Privacy Policy

1. Introduction

Good Samaritan Software LLC ("Company," "we," "us," or "our") operates the AppConnect service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Password (stored securely hashed)

2.2 Payment Information

Payment processing is handled by Stripe. We do not store your credit card numbers. Stripe may collect and store payment information according to their privacy policy.

2.3 FreshBooks Data

When you connect your FreshBooks account, we store:

• OAuth access tokens (encrypted)
• OAuth refresh tokens (encrypted)
• FreshBooks account ID
• FreshBooks business ID

Important: We do NOT store your FreshBooks data (invoices, clients, expenses, etc.). We only store the authentication tokens necessary to access your FreshBooks account on your behalf.

2.4 CRM Data

When you connect a CRM (for example, Less Annoying CRM), we store:

• The connection credentials for that CRM (encrypted)

Important: We do NOT store your CRM data (contacts, leads, pipeline records, notes, etc.). When your AI assistant makes a request, AppConnect accesses your CRM on your behalf to fulfill that request and returns the result to you in real time only — we retain only the encrypted credentials necessary to reach your CRM account, not the contents of the data itself (see Section 2.6).

2.5 Usage Data

We automatically collect:

• IP address
• Browser type and version
• Pages visited and time spent
• API usage metadata — which tool was called, by which account, and whether it succeeded (never the contents of the request or response; see Section 2.6)

2.6 Tool Request & Response Data

When your AI assistant calls a tool through AppConnect (for example, to look up an invoice or a contact), your request and the data returned by the connected app pass through our service in real time only.

Important: We do NOT store, log, or retain the contents of these tool requests or responses — including invoice details, client and contact information, financial figures, notes, or any other data from the apps you connect. We retain only the encrypted credentials needed to reach your account on your behalf and the usage metadata described in Section 2.5.

3. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Process your subscription payments
• Authenticate requests to FreshBooks on your behalf
• Send you important service updates
• Improve our Service
• Comply with legal obligations

4. Data Security

We implement security measures including:

• AES-256-GCM encryption for OAuth tokens at rest
• HTTPS/TLS for all data in transit
• Row-level security in our database
• Regular security audits

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Sharing

We may share your information with:

• Stripe: For payment processing
• Supabase: For database hosting and authentication
• Vercel: For application hosting and privacy-friendly, aggregated traffic analytics
• Resend: For sending service and billing emails — receives your email address and name, and no data from the apps you connect
• Cloudflare: For bot and abuse protection on sign-up and sign-in — receives your IP address and browser signals

We do not sell your personal information to third parties.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account deletion, we will delete your data within 30 days, except where retention is required by law.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your data
• Disconnect your FreshBooks account at any time

8. Third-Party Services

Our Service connects to the third-party applications you choose to link, including FreshBooks and Less Annoying CRM. Your use of each of those applications is governed by that provider's own privacy policy and terms of service, and we are not responsible for their privacy practices. Disconnecting an application at any time stops App Connect from accessing it.

9. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect information from children under 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Good Samaritan Software LLC
Email: support@goodsamsoftware.com