Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Information you provide. When you use the contact form or automated assistant, we collect your name and email address, along with any company name, message, business context, goals, and other information you choose to provide.
• Website usage and device information. Google Analytics collects information such as pages viewed, session activity, traffic source, approximate geographic location, browser and device information, and a client identifier stored in a first-party cookie.
• Security and technical information. Our hosting and security providers may process IP addresses, request details, timestamps, and browser or device signals to deliver the website, maintain security, and prevent spam or abuse.
• Client financial data. When a client authorizes the QuickBooks Online integration under an existing engagement, we access the client’s chart of accounts, transactions, invoices and receivables, and standard financial reports. Our integration is read-only. BadlyGood does not write to, modify, or delete anything in the client’s QuickBooks company file.

We do not directly collect payment-card or bank-account information, purchase or order records, precise geolocation, or government-issued identification through this website.

2. How We Collect Information

We collect information:

• Directly from you when you use the contact form or automated assistant.
• Automatically through Google Analytics, cookies, server logs, and similar website technologies.
• Through service providers that help us host, secure, measure, and operate the website, operate the automated assistant, or deliver inquiry messages.
• From a client’s QuickBooks Online company file after an authorized user connects BadlyGood through Intuit’s OAuth 2.0 authorization process. We use the QuickBooks accounting scope only for the read-only reporting activities described below.

3. How We Use Information

We use information collected through the website to:

• Respond to inquiries and communicate with you.
• Generate automated discovery questions and summarize an inquiry for follow-up.
• Provide, maintain, and improve the website and our services.
• Understand website usage and performance.
• Produce reporting and dashboards solely for the client whose QuickBooks company file supplied the data and solely under an existing client engagement.
• Detect, prevent, and address spam, fraud, security, and technical issues.
• Comply with legal obligations and protect our rights.

We do not use information collected through this website to send marketing messages unless you separately ask or agree to receive them.

4. How We Disclose Information

We do not sell personal information, and we do not use or intentionally disclose it for cross-context behavioral advertising. We may disclose information to:

• Vercel, which hosts and delivers the website.
• Google Analytics, which helps us understand website traffic and usage.
• Cloudflare Turnstile, which helps protect the contact form and automated assistant from spam and automated abuse.
• OpenAI, which processes the business-context messages you send to the automated assistant to generate brief responses and an inquiry summary.
• Resend, which delivers inquiries to BadlyGood by email and sends a short receipt confirmation to the email address you provide.
• Professional advisers, authorities, or other parties when reasonably necessary to comply with law, protect rights and safety, or complete a business reorganization, merger, sale, or transfer.

We use these providers for the purposes described above. Their handling of information is governed by their applicable terms and privacy notices.

We do not sell or rent client financial data or share it with third parties for their own purposes. Intuit and Google are the only external service providers involved in the QuickBooks reporting workflow described below. Client financial data is not used for advertising or model training.

5. QuickBooks Online and Client Reporting Data

What We Access and Why

With the client’s authorization, BadlyGood connects to the client’s QuickBooks Online company file through the Intuit API using the accounting scope. We access the chart of accounts, transactions, invoices and receivables, and standard financial reports. We use that data only to prepare reporting and dashboards for that client under an existing engagement. The integration is read-only and does not write to, modify, or delete data in QuickBooks Online.

Storage and Report Access

QuickBooks data is pulled on a schedule into Google Workspace, including Google Drive and Google Sheets, under BadlyGood’s Workspace tenant. It is visualized in Looker Studio reports that may be embedded in the client portal. These systems and the client financial data used for this workflow are hosted in the United States.

Access is limited to authorized BadlyGood personnel and the client representatives selected for the engagement. Each report is shared using Google account permissions; a client can view only a report that BadlyGood has shared with that client’s Google identity.

Security

We use OAuth 2.0 authorization, encrypted transmission, secure storage for credentials and access tokens, and access controls designed to limit client financial data to authorized personnel. Credentials and tokens are not shared with clients or other third parties.

Disconnecting QuickBooks Online

A client may revoke access at any time from the Apps or Integrations area in QuickBooks Online. In the current QuickBooks Online navigation, go to Integrations, select Manage integrations, find BadlyGood, and choose Disconnect. A client may also email hello@badlygoodinc.com for help disconnecting or to request deletion.

Disconnecting stops future scheduled pulls and BadlyGood’s ability to retrieve new data from that QuickBooks company file. It does not automatically delete data already pulled into BadlyGood’s Google Workspace or an existing Looker Studio report; that data is handled under the retention and deletion terms below.

Independent Service

BadlyGood is an independent firm and is not affiliated with, endorsed by, or acting as an agent of Intuit Inc.

6. Cookies and Analytics

Google Analytics uses cookies, including the _ga cookie, to distinguish visitors and sessions and to produce aggregated reports about website use. You can restrict or delete cookies through your browser settings. You may also use the Google Analytics Opt-out Browser Add-on.

Cloudflare Turnstile runs when you submit the contact form or ask the automated assistant to make an introduction. It uses browser and device signals to determine whether a submission is likely to come from a person rather than an automated system. Disabling necessary browser features may prevent these features from working.

7. California Privacy Disclosures

California residents may have rights under applicable privacy laws to request access to, correction of, or deletion of certain personal information. You may also have the right to receive information about how personal information is collected, used, and disclosed and to exercise applicable rights without discriminatory treatment.

BadlyGood does not sell personal information or use it for cross-context behavioral advertising. To submit a privacy request, email hello@badlygoodinc.com or use our contact form and write “Privacy request” in the message. We may need to verify your identity before completing a request, and legal exceptions may apply.

Do Not Track Disclosure

Our website does not currently respond to browser “Do Not Track” signals because there is not a consistent industry standard for responding to them. Third-party services described in this policy may collect information about activity on this website in accordance with their own privacy policies.

8. Data Retention and Deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including responding to inquiries, maintaining appropriate business records, protecting the website, resolving disputes, and meeting legal obligations. Our service providers may retain information according to their own retention policies.

Client financial data is retained while the applicable client engagement is active. Unless a longer period is required by law or a signed engagement letter, we delete that data from active Google Workspace and Looker Studio systems within 90 days after the engagement ends. A client may request earlier deletion at any time; after we verify the request, we will delete the data from active systems within 30 days unless we must retain it to comply with law or resolve a dispute. Residual copies may remain in restricted backups for up to an additional 90 days before being overwritten in the ordinary backup cycle.

Revoking the QuickBooks connection stops new data pulls but does not by itself end an engagement or delete information already pulled. To request deletion of previously pulled data, email hello@badlygoodinc.com.

9. Information Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Children’s Privacy

This website is intended for a business audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted personal information through the website, please contact us so we can address it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post changes on this page and revise the effective date above. Material changes may also be communicated through an additional notice on the website when appropriate.

12. Contact Us

For privacy questions, access requests, correction requests, or deletion requests, contact the BadlyGood Privacy Contact at hello@badlygoodinc.com. You may also use the BadlyGood contact form and write “Privacy request” in the message.

BadlyGood Inc.
Los Angeles, California