivr, and some images from Unsplash and Flagcdn. Each can see your IP address and browser details when it does. See our cookie policy.
Legal requirements — we may disclose data when required by law, court order, or to protect the rights of GoNeed or our users.

4. Cookies

We use a single session cookie (GN_SESS) to keep you logged in. It is strictly necessary for the service to work. It expires when you close your browser or log out, or after 30 days if you choose “Keep me signed in”. We do not use advertising, analytics or third-party tracking cookies. The cookie policy lists everything in detail.

5. Your rights

Depending on your location, you may have rights under applicable data-protection law including:

Access to the personal data we hold about you.
Correction of inaccurate data.
Deletion of your account and associated personal data.
Objection to certain processing.

You can download your data or delete your account yourself from your profile page. For anything else, contact us. We will respond within 30 days.

6. Data retention

We keep your account data for as long as your account is open. When you delete your account we remove your name, email address and other personal details straight away. Reviews you wrote stay on the site, credited to a former member. We keep records we are required to keep by law, such as invoices for paid plans, for as long as the law requires.

7. Security

Passwords are stored as bcrypt hashes — we never store them in plain text. All connections to GoNeed are served over HTTPS. We apply security updates promptly and follow industry-standard practices for access control and vulnerability management.

8. Contact us

Questions about this policy or requests relating to your personal data: send us a message.