Goodie procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “ 2. US DATA PROTECTION COMPLIANCE” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ (c) Module 3 applies to all Customers regardless of location.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ For Customers subject to Module 2 of the DPA, and where required by Article 27 GDPR/UK GDPR, Goodie has appointed as its EU and/or UK representative Data Privacy Services (info@dataprivacyservices.co.uk) for data-protection inquiries only.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Goodie will provide reasonable assistance, at Customer’s request and expense, to help Customer respond to data subject requests and comply with applicable data protection obligations, as set forth in the applicable module of the DPA.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ (d) Clause 13 (Supervision): The supervisory authority of the EU Member State in which Customer is established shall act as competent supervisory authority;” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ (a) Module 1 applies to Customers located in the United States or processing Personal Data of US residents;” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ To the extent Goodie processes Personal Data on behalf of Customer in providing the Services (“Customer Personal Data”), Customer is the controller (or business) and Goodie is the processor (or service provider). Goodie is an independent controller for Personal Data it processes for account administration, billing, security monitoring, service improvement, compliance, and telemetry, as described in the Privacy Policy. For Customers located in, or processing Personal Data of individuals located in, the United States, European Economic Area, United Kingdom, or Switzerland, the parties agree to Goodie’s modular Data Processing Addendum (“DPA”) attached as Exhibit A which is incorporated into and forms part of this Agreement. The DPA consists of three modules: (i) Module 1 applies to Customers located in the United States or processing Personal Data of US residents; (ii) Module 2 applies to Customers located in, or processing Personal Data of individuals located in, the European Economic Area, United Kingdom, or Switzerland; and (iii) Module 3 applies to all Customers. Capitalized terms used in this Section 13 and not otherwise defined in the Agreement have the meanings set forth in the DPA.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 7.1 Goodie implements and maintains appropriate technical and organizational measures to protect Personal Data against unauthorized access, disclosure, alteration, or destruction, consistent with applicable law and industry standards. Where required under Module 2 (EU/UK Data Protection Provisions), such measures shall meet the standards described in Annex II. 7.2 Such measures include:” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ (a) Clause 7 (Docking clause): Other entities may accede to these SCCs with agreement of all parties;” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ For Customers subject to Module 2 of the DPA, and where required by Article 27 GDPR/UK GDPR, Goodie has appointed as its EU and/or UK representative Data Privacy Services (info@dataprivacyservices.co.uk) for data-protection inquiries only.” | Captured 2026-07-20Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 2.2 State Privacy Law Compliance. Where applicable under Virginia CDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, or other similar state privacy laws, Goodie agrees to:” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Data Subjects: The Personal Data concerns the following categories of data subjects: – Customer’s end users and customers – Customer’s employees, contractors, and business contacts – Other individuals whose Personal Data is provided by Customer through use of the Services Categories of Data: The Personal Data concerns the following categories of data: – Contact information (names, email addresses, phone numbers) – Account credentials and authentication information – Usage data and analytics – Business and professional information – Content and materials uploaded to or processed through the Services – Technical data (IP addresses, device information, log data) Special Categories of Personal Data: None, unless Customer provides such data contrary to the terms of the Agreement. Processing Operations: The Personal Data will be processed for the following activities: – Hosting and storage of Customer Data – Processing and analysis to provide the Services – Display and transmission of results and outputs – Technical support and maintenance – Security monitoring and incident response Purpose of Processing: Provision of AI-powered search optimization and analytics Services as described in the Agreement. Duration of Processing: For the term of the Agreement and any applicable retention period, or until Customer requests deletion. ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Customer Controls: Admin console, API, and security settings enabling Customer configuration of access, retention, and integrations.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ (c) The parties complete the SCC clauses as specified in Annex I and Annex II.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 2.1 CCPA/CPRA Service Provider Obligations. Where Goodie processes Personal Information of California residents on Customer’s behalf, Goodie agrees to:” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 4.3 UK International Data Transfer Addendum. Where Personal Data is transferred from the UK, the UK International Data Transfer Addendum to the EU Commission Standard Contractual Clauses applies and is incorporated by reference. 4.4 Swiss Addendum. Where Personal Data is transferred from Switzerland, the parties agree to the modifications necessary to ensure compliance with Swiss data protection law. ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Goodie will implement appropriate technical and organizational measures to protect Customer Personal Data as described in the DPA. If Goodie becomes aware of a Personal Data breach affecting Customer Personal Data, Goodie will notify Customer in accordance with the applicable module of the DPA and provide information and cooperation reasonably required for Customer to meet its incident-response obligations.