Good Gov AI/Good Governance Consulting, LLC was created to add social value. Our Co-Founders promise to

• Never sell your data to 3rd parties

• Never sell the company, especially not to Private Equity

• Always strive to keep our technology human-centred

• Prioritize social value over pure profit

Terms of Service

Effective Date: May 23, 2025
Last Updated: May 23, 2025

1. Acceptance of Terms

Good Governance Consulting LLC, hereto referred to as Good Gov AI (“Service”, "we," "our," or "us").

By accessing or using Good Gov AI, you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, do not use our Service.

2. Description of Service

Good Gov AI is a legislative assistant application that provides:

• Legislative directory and search functionality

• Interactive building maps and navigation

• AI-powered legislative assistance and information

• Testimony generation tools

• Access to public legislative information and resources

3. User Accounts and Registration

3.1 Account Creation

You may create an account through:

• Direct registration with email and password

• Google Sign-In authentication

• Meta platform authentication (Facebook/Instagram)

3.2 Account Requirements

• You must be at least 13 years old to use our Service

• You must provide accurate and complete information

• You are responsible for maintaining account security

• You must notify us immediately of any unauthorized access

3.3 Account Responsibilities

• You are responsible for all activities under your account

• You must keep your login credentials secure

• You may not share your account with others

• You may not create multiple accounts for the same person

4. Acceptable Use

4.1 Permitted Uses

You may use our Service for:

• Accessing public legislative information

• Generating testimony for legitimate purposes

• Navigating government buildings and finding legislators

• Educational and research purposes

4.2 Prohibited Uses

You may not:

• Use the Service for illegal activities

• Attempt to gain unauthorized access to our systems

• Interfere with or disrupt the Service

• Submit false, misleading, or defamatory content

• Use automated systems to access the Service without permission

• Violate any applicable laws or regulations

• Harass, threaten, or abuse other users or staff

• Upload malicious code or attempt to compromise security

4.3 Content Guidelines

• Testimony and content must be for legitimate purposes

• Content should not contain hate speech or discriminatory language

• You may not impersonate others or misrepresent your identity

• Commercial solicitation is prohibited

5. Intellectual Property

5.1 Our Content

• The Service and its content are protected by copyright and other laws

• We own or license all intellectual property in the Service

• You may not copy, modify, or distribute our content without permission

5.2 User Content

• You retain ownership of content you create using our Service

• You grant us a license to use your content to provide and improve the Service

• You represent that you have the right to submit any content you provide

5.3 Third-Party Content

• Legislative information is sourced from public government databases

• We respect third-party intellectual property rights

• Report any copyright violations to info@goodgov.ai

6. Privacy and Data Protection

6.1 Data Collection

• We collect information as described in our Privacy Policy

• AI queries are anonymized and not linked to user accounts

• We use Firebase/Firestore for secure data storage and authentication

6.2 Data Security

• We implement industry-standard security measures

• Data is encrypted in transit and at rest

• We regularly review and update security practices

6.3 Data Rights

• You have rights to access, correct, and delete your data

• See our Data Protection Policy and Data Deletion Policy for details

7. Service Availability

7.1 Service Provision

• We strive to provide continuous service availability

• We may temporarily suspend service for maintenance

• We reserve the right to modify or discontinue features

7.2 No Warranty

• The Service is provided "as is" without warranties

• We do not guarantee uninterrupted or error-free service

• Legislative information is provided for informational purposes only

8. Limitation of Liability

8.1 Disclaimer

• We are not responsible for decisions made based on Service information

• Legislative information should be verified through official sources

• The Service is not a substitute for professional legal advice

8.2 Liability Limits

• Our liability is limited to the maximum extent permitted by law

• We are not liable for indirect, incidental, or consequential damages

• Total liability shall not exceed $100 or amounts paid by you in the past 12 months

9. Account Termination

9.1 Termination by You

• You may delete your account at any time

• Account deletion removes your personal data as described in our Data Deletion Policy

• Some information may be retained for legal compliance

9.2 Termination by Us

We may suspend or terminate accounts for:

• Violation of these Terms

• Illegal activity or abuse

• Extended inactivity (after appropriate notice)

• Technical or security reasons

9.3 Effect of Termination

• Access to the Service will be discontinued

• Your data will be handled according to our Data Deletion Policy

• Certain provisions of these Terms survive termination

10. Updates to Terms

10.1 Modifications

• We may update these Terms from time to time

• Material changes will be communicated with clear notice

• Continued use after changes constitutes acceptance

10.2 Notice Methods

• Email notification to registered users

• Prominent notice within the Service

• Updated Terms posted on our website

11. Governing Law

These Terms are governed by the laws of Maryland, United States, without regard to conflict of law principles. Any disputes will be resolved in the courts of Maryland.

12. Dispute Resolution

12.1 Informal Resolution

We encourage contacting us first to resolve any disputes informally.

12.2 Binding Arbitration

If informal resolution fails, disputes will be resolved through binding arbitration, except for:

• Small claims court matters

• Intellectual property disputes

• Injunctive relief requests

13. Miscellaneous

13.1 Entire Agreement

These Terms constitute the entire agreement between you and Good Gov AI.

13.2 Severability

If any provision is found unenforceable, the remaining provisions remain in effect.

13.3 Assignment

We may assign these Terms; you may not assign without our consent.

13.4 Force Majeure

We are not liable for delays due to circumstances beyond our reasonable control.

14. Contact Information

For questions about these Terms of Service:

Email: info@goodgov.ai
Address: 5557 Baltimore Ave, Ste. 500-1022, Hyattsville, MD 20781
Phone: (301) 531-4723

By using Good Gov AI, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service.

Data Protection Policy

Effective Date: May 23, 2025
Last Updated: May 23, 2025

1. Introduction

Good Governance Consulting LLC, hereto referred to as Good Gov AI ("we," "our," or "us").

Good Gov AI is committed to protecting your personal data and ensuring compliance with applicable data protection laws. This Data Protection Policy outlines our comprehensive approach to data security, processing, and user rights.

2. Data Protection Principles

We adhere to the following fundamental principles:

• Lawfulness, Fairness, