Privacy Policy

Last updated July 15, 2026

This privacy notice for Goodhue Software LLC ("Goodhue," "we," "us," "our") describes how and why we collect, store, use, and share ("process") your information when you use our services (the "Services"), including when you:

Visit our website at goodhue.io or use the web application at app.goodhue.io
Install or use the Goodhue Chrome extension or the Goodhue Lightroom plugin
Engage with us in sales, marketing, support, or events

Questions or concerns? Email us at hello@goodhue.io. If you do not agree with our policies and practices, please do not use the Services.

Summary of Key Points

We collect the account, billing, usage, and content information described below. We do not process sensitive personal information and we do not collect precise geolocation.
Payments are processed by our billing providers; we never store your full card number.
Photos you upload for AI matching, and images you contribute, are processed (including by AI infrastructure providers acting for us) solely to provide the Services.
The Chrome extension reads image metadata only on pages where you actively use it. It does not collect your browsing history.
We do not sell personal information and we do not share it for targeted advertising.
You can access, correct, or delete your data by emailing hello@goodhue.io.

1. What Information Do We Collect?

Information you provide.

Account data. Name, email address, and authentication data, managed through our identity provider (Clerk). If you sign in with Google or Apple, we receive the basic profile information those services share.
Billing data. Subscription status and transaction history. Card details are collected and stored by our payment processors (currently Stripe, via Clerk Billing; legacy subscriptions through LemonSqueezy), not by us.
Photos and files you submit. Photos you upload for AI photo matching, and images with embedded develop settings you contribute through the Lightroom plugin. You should only submit content you have the rights to.
Reviews, feedback, and survey answers. Star ratings, review text, an optional display name, your consent choice about public display, feature-interest selections, and support messages.
Referral participation. Who referred whom, so we can grant and police referral credits.
Email enrollment. When you create an account, you are enrolled in our mailing list for product updates, feature announcements, and educational content, as described in our Terms of Use. Website visitors can also subscribe directly. You can unsubscribe at any time using the link in any marketing email.

Information collected automatically.

Usage data. Product events such as extractions performed, looks viewed or favorited, searches run, plan limits consumed, and feature usage. This powers metering (free-tier limits), fraud and abuse prevention, and product analytics.
Log and device data. IP address, browser and device characteristics, operating system, referring URLs, and timestamps, collected by our hosting infrastructure for security and diagnostics. IP addresses give us only coarse (city-level) location; we do not collect GPS or precise geolocation.
Chrome extension. The extension activates on pages where you use it and reads image files on those pages to check for embedded develop settings. When you extract, the image URL and its metadata are sent to our servers along with your account identity. The extension does not track or transmit your browsing history.
Lightroom plugin. The plugin authenticates with your account and records extraction and contribution events.

We do not knowingly process sensitive personal information (such as racial or ethnic origin, health data, or biometric identifiers). Photos you submit are processed for color and style analysis, not to identify people.

Diagnostics and error data. We use Sentry (Functional Software, Inc.) to monitor errors and performance. When something in the Services fails, technical details of the failure are transmitted to Sentry and can include your IP address, device and browser information, the pages and actions leading up to the error, and an account identifier or email address where one is attached to the session, so that we can reproduce and fix the problem. For sessions in which an error occurs, a replay of interface interactions may also be captured; typed text is masked by default. This data is used solely for diagnosing and fixing problems and is retained on a rolling basis (typically 90 days or less).

2. How Do We Process Your Information?

To provide, operate, and maintain the Services, including reading develop settings, running AI search and matching, applying settings through the plugin, and syncing your favorites, collections, and account.
To meter usage and enforce plan limits, including free-tier allowances and referral credits.
To process payments, manage subscriptions, and honor legacy billing migrations.
To prevent fraud and abuse, including referral farming, multiple-account abuse, and content that violates our terms.
To moderate catalog content, including automated screening for unlawful or explicit material.
To respond to support and rights requests, including DMCA and content removal.
To request feedback and, with your permission, display reviews publicly.
To send service and account communications, and to send the product updates, feature announcements, and educational content you are enrolled in when you create an account. You can opt out of marketing email at any time; service communications continue while you hold an account.
To analyze aggregated usage so we can improve the Services.
To comply with law.

3. Legal Bases (EEA/UK) and Canada

Where the GDPR or UK GDPR applies, we process your information based on: performance of our contract with you (providing the Services); our legitimate interests (securing and improving the Services, preventing abuse, limited marketing); your consent (which you can withdraw at any time, for example for public display of your review); and compliance with legal obligations. Where Canadian law applies, we process information with your express or implied consent, or as otherwise permitted by law.

