Privacy Policy

At Goodtech LLC, we are committed to protecting the privacy of our website visitors, users, and customers.

Information We Collect

We gather the following categories of data:

Personal details (name, email, company name from forms and purchases)
Account and entitlement data (your organization, license keys, and which product tiers they unlock) -- this is the only product-related data our systems ever hold; see "How We Protect Product Data" below for what stays entirely on your own infrastructure instead
Usage metrics (IP address, browser type, device information)
Cookie data for site analytics -- see "Cookies & Analytics" below

How Information Is Used

We apply collected data to:

Deliver products and services
Handle account communications and inquiries
Share marketing materials of potential interest
Enhance website and service offerings

We do not sell or rent your personal information to third parties.

Third Parties We Use

We share limited data with a small number of service providers, each for one specific purpose:

Auth0 — authentication for Commercial signups (email, name, and login credentials)
Stripe — payment processing for SQL Simulator's paid tiers (we never see or store your card details ourselves)
Resend — transactional email (license-key delivery, admin notifications)
Google Analytics — site traffic analytics, only after you've consented via the cookie banner (see below)
Reddit Ads — measures whether visitors who arrived from a Reddit ad went on to sign up, only after you've consented via the cookie banner (see below); see "Cookies & Analytics" below for what this shares with Reddit
ipinfo.io — a one-time lookup of your IP address on your first visit, used only to determine whether the cookie banner needs to ask for your consent (see "Cookies & Analytics" below); we don't store the result anywhere, only whether or not to show you the banner

None of these providers is authorized to use your data for their own purposes beyond providing that service to us.

Cookies & Analytics

This site uses two cookie-setting tools: Google Analytics, to understand how visitors use the site (which pages get traffic, roughly where visitors come from), and the Reddit Ads pixel, to measure whether visitors who clicked a Reddit ad went on to sign up. If you arrived via a Reddit ad, the Reddit pixel shares that visit, and later whether you completed signup, back with Reddit so we can tell whether that ad is working — it does not share the contents of anything you enter on this site.

If you're visiting from outside the United States, or from California, we show a cookie banner on your first visit and neither tool runs — no analytics or advertising cookie is set — until you explicitly accept it; declining (or not answering) keeps both in a cookieless, consent-denied state. We determine roughly where you're visiting from with a one-time lookup of your IP address (via ipinfo.io, see "Third Parties We Use" above); we don't store that IP address or lookup result ourselves.

If you're visiting from elsewhere in the United States, you won't see this banner and both tools run by default — you can still opt out at any time by emailing weston@goodtechonline.com and asking us to stop, consistent with your rights under CCPA (see below).

If you did see the banner and want to change your answer, clear the "cookieConsent" entry from your browser's local storage for this site and reload, or email weston@goodtechonline.com and ask us to do it for you. Signing in itself sets a small, non-tracking session cookie (via Auth0) that isn't optional — it's what keeps you signed in, not analytics.

How We Protect Product Data

SQL Simulator and 00DB both build small test databases from your own schema, but they handle sensitive source data very differently, and neither one sends your actual database contents to us — both run entirely on infrastructure you control (your own machine for SQL Simulator, your own Kubernetes cluster for 00DB). What we described in "Information We Collect" above (your organization's account and license-key data) is the complete list of what our own systems ever touch; everything below happens on your infrastructure, not ours.

00DB

Built for databases that do contain sensitive data, including production. Your DBA configures two optional tables directly on your own source database, never through this site or through 00DB's own interface: a masking table (per-column masking — redact, or randomize a numeric/text value — applied automatically whenever a sandbox is built) and a governance table (a cap on how much sensitive data one run can retrieve, a separate daily cap across your whole team, and specific records — a public figure's row, for example — that only approved users can ever retrieve). Every governed pull is logged to a third table on your own database, an audit trail of who retrieved what and when. Every 00DB sandbox also self-destructs on its own — after 15 minutes of no activity, or 9 hours no matter what, whichever comes first — so no copy of what it pulled sits around after you're done, on any tier.

SQL Simulator

Built for test and development databases that do not contain sensitive data — it's structurally simpler than 00DB and does not read or write any masking, governance, or audit tables, regardless of what its target database contains. Its sandboxes persist as a reusable local test environment rather than self-destructing, and are only ever torn down manually or by restarting the container. If your source database contains sensitive data, 00DB is the product built to handle that, not SQL Simulator.

Data Security

We employ reasonable measures to safeguard the account and entitlement data described above, though we acknowledge internet transmissions cannot guarantee absolute security.

Your Rights Under GDPR (EEA/UK Visitors)

If you're located in the European Economic Area or the UK, we process your personal data based on your consent (for the analytics cookie described above), our need to perform a contract with you (delivering the products/services you've signed up for), or our legitimate business interests (responding to inquiries, securing the Services). You have the right to:

Access, correct, or delete your personal information
Object to or restrict how we process it
Receive a copy of it in a portable format
Withdraw consent at any time (for the analytics cookie, this just means declining or resetting your cookie choice, described above)
Lodge a complaint with your local data protection supervisory authority

Our Services are hosted in the United States, so using them involves transferring your data there; continuing to use the Services after being informed of this constitutes your consent to that transfer, same as described in our Terms and Conditions.

Your Rights Under CCPA/CPRA (California Residents)

California residents have the right to know what personal information we've collected about you, request its deletion, and opt out of its "sale" or "sharing." We do not sell your personal information. The Reddit Ads pixel described in "Cookies & Analytics" above may count as "sharing" for cross-context behavioral advertising under CCPA/CPRA even though no money changes hands — declining or resetting the cookie banner (or, if you're in the rest of the United States and never saw the banner, emailing us) opts you out of it the same way described above. Exercising any of these rights will never result in different treatment or worse service from us. To make a request, email weston@goodtechonline.com.

Policy Updates

Changes take effect when posted to this page.

Contact Information

Inquiries should go to weston@goodtechonline.com.