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ (e) Clause 17 (Governing law): These SCCs shall be governed by the law of the EU Member State in which Customer is established;” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 6. DETAILS OF PROCESSING” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 3.6 Data Subject Rights. Taking into account the nature of processing, Goodie assists Customer by implementing appropriate technical and organizational measures, insofar as possible, for fulfillment of Customer’s obligation to respond to requests for exercising data subject rights. 3.7 Breach Notification. Goodie notifies Customer without undue delay after becoming aware of a Personal Data breach affecting Personal Data. 3.8 Data Protection Impact Assessment. Goodie assists Customer in ensuring compliance with Articles 35 and 36 of GDPR where necessary, taking into account the nature of processing and information available to Goodie. 3.9 Deletion and Return. At the choice of Customer, Goodie deletes or returns all Personal Data to Customer after the end of provision of services relating to processing, and deletes existing copies unless European Union or Member State law requires storage. 3.10 Audit Rights. Goodie makes available to Customer all information necessary to demonstrate compliance with Article 28 GDPR and allows for and contributes to audits, including inspections, conducted by Customer or another auditor mandated by Customer, subject to confidentiality, security, and scheduling constraints. ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ (a) Act as a processor/service provider and process Personal Data only upon Customer’s documented instructions;” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Segregation & Isolation: Logical tenant separation; environment segregation (prod/test).” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ (e) Make available to Customer information necessary to demonstrate compliance with applicable obligations.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | medium | “ 6.1 The details of processing are set out in Annex I to this DPA. 6.2 Independent Controller Activities. Goodie acts as an independent controller for processing Personal Data for account administration, billing, security monitoring, service improvement, compliance obligations, and generation of Telemetry as described in the Privacy Policy. ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ (b) Module Three (Processor to Processor) applies where applicable for onward transfers to subprocessors;” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ This Section 13.4 applies only to Customers subject to Module 2 of the DPA. Where Customer Personal Data is transferred from the EEA, Switzerland, or the UK to a country not deemed adequate, the transfer will be governed by the mechanisms set forth in Module 2, Section 4 of the DPA, including: (i) the EU Standard Contractual Clauses as completed in the DPA; and (ii) the UK International Data Transfer Addendum, as applicable, together with any supplementary measures required by law.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 1.1 Module Applicability. This DPA consists of three modules:” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ This Data Processing Addendum (“DPA”) forms part of the Services Agreement between Goodie AI Inc. (“Goodie”) and Customer (“Agreement”). This DPA governs the processing of Customer Personal Data (“Personal Data”) in connection with the Services and supplements the terms of the Agreement. Capitalized terms not otherwise defined herein shall have the meanings given them in the Agreement. ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ (c) Assist Customer in responding to data subject/consumer requests as reasonably requested;” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ For purposes of this DPA: “Controller” means the natural or legal person which determines the purposes and means of processing Personal Data. “Data Subject” means an identified or identifiable natural person to whom Personal Data relates. “Personal Data” means any information relating to an identified or identifiable natural person, including Personal Information as defined under applicable US privacy laws. “Processing” means any operation performed on Personal Data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. “Processor” means a natural or legal person which processes Personal Data on behalf of the Controller. “Security Incident” means any confirmed accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Data. ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Data Importer: Goodie AI Inc. (acting as Processor)” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ (a) Module Two (Controller to Processor) applies where Customer is a controller and Goodie is a processor;” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 3.1. Controller Obligations and Rights Customer, as Controller, shall: (a) ensure it has lawful basis for processing and transfers; (b) provide clear processing instructions to Goodie; (c) implement appropriate technical and organizational measures; (d) conduct data protection impact assessments where required; (e) respond to data subject requests within required timeframes; and (f) notify supervisory authorities of Personal Data breaches where required. Customer, as controller, has the right to: (a) receive information about Goodie’s processing activities; (b) audit Goodie’s compliance with this DPA; and (c) object to new subprocessors and terminate if objection is not reasonably accommodated. 3.2 Processing Instructions. Goodie will process Personal Data only on documented instructions from Customer, including with regard to transfers of Personal Data to third countries or international organizations, unless required to do so by European Union or Member State law. 3.3 Confidentiality. Goodie ensures that persons authorized to process Personal Data have committed themselves to confidentiality or are under appropriate statutory obligation of confidentiality. 3.4 Security Measures. Goodie implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, as detailed in Annex II. 3.5 Subprocessors. Goodie may engage other processors (subprocessors) with Customer’s general written authorization, subject to:” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ (c) Clause 11 (Redress): Data subjects may lodge complaints with supervisory authorities and have access to effective judicial remedies;” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 4.1 EU Standard Contractual Clauses. Where Personal Data is transferred from the EEA to countries without an adequacy decision, the EU Standard Contractual Clauses (Decision (EU) 2021/914) are incorporated herein by reference and apply as follows:” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ Vendor Management: Subprocessor risk assessments, security addenda, least-privilege integrations.