Privacy Policy

1. Introduction

Welcome to Goodsluck, a platform dedicated to creating a fair and engaging marketplace powered by community contributions and innovative features. Your privacy and trust are of utmost importance to us. This Privacy Policy explains how we collect, use, and protect your personal information—meaning any data that can be used to identify you directly or indirectly—when you interact with our services. By using Goodsluck, you agree to the practices outlined in this Privacy Policy. If you have any questions or concerns, please contact us using the details provided below.

2. Information We Collect and Store

At Goodsluck, we collect specific information necessary to provide you with a seamless and secure experience. This includes:

• Email Address: Used for account registration, communication, and account management.
• Encrypted Password: Stored securely to protect your account. We never store or access plain-text passwords.
• IP Address: Collected to ensure account security, prevent fraud, and comply with applicable laws.
• Delivery and Departure Addresses: Collected for transaction purposes only; however, Goodsluck does not verify these addresses and bears no responsibility for their accuracy.
• Transaction History: Includes records of sold items, purchases, and contributions for user reference and platform analytics.
• Session Logs and Device Information: We log session activity and device/browser data to monitor platform usage and enhance your experience.
• KYC Data and Financial Information: All identity verification and financial data are managed directly through Stripe, our secure payment processor. Goodsluck does not store or process sensitive billing information or government IDs.
• Payment and Payout History: Includes records of processed payments and payouts, excluding sensitive billing details. All sensitive financial data is securely managed via the Stripe API.

We do not use third-party cookies except those essential for payment processing provided by Stripe. Other cookies used by our platform are served directly from our application and are essential for functionality.

3. How We Use Your Information

The information we collect is used to provide, improve, and secure our platform, ensuring that your experience with Goodsluck is efficient, transparent, and safe. Specifically, we use your information for the following purposes:

• Account Creation and Management: Your email address and encrypted password allow you to create and manage your account securely.
• Transaction Processing: Delivery and departure addresses are used to facilitate the sale and purchase of goods, while transaction and contribution histories help maintain transparency and accuracy.
• Security and Fraud Prevention: IP addresses and session logs are monitored to identify and mitigate fraudulent activities or unauthorized access.
• Communication: Your email is used to send important notifications, updates about your account, and other relevant information.
• Compliance with Legal Obligations: Information like transaction records and KYC data (via Stripe) helps us meet regulatory and legal requirements.
• Platform Improvement: Session logs and usage patterns help us optimize the platform, enhance functionality, and tailor user experiences.

We never sell, rent, or trade your personal information. We only share your data with trusted third-party service providers (such as Stripe) when required to deliver our services. These providers are contractually obligated to handle your data securely and use it only for intended purposes.

4. Data Sharing and Disclosure

Goodsluck is committed to safeguarding your personal information. We only share your data in the following limited circumstances:

• Service Providers: We share necessary information with trusted third-party service providers, such as Stripe, to process payments, verify identity (KYC), and facilitate secure transactions. These providers are contractually obligated to handle your data securely, maintain confidentiality, and comply with applicable laws.
• Legal Compliance: We may disclose your information if required to comply with legal obligations, respond to lawful requests from public authorities, or protect the rights, property, or safety of Goodsluck, our users, or others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity. We will notify you before your data becomes subject to a different privacy policy.
• User Consent: We may share your information with third parties if you provide explicit consent for a specific purpose. You may withdraw your consent at any time, which will not affect the lawfulness of prior processing.

We do not sell your personal information to third parties. All disclosures are made with the utmost respect for your privacy and in line with our mission to provide a transparent and secure platform.

5. User Rights

At Goodsluck, we respect your rights regarding the personal data we collect and store. Depending on your location and applicable laws, you may have the following rights:

• Access: You have the right to request a copy of the personal data we hold about you and understand how it is being processed.
• Correction: If your information is inaccurate or incomplete, you have the right to request corrections or updates.
• Deletion: You may request that we delete your personal information, subject to legal or contractual obligations that require its retention.
• Data Portability: You can request a copy of your personal data in a commonly used and machine-readable format and have it transferred to another service provider, where feasible.
• Restriction of Processing: You have the right to request that we limit the processing of your personal data in certain circumstances.
• Objection to Processing: If we process your data based on legitimate interests or for direct marketing purposes, you may object to such processing.
• Withdraw Consent: If we process your data based on your consent, you can withdraw that consent at any time without affecting the lawfulness of processing before the withdrawal.

To exercise any of these rights, please contact us at support@goodsluck.com. We may need to verify your identity before fulfilling your request to ensure the security of your data.

Please note that some rights may not be applicable in all jurisdictions or may be subject to exceptions under relevant laws. We encourage you to familiarize yourself with the privacy laws applicable in your jurisdiction to fully understand your rights.

If you are a California resident, you have the right to direct us not to sell your personal information. To exercise this right under the California Consumer Privacy Act (CCPA), please visit our Do Not Sell My Personal Information or contact support.

6. Cookie Policy

Goodsluck uses cookies to enhance your user experience, analyze site performance, and provide essential platform functionality. Cookies are small text files stored on your device that help us remember your preferences and activity on our platform. We use cookies in accordance with applicable privacy laws and regulations to ensure transparency and give you control over your data.

We use the following types of cookies:

• Essential Cookies: These are required for the proper functioning of our website, such as maintaining your session and ensuring secure login.
• Performance Cookies: These help us monitor and improve the performance of our platform by collecting anonymized data on user interactions and behaviors.

