Your data is yours
Goud Work holds the boring bits of your work: your customers, quotes, invoices and your business page. This page says, in plain words, how we look after them. The legal version is our privacy policy.
It belongs to you
Everything you put in is yours. We keep it to do the job you signed up for, and for nothing else. You can take all of it away at any time, on every plan, and you can delete it.
A database of your own
Most online services keep everybody's data in one big pile, with a label on each row saying whose it is. We don't. When you join, your account gets a database of its own, apart from everyone else's.
The people you let in, like your accountant, work inside yours. No other account can reach it. And when you delete your account, that database goes whole.
Locked with its own key
Inside your database every record is encrypted, which means scrambled so it can only be read with a key. We use AES-256, the same kind banks use. Your account has its own key, and nobody else's key opens it.
Your key is itself locked by a master key. The master key is never kept in the database or in its backups. So if someone got hold of the database, or of a backup file, all they would find is noise.
- Even your email address is kept locked. To find your account when you sign in we keep a fingerprint of it, made one way, that cannot be turned back into the address.
- Your logo and the photos you add are locked the same way before they go to our picture store.
- Everything between your phone and us travels over HTTPS, so nobody on the way can read it.
What the lock does not do
We would rather tell you this than have you find it out. The lock is not "end to end". Our server has to open your data to show you your invoices, draw the PDF and send reminders, so while it runs it holds the master key.
That means the lock protects you from a stolen database or backup. It does not protect you from somebody who takes over the running server itself. So we guard the server, and we make you a promise about ourselves:
Nobody at Goud Work opens your data. Our support sees only what is outside the lock: your email, your plan, a few dates, and how many companies, customers and invoices you have. If you ever need us to look at something inside, to fix a problem say, we ask you first and look only at what you agree to.
What is public, because you made it so
- Your business page. Once you publish it, anyone can see it and its pictures. Hide it and they come down.
- The links you send customers. Anyone who has the link to an invoice or quote can open it, so send it only to them. Each link is long and random, so nobody can guess one.
- Your invite link. It carries your page's name, or a short code if you have no page, and nothing else. Whoever joins with it and you each see only counts and coupons, never the other's email or anything in the other's account.
Our promises
- We never sell your data. Not to advertisers, not to anyone. We don't rent it out or swap it either.
- No ads and no trackers. No Google Analytics, no Facebook pixel. We count our own visits as sums (which page, where from, which country, phone or computer) and nothing about who you are. The only cookies are the ones that keep you signed in and keep forms safe, so there is no cookie banner to click.
- Not used to train AI. Your data never goes into training anybody's AI. When you press one of Claude's buttons (a logo, your page's words, sorting photos, a sentence into invoice lines), only what that one job needs goes to Anthropic, which makes Claude, and it may not train on it either.
- Nobody looks without your leave. Our support stays outside the lock unless you ask us in, and only for as long as the problem needs.
Take it with you
In Account, Your data, press Download everything. You get one file with every company, customer, quote, invoice and logo. It is free, on every plan, as often as you like.
When you leave
Press Delete my account in the same place. Your account is shut at once: nobody can get in, your page and customer links stop opening, and no more reminders go. You get an email with the date.
30 days later we delete it for good: the database, every picture, and the key that unlocks them. Until then, if you change your mind, just sign in again and it all comes back. Our backups are kept for 14 days and then written over, so 14 days after that day there is no copy of it anywhere.
If you run a business, the law may ask you to keep your invoices for some years. Download everything before you go.
Where it lives
On our own server in London, run by IONOS. Your locked pictures sit in Cloudflare's picture store, and the emails we send for you (sign-in codes, invoices, reminders) go out through Resend, from its servers in Ireland. The privacy policy lists everyone who touches your data, and why.
Your customers' details
The people on your invoices are your customers, and their details are yours to look after. We only use them to do what you ask: make the invoice, send it, remind them. The terms we keep to are in the privacy policy, under For businesses.
Questions
Write to privacy@goud.work. A person reads it.