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ (c) Where Goodie engages another processor, the same data protection obligations as set out in this DPA being imposed on that other processor by way of contract.” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 7. TECHNICAL AND ORGANIZATIONAL MEASURES” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ 12.1 This DPA may only be amended by written agreement signed by authorized representatives of both parties. 12.2 Goodie may update this DPA to reflect changes in applicable law or regulatory guidance, provided such updates do not materially reduce Customer’s data protection rights. ” | Captured 2026-06-08Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ (b) Module 2 applies to Customers located in, or processing Personal Data of individuals located in, the European Economic Area, United Kingdom, or Switzerland;” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ Data Minimization & Retention: Configurable retention where feasible; deletion on termination per Section 3.9 herein.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Business Continuity & DR: Backups with tested restores, availability zones, RTO/RPO targets appropriate to plan tier.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ (d) Upon termination, delete Personal Data as directed by Customer, except where retention is required by law;” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ (e) Upon Customer’s request, delete Personal Information in Goodie’s possession, except where retention is required by law;” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ 10.1 This DPA remains in effect for the duration of the Agreement and any processing of Personal Data thereunder. 10.2 Upon termination of the Agreement, Goodie will delete Personal Data as instructed by Customer, except where retention is required by applicable law. ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Either party may terminate the Agreement if the other materially breaches any provision and fails to cure such breach within 30 days of written notice. Company may suspend or terminate this Agreement immediately upon written notice if Customer fails to pay undisputed amounts when due. Upon termination, your access to the Services will be suspended, and Goodie may delete your Customer Data in accordance with our Privacy Policy.” | Captured 2026-07-20Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Delete: Request deletion of personal information (subject to exceptions)” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ (b) Customer having the opportunity to object to such changes within 30 days;” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ (b) Not sell, share, or retain Personal Information outside the business relationship with Customer;” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ (c) Where Goodie engages another processor, the same data protection obligations as set out in this DPA being imposed on that other processor by way of contract.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ (b) Goodie provides prior notice of any new subprocessors via the above webpage or email;” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ (a) Goodie informing Customer of intended changes concerning addition or replacement of subprocessors via https://www.higoodie.com/subprocessors or email;” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ “Third-Party Information” means any content, data, or information not originating from your Users, but from external, public, or internet-based sources, excluding licensed content from third parties within the scope of “Goodie Materials” (defined below).” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ 8. SUBPROCESSORS” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ (a) Goodie maintains a current list of subprocessors at https://www.higoodie.com/subprocessors;” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ (c) Customer may object to new subprocessors on reasonable data protection grounds within 10 days of notice;” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ (b) Clause 9 (Use of sub-processors): Customer provides general authorization for engagement of subprocessors in accordance with Section 3.4;” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Customer authorizes Goodie to engage subprocessors to process Customer Personal Data as set forth in the DPA. Each Subprocessor is subject to written terms that require data-protection, confidentiality, and security measures as required by applicable law. Goodie maintains a current list of Subprocessors at https://www.higoodie.com/subprocessors and will provide advance notice of any new subprocessors. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ 2.3 Subprocessor Requirements. Goodie may engage subprocessors to process US Personal Data, provided that:” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “Goodie does not guarantee the availability of such integrations or their interoperability with Goodie’s Services. Customer uses Third-Party Platforms at its own risk. For the avoidance of doubt, integrations that allow Customers to import data from their own third-party analytics accounts (such as Google Analytics/GA4) into the Services are distinct from other Third-Party Platforms monitored by the Services (e.g., AI model APIs). In such integrations, Customer remains the controller of the data imported, and Goodie acts as the processor solely to the extent necessary to perform analytics and reporting within the Services. No data is transmitted or shared from the Services back to the Customer’s third-party analytics account.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may share aggregate, de-identified data without restriction.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Goodie’s Services may support the integration of third-party applications, platforms, services, or products not provided by Goodie (e.g., OpenAI, Perplexity, Google Analytics), including through APIs (each a “Third-Party Platform”). Your use of Third-Party Platforms is subject to the applicable third-party agreement and/or those providers’ terms and conditions and not these Terms. Goodie does not control and has no liability for Third-Party Platforms, including their security, functionality, operation, availability, or interoperability with the Goodie Materials or how the Third-Party Platforms or their providers use Customer Data. Goodie is not responsible for any acts or omissions of these Third-Party Platforms. When you elect to integrate Goodie with any Third-Party Platform, you authorize Goodie to access and exchange Customer Data with such Third-Party Platform on your behalf. To the extent an integration with a Third-Party Platform requires that Goodie use Customer’s access credentials for such Third-Party Platform, Customer: (a) agrees to provide such credentials, (b) represents and warrants that Customer has all necessary rights to provide such credentials, and (c) authorizes Goodie to use such credentials on Customer’s behalf in connection with the provision of the Services. Goodie disclaims any liability for unauthorized use, disclosure alteration or destruction of Customer Data resulting from processing by Third-Party Platforms. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ (c) Not combine Personal Information received from Customer with Personal Information received from another source or collected from its own interaction with consumers, except as permitted by the CCPA;” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ AI infrastructure vendors (e.g., OpenAI, Perplexity) only to fulfill requests—not for model training” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ (b) Module Three (Processor to Processor) applies where applicable for onward transfers to subprocessors;” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ (d) All subprocessors are bound by data protection obligations substantially equivalent to those in this DPA.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We use the following categories of sub-processors who may have access to personal information:” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Communication and Collaboration: to process emails and internal communications CRM/marketing tool: to process form submissions and customer data for communications and remarketing” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ AI infrastructure vendors (to fulfill request) Legitimate Interest / Contractual Necessity Cross-Border Transfers: We may transfer data to the U.S. or other countries using Standard Contractual Clauses or similar safeguards. Data Storage Location: Our primary data storage is in the United States (“U.S.”). For EU/UK users, this constitutes a cross-border transfer protected by appropriate safeguards as described above. You may lodge complaints with your national supervisory authority. UK users may contact the ICO at ico.org.uk.” | Captured 2026-07-20Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ 8.1 Goodie maintains a current list of all subprocessors at https://www.higoodie.com/subprocessors. 8.2 Goodie will update this list and provide notice of material changes via the webpage or email notification with reasonable advance notice. 8.3 All subprocessors are contractually bound by data protection obligations substantially equivalent to those set out in this DPA. ” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “Goodie reserves the right to modify, suspend or discontinue a Trial or Private Preview at any time without notice and without liability to you. ” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ For term subscriptions, Goodie will provide notice of renewal and any price changes at least thirty (30) days before the renewal date. Customer may cancel renewal via the account settings or by written notice prior to renewal. Any statutory cooling-off rights for consumers remain unaffected.” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ ### Your use of the Services may be subject to limitations based on your plan tier or usage thresholds, such as the number of tracked products, prompts analyzed, or user seats, as specified in the applicable Order Form.” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ Fees are specified in the applicable Order Form. All fees are due as invoiced through our payment processor (currently, Stripe) and are payable upon receipt of an applicable invoice in U.S. dollars unless otherwise specified. Fees are non-refundable, except as set forth in Section 10.1 (Warranties) or as otherwise expressly provided in this Agreement. Late payments may incur interest at 1.5% per month or the maximum allowed by law, whichever is lower. All fees are exclusive of applicable taxes, which will be billed to you as required by law. All payments made by Customer are non-refundable regardless of actual usage. Goodie reserves the right to increase fees at renewal of the applicable subscription term. Your purchase relies only on the features and functions of the Services that are currently available as a generally available release. Goodie makes no commitment to deliver any future features or functions. The development, release and timing of any features or functions remains in Goodie’s sole discretion.” | Captured 2026-07-20Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ Goodie may provide free trials to the Services (“Trial”) from time to time as agreed by Goodie in writing. Goodie may also provide you with access to products, features, technologies or services that are not yet generally available on a free or paid basis, including, but not limited to, any product, service or feature labeled as “beta,” “preview,” “private release,” or “pre-release,” (each, a “Private Preview”). You must comply with any additional and/or modified terms posted or provided to you to access any Private Preview. Private Previews are not covered by customer support or service level agreements unless otherwise stated. Any products, services or features in Private Preview may be inoperable, incomplete or include functionality never released by Goodie. You should not rely on any products, services or features in Private Preview in any manner and your use is at your own risk. Goodie will have access to all information submitted, transferred or inputted to Goodie as it relates to such Private Preview, and may use such information to improve the user experience related to such Private Preview. Trials and Private Previews are provided “as-is” without any warranties of any kind. By using a Trial or Private Preview, you acknowledge and agree that the products, services and/or features may contain errors, may not operate as intended and your use of such may result in data loss or other damages. Goodie will not be liable for any direct, indirect, incidental, special, consequential or punitive damages arising out of or related to the use of a Trial or Private Preview, and Goodie’s liability for all claims arising from the use of a Trial or Private Preview will not exceed US$100.00. ” | Captured 2026-07-20Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.