Skip to main content

Privacy Policy

Last updated: 2 November 2026

1. Introduction

Kelmoss Ltd ("we", "our", or "us"), operating as GoodGrid, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our GoodGrid platform.

Please read this Privacy Policy carefully. By accessing or using GoodGrid, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide when using GoodGrid, including:

  • Contact information (name, email address, etc.)
  • Account information (username, password, etc.)
  • Profile information (organization, bio, social media accounts, etc.)
  • Payment information (processed securely through our payment processor, Stripe), including sponsorship amounts, optional tips to GoodGrid, currencies and payment/refund references. We keep these records for payment administration, accounting and handling disputes. Tip amounts are not shown on public sponsor blocks. Tip-choice and checkout analytics follow our analytics-consent rules.
  • Communications with us or other users through our platform
  • Campaign images you upload. These are stored using Replit App Storage and displayed on your public campaign when you publish it. We re-encode uploaded images and remove embedded image metadata. Only upload images you have permission to use, and avoid including sensitive personal information.
  • Campaign team invitations and membership: email addresses, assigned roles, invitation expiry and acceptance. The campaign owner manages invitations and can remove access; collaborators use their own accounts. Team email addresses are not displayed publicly. We send requested invitation emails, not marketing messages, and use limited delivery-attempt records to prevent abuse.
  • Optional supporter share images show the public grid with the purchased selection marked, not supporter contact details, payment references or tip amounts. A signed link is provided after confirmed payment; anyone you share that link with can download the image for up to one year while the campaign remains public.
  • Supporter names, messages, website links and logo or photo uploads are optional. They can appear publicly with sponsored blocks on a published campaign after payment. New supporter image uploads are stored using Replit App Storage; we re-encode them and remove embedded image metadata. Only share information and images you have permission to publish.

2.2 Automatically Collected Information

When you access or use GoodGrid, we may automatically collect:

  • Device information (IP address, browser type, operating system, etc.)
  • Usage information (pages visited, time spent, etc.)
  • Location information (general location based on IP address)
  • Cookies and similar technologies data

If you choose to send payment setup feedback, we privately store your chosen reason, optional note and account or campaign reference so the GoodGrid team can understand and investigate problems. This is separate from optional analytics cookies and is not shown on campaign pages. Feedback is retained for 90 days, then removed during routine daily cleanup. Please do not include bank details, passwords or identity documents.

3. How We Use Your Information

We may use your information for various purposes, including to:

  • Provide, maintain, and improve GoodGrid
  • Process transactions and send transaction notifications
  • Respond to your inquiries and provide customer support
  • Send administrative information, updates, and marketing communications
  • Monitor and analyse usage patterns and trends
  • Protect against, identify, and prevent fraud and other unauthorized activity
  • Comply with legal obligations

3.1 Legal Basis for Processing (GDPR Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data based on one or more of the following legal bases:

  • Performance of a contract (e.g. when you create a campaign or make a sponsorship)
  • Compliance with legal obligations
  • Your consent (e.g. for marketing or non-essential cookies)
  • Our legitimate interests (e.g. to improve and secure our services)

4. Sharing Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We use Stripe for payments and connected accounts, Replit for application hosting, Neon for database hosting, Resend for transactional email, Sentry for error monitoring, Cloudflare Turnstile for registration abuse protection, CookieYes for consent management, and (with the relevant consent) PostHog for optional analytics. Service providers may receive information needed for those purposes, such as account/contact details, transaction data, IP addresses, device information and diagnostic events. Limiting the fields in our custom analytics events does not make all usage or diagnostic information anonymous. Providers process information under their own applicable terms and privacy arrangements.

Turnstile checks network and browser signals to help distinguish genuine registrations from automated abuse. This security check is separate from optional analytics. See Cloudflare's privacy policy.

With analytics consent, events on campaign management and payment setup pages use a pseudonymous account identifier to help us understand where organisers get stuck. We also record limited first-touch campaign tags and the referring website's hostname, not its full address. These custom events do not include email addresses, campaign descriptions or bank and card details.

4.1.1 Analytics Services

With your analytics-cookie consent, we use PostHog and Replit Analytics to understand usage patterns and improve GoodGrid. Depending on the event and provider, this can include pseudonymous account or session references, account plan, limited campaign-attribution tags, public campaign names and identifiers, sponsorship amounts and currencies, square counts, and event outcomes. We do not include donor names, email addresses, supporter messages, uploaded images, search text, bank or card details, raw Stripe payment identifiers, or precise locations in these custom events. If you decline analytics cookies, GoodGrid does not send these optional custom analytics events. You can learn more about PostHog's privacy practices and Replit's privacy practices.

Session recordings for visitors and organisers. With your analytics-cookie consent, PostHog may record how you browse our public pages, interact with campaign grids, complete GoodGrid’s sponsorship forms, and use selected organiser pages (your dashboard, campaign set-up, editing and management, payment setup and pricing). This helps us find confusing steps and bugs. You do not need to be signed in. Recordings capture page layout, clicks and scrolling. Product instructions, navigation, status messages and campaign titles remain readable. Form inputs, supporter identities and messages, account/profile details, campaign stories and updates, and identifying element attributes are masked before they leave your browser. Grid shapes and selection states remain visible. For canvas grids we generate a separate, privacy-filtered picture showing available, sponsored, temporarily held and selected squares, zoom and pan. It does not contain supporter names, initials, messages, photographs, logos or reveal images. Source-controlled product illustrations can appear; uploaded images, video, raw canvas pixels and embedded content are blocked. Console logs, request headers and bodies are not recorded, and replay request URLs are reduced to the site address. We cannot record Stripe’s hosted onboarding or payment pages. We never record sign-in, registration, password-reset, payment confirmation, organiser tools, account settings, billing, payment lists, team member details, admin pages, or pages carrying one-time links. Staff accounts are excluded. Recordings follow PostHog’s retention settings and stop when you withdraw analytics consent through Cookie Settings.