Goodsluck does not use third-party cookies, except those implemented by our payment processor, Stripe, to facilitate secure transactions and comply with regulatory requirements.

You can manage your cookie preferences through your browser settings. Disabling essential cookies may impact the functionality of the platform, while performance cookies can be turned off without affecting critical services.

For more details on how Stripe uses cookies, please refer to their Privacy Policy.

7. Data Retention

Goodsluck retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, regulatory, tax, accounting, or reporting requirements. We also retain data to resolve disputes, enforce our terms, and maintain the integrity and functionality of our platform.

Specific retention periods are determined based on the type of data:

• Account Information: Retained for as long as your account remains active. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law or for legitimate business purposes. Legitimate business purposes include security, fraud prevention, dispute resolution, and platform improvement.
• Transaction and Contribution History: Retained for a minimum of 7 years to comply with financial and legal obligations.
• Session Logs and IP Addresses: Retained for up to 12 months for security and audit purposes unless required for longer retention by law.
• KYC Data via Stripe: Retention is governed by Stripe's data policies. We retain only the associated Stripe customer and account IDs for as long as your account is active.

When personal data is no longer necessary, we securely delete it or anonymize it to prevent any association with you, ensuring it cannot be used to identify you.

8. Data Security

At Goodsluck, we prioritize the security of your personal information. We implement a variety of technical, organizational, and administrative measures to safeguard your data against unauthorized access, disclosure, alteration, and destruction. Our team undergoes regular training to maintain awareness of data protection best practices and to ensure compliance with our security policies.

Key security measures include:

• Encryption: Sensitive data, such as passwords, is encrypted in transit and at rest using industry-standard encryption protocols.
• Access Control: Access to personal information is restricted to authorized personnel who require it to perform their duties. All access is monitored and logged.
• Secure Data Storage: Personal data is stored on secure servers protected by firewalls, intrusion detection systems, and other security technologies.
• Regular Security Audits: We conduct routine audits and assessments of our systems to identify and address vulnerabilities.
• Session Management: We use secure session cookies to ensure a safe user experience and prevent unauthorized access.

Despite our best efforts, no security system is completely impenetrable. In the event of a data breach, we have protocols in place to identify, contain, and mitigate the issue promptly. Users will be notified as required by applicable laws.

We also encourage you to take steps to protect your personal information, such as keeping your login credentials confidential and using strong, unique passwords.

9. Additional Retention Details

This section supplements our general Data Retention policy (Section 7) by providing more detail on the retention periods for specific types of data, including KYC information, transaction history, and cookies. Goodsluck retains user data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. The retention periods for specific types of data are as follows:

• User Account Information: Retained while the account remains active. If you delete your account, we retain certain data for legal and compliance purposes or to resolve disputes for up to 7 years, unless otherwise required by applicable law.
• Transaction History: Retained indefinitely for financial reporting, dispute resolution, and compliance with tax and regulatory requirements.
• IP Addresses and Session Logs: Retained for 12 months for security monitoring and fraud prevention.
• KYC Information: Goodsluck does not store KYC data directly. We rely on Stripe for identity verification and store only customer IDs and account IDs provided by Stripe, retained indefinitely for compliance purposes.
• Cookies: Session cookies are deleted when you close your browser, while persistent cookies are retained for up to 12 months or as specified in our Cookie Policy.

Once the retention period expires, we securely delete or anonymize your data to prevent unauthorized access or use.

10. Third-Party Services

Goodsluck integrates with and relies on third-party services to enhance user experience, ensure payment processing, and maintain platform functionality. These services may process personal data under their respective privacy policies. Below is a summary of the third-party services we use and their roles:

• Stripe: We utilize Stripe for payment processing, including KYC and transaction management. Stripe collects and processes billing information, identity verification details, and payment data. You can review their privacy policy at https://stripe.com/privacy.
• Random.org: For randomization in specific platform features, we use Random.org. No personal data is transmitted to or stored by Random.org.
• Google Analytics: To monitor and analyze website traffic and performance, we may use Google Analytics. This service collects anonymized data through cookies and does not directly identify individual users. You can manage cookie settings in our Cookie Policy.
• GeoIP Services: We may use GeoIP services to enhance platform functionality, such as location-based recommendations or regional settings. This service processes IP addresses to determine approximate location but does not store identifiable data.

Goodsluck ensures all third-party services are compliant with applicable data protection regulations. We do not sell or share your data with third parties for their marketing purposes. We encourage users to review the privacy policies of these third-party services for more information on how they handle personal data.

11. Updates to This Policy

Goodsluck may revise this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. When we update the policy, we will notify users by:

• Posting the updated policy on our website with a revised "Last Updated" date.
• Sending notifications through email or the platform, where appropriate, for significant changes.

We encourage users to review this Privacy Policy regularly to stay informed about how we are protecting the information we collect. Continued use of our services after an update constitutes acceptance of the revised policy.

If you have any questions about updates to this Privacy Policy, please contact us at support@goodsluck.com.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us. Our team is committed to addressing your inquiries promptly and thoroughly.

You can contact us via:

• Email: support@goodsluck.com
• Postal Address: Goodsluck LLC, 5055 Seminary Rd, unit 635, Virginia, USA, 22311

We are here to help and ensure that your privacy concerns are handled with care and transparency.