Privacy Policy

Information we collect

• Account details: your name and email address (we sign you in with one-time email links — no passwords).
• Business information you provide: business name, contact details, service area, offers, photos, logos and other content you upload or confirm, and campaign drafts.
• Website import (only when you ask): public text and images from the website address you enter.
• Leads from your pages: when a visitor fills in your landing page or quiz, we store their answers and contact details and pass them to your business's CRM. Visitors receive an anonymous cookie on landing pages to measure visits and prevent duplicate submissions.
• Connected accounts (only if you connect them): see “Google” and “Facebook / Meta” below.

Google user data

If you choose “Connect Google Calendar”, you sign in on Google's own page and choose what to allow. Goliath requests:

• Your email address — to show which Google account is connected.
• Free/busy information (calendar.freebusy) — only the times you are busy, never event titles, descriptions or guests. We use it to hide busy times from your booking page.
• Only if you turn on “Add new bookings to my Google Calendar” (calendar.events.owned) — to create, update and remove the calendar entries for bookings made on your Goliath page. We don't read or change your other events, and we never invite anyone.

Google access tokens are stored encrypted and used only for the purposes above. We do not sell Google user data, use it for advertising, or let people read it except where you ask us to help you, for security, or as required by law. Goliath's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect at any time in Goliath (Calendar → Disconnect), which revokes our access at Google, or in your Google Account under Security → Third-party access.

Facebook / Meta data

If you choose “Connect Facebook”, you sign in on Facebook's own page and choose which ad account, Page, pixel and Instagram account Goliath may use. We store an encrypted access token and the names and IDs of those assets and the permissions granted. We use them only to prepare and manage the ads you approve (new ads are created paused for your review) and to show their results. We don't read personal messages, friends or profile details.

You can disconnect in Goliath (Connections → Disconnect) or remove Goliath in Facebook settings. To have this data deleted, see our Facebook data deletion page.

How we use information

• To provide the service you asked for: drafting ads and pages, delivering leads and bookings to you, sending the follow-ups you set up, and showing results.
• To review campaigns before they go live and to keep the service secure (for example, preventing abuse and fixing errors).
• We never invent facts about your business; AI-drafted content is checked against what you confirmed.

Service providers we use

We share information only with providers that help us run Goliath, and only what they need:

• Hosting: Render (servers and storage).
• AI drafting: OpenAI and Anthropic (your business details and campaign content, to draft ads, pages and follow-ups).
• Website import: Firecrawl (the public website you ask us to read).
• Sign-in emails: Resend.
• CRM, calendars and messages: GoHighLevel (your leads, bookings and follow-up messages, in your business's own account).
• Google and Meta, when you connect them, as described above.

We do not sell personal information.

Security and retention

Each business can only see its own information. Access tokens for connected accounts are encrypted. We keep account and campaign information while your account is active; free demo workspaces are deleted automatically after a period of inactivity. You can ask us to delete your account and data at any time.

Your choices

• Disconnect Google, Facebook or other connections at any time.
• Ask for a copy of your information, a correction, or deletion by emailing us.
• Leads who want their information removed can contact the business they submitted it to, or us.

Contact

Goliath Marketing LLC · david@goliath-marketing.com

We'll post any changes to this policy on this page with a new “last updated” date.