If you agree to analytics when starting a sponsorship checkout, we retain that choice and a pseudonymous measurement reference with the Stripe checkout. This lets us measure a completed sponsorship after Stripe confirms payment, even when its confirmation arrives separately from your browser. This does not sign you up for campaign updates or marketing.

4.2 Campaign Creators and Sponsors

When you sponsor a campaign, the sponsor name and public message you choose may be visible to the Campaign Creator and other visitors; you can choose an anonymous public sponsor name. The organiser receives sponsorship payments through its own connected Stripe account. Stripe may show the organiser transaction details and customer information, including the payer's name and email address, for payment administration, refunds and disputes. Your full card number is not made available to the organiser by GoodGrid. When you create a campaign, profile details you choose to publish (such as your name, avatar, location and bio) may be visible to visitors. Organisers are responsible for their own use of sponsor information.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4.4 Business Transfers

We may share or transfer your information in connection with a merger, acquisition, reorganization, or sale of assets, or in the event of bankruptcy.

4.5 Hosting

Our platform is hosted using Replit and its application database is hosted with Neon. Technical and operational information (such as IP addresses, application logs and errors) may be processed as part of delivering and securing the service. Replit's practices are described at https://replit.com/site/privacy.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience on GoodGrid, analyse traffic, and personalise content.

5.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help us recognize your browser and remember information like login details, preferences, and activity.

5.2 Types of Cookies We Use

  • Essential Cookies – Required for the website to function properly (e.g., session management, login functionality).
  • Analytics Cookies – Help us understand how users interact with the site (e.g., page views, time on site).
  • Functionality Cookies – Remember your preferences to personalise your experience.
  • Marketing Cookies – Used to deliver relevant advertising or track effectiveness of campaigns (only if enabled and with consent).

5.3 Your Choices

You can control or delete cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being used. However, some parts of the Platform may not function properly without essential cookies.

5.4 Cookie Consent

When you first visit GoodGrid, you will be asked to accept or reject non-essential cookies via a cookie banner. You can update your preferences at any time by revisiting the cookie settings.

5.5 Third-Party Cookies

Some cookies may be set by third-party services we use, such as Stripe (for secure payments), analytics providers, or embedded content like videos or social share buttons. These services have their own privacy and cookie policies.

6. Data Security

We implement appropriate technical and organizational measures to protect the security of your personal information. However, please be aware that no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.We also require our third-party partners, including Stripe, to implement appropriate security measures aligned with industry standards.

7. Data Retention

For campaign reminders and setup emails, we keep delivery records to retry failed sends and prevent duplicates. These records use a keyed recipient reference rather than an additional copy of your email address. Completed, cancelled or abandoned delivery records are normally removed by daily maintenance after they are 30 days old; pending records remain until delivery is resolved. Our email provider keeps its own records under its retention policy.

When you create or change a password, we check it against Have I Been Pwned's breached-password service. Only the first five characters of a SHA-1 hash are sent to that service; we do not send your password, full hash, email address or account identifier. The check does not replace secure password hashing in our own system.

We retain account and campaign records for as long as needed to provide the service and meet applicable accounting, fraud-prevention, dispute and legal requirements. The internal analytics event-claim and rate-limit ledgers are automatically cleared when entries are more than seven days old; this is not a retention period for other analytics providers, transaction, account, email or error records. Other retention periods depend on the record's purpose and the provider's practices. Contact us to ask about a particular category or request deletion where the law permits it.

8. Your Rights

You can submit an account deletion request in Account & security, or contact support@goodgrid.io. We record your request and respond within one calendar month, explaining any lawful extension within that period. Live campaigns and unpaid fees are flagged for review, not used to automatically refuse a request. Payment, accounting, fraud-prevention and dispute records may need to be retained for legal obligations; we will explain what is retained and why. Requesting deletion does not immediately delete campaigns or financial records.

Depending on your location, you may have certain rights regarding your personal information, including:

  • The right to access and receive a copy of your personal information
  • The right to rectify or update your personal information
  • The right to erase your personal information
  • The right to restrict or object to processing of your personal information
  • The right to data portability
  • The right to withdraw consent

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

9. Children's Privacy

Accounts, campaign creation and sponsorship payments are intended for adults aged 18 or older. Public campaign pages can be viewed by others, and campaign content uploaded by organisers may contain information about children, for example in a school fundraiser. Organisers must have an appropriate legal basis and obtain any required permissions before posting such information. If you are a parent or guardian and are concerned about information about a child on GoodGrid, please contact us so we can review the content.

10. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. We will take appropriate measures to ensure that your personal information remains protected in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Kelmoss Ltd
Company Number: 15629688
Address: 124 City Road, London, EC1V 2NX
Email: support@goodgrid.io

Please confirm