The short version: we collect only what we need to build and run your website, and we never sell your data. Not to advertisers, not to data brokers, not to anyone, ever.
What we collect
Account info — your name, email, and a password (stored by our authentication provider; we never see the password itself).
Restaurant info — everything you give us to build the site: menus, prices, photos, logo, hours, address, phone, social links.
Support & chat messages — what you write in your portal's Help chat, including photos you attach.
Usage & logs — basic technical logs and, per restaurant site, aggregate traffic counts (page views). We don't run advertising trackers.
Cookies & local storage — a session cookie to keep you signed in and a local preference for things like light/dark mode. No third-party ad cookies.
How we use it
To build, host, and update your website — including processing your menus, photos, and messages with AI services.
To run your portal: previews, edit history, the Help chat, and support.
To bill you (when card billing arrives, payment details go directly to our payment processor — we never store card numbers).
To keep the service safe: abuse prevention, debugging, per-account usage accounting.
To email you about your own account and site. No spam, no marketing lists sold or shared.
Who we share it with
Only the service providers that make HellaGood run — hosting and infrastructure (e.g., Railway, Cloudflare), database (e.g., Supabase), AI processing (e.g., Anthropic), and payment processing when it launches (e.g., Stripe). Each receives only what it needs to do its job. We may also disclose information if the law genuinely requires it, or in connection with a sale of the business (your data stays under this policy's promises).
We do not sell or rent personal information, and we don't share it for cross-context behavioral advertising.
Your restaurant's visitors
Websites we host for restaurants show the business information the restaurant provides. We keep aggregate visit counts per site and standard server logs. We don't build profiles of diners, and restaurant sites carry no advertising trackers.
Keeping and deleting data
Your data lives as long as your account does.
Deleting your site from the portal permanently removes the site, its photos, and its history.
Want your whole account gone? Email hello@hellagood.food and we'll delete it — usually within 30 days.
After cancellation, your content is kept 30 days so you can export it, then deleted.
Your rights (California and everywhere)
You can ask us what personal information we have about you, ask us to correct it, ask us to delete it, or get a copy of your content and data — just email us. We'll never treat you differently for exercising these rights. California residents: since we don't sell or share personal information for advertising, there's nothing to opt out of — but the request rights above are yours under the CCPA regardless.
A few more things
Do Not Track: we don't track you across other sites, so there's nothing for a DNT signal to turn off.
Kids: HellaGood is for businesses; it isn't directed at children under 13 and we don't knowingly collect their information.
Security: data is encrypted in transit, access is limited, and customer data never lands in our public code. No system is perfect — if a breach affects you, we'll tell you promptly.
Changes: if this policy materially changes, we'll notify you by email or in your portal before it takes effect.