4. When and With Whom Do We Share Your Personal Information?

We share personal information only with:

Service providers that process data on our behalf under contract: identity and billing (Clerk), payment processing (Stripe; LemonSqueezy for legacy subscriptions), data hosting (Supabase), application hosting (Vercel), background processing infrastructure, AI image and text processing (Replicate), email delivery for newsletters, product updates, and service messages (Loops), and error monitoring (Sentry, operated by Functional Software, Inc.). These providers may only use your data to provide their service to us.
Business transfers. In connection with a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.
Legal. Where required by law, subpoena, or to protect rights, safety, and the integrity of the Services.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use third-party ad networks.

5. Cookies and Similar Technologies

We use essential cookies to keep you signed in (set by our identity provider) and browser storage to remember interface preferences. We do not use third-party advertising or tracking cookies. Video embeds on our marketing site are loaded with do-not-track parameters enabled.

6. AI Processing

Search queries and photos you submit for matching are converted into numerical representations (embeddings) to find visually similar looks. This processing may be performed by AI infrastructure providers acting on our behalf, and they are engaged to process it solely to provide the service to us.

When you contribute a photograph and its develop settings (for example, by approving AI-recommended settings in the Lightroom plugin or submitting a contribution in the app), the contribution is stored with your account, and members of our team review it, including the photograph and the settings you kept or changed, to evaluate recommendation quality and improve the AI. Contributions are used for this purpose only. You may request deletion of your contributions at any time by contacting us.

7. How Long Do We Keep Your Information?

We keep personal information for as long as your account exists or as needed to provide the Services, comply with legal obligations (for example, tax and accounting records), resolve disputes, and enforce agreements. When there is no ongoing need, we delete or anonymize it; where deletion is not immediately possible (such as backups), we isolate it until deletion is possible.

8. How Do We Keep Your Information Safe?

We use organizational and technical safeguards appropriate to the data we process, including encryption in transit, scoped access controls, and separation between public and administrative systems. No system is 100% secure, and transmission of information to and from the Services is at your own risk.

9. Do We Collect Information From Minors?

The Services are for adults. We do not knowingly collect data from or market to anyone under 18. If we learn we have collected personal information from someone under 18, we will deactivate the account and delete the data. Report any such case to hello@goodhue.io.

10. Your Privacy Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any right, email hello@goodhue.io; we will verify your identity and respond within the time required by applicable law. If you are in the EEA or UK you may also complain to your data protection authority; in Switzerland, to the FDPIC.

You can unsubscribe from marketing at any time via the link in our emails. We may still send service messages about your account.

11. US State Privacy Rights (California, Colorado, Virginia, and Others)

Residents of California, Colorado, Virginia, Connecticut, Utah, and other states with comprehensive privacy laws have rights to know, access, correct, delete, and obtain a copy of personal information, and to opt out of sales, sharing for targeted advertising, and certain profiling. We do not sell personal information and do not share it for targeted advertising, and we have not done so in the preceding 12 months.

Categories of personal information we collect (per the California definitions): identifiers (name, email, IP address, account name); customer records (billing history, with card numbers held by our payment processors); commercial information (subscriptions, purchases); internet activity (product usage events and log data); coarse location (from IP address); audiovisual information (photos you choose to upload); and limited inferences (style and feature preferences drawn from usage). We do not collect protected classification characteristics, biometric information for identification, professional or education records, or sensitive personal information as defined by those laws. We retain each category as described in Section 7.

To exercise state rights, email hello@goodhue.io. We will not discriminate against you for exercising them. You may appeal a decision by replying to our response; if your appeal is denied, you may contact your state Attorney General. Authorized agents may submit requests with proof of authorization. California's Shine the Light law: we do not disclose personal information to third parties for their direct marketing.

12. Do-Not-Track

No uniform DNT standard has been adopted, so we do not currently respond to DNT browser signals. Because we do not engage in cross-site tracking, there is nothing for such a signal to disable.

13. Updates to This Notice

We may update this notice from time to time. The updated version is indicated by the "Last updated" date. Material changes will be highlighted on the Services or sent to you directly.

14. Contact Us

Goodhue Software LLC 3459 Ringsby Ct, #405 Denver, CO 80216, United States hello@goodhue.io

To review, update, or delete your data, email hello@goodhue.io with the subject "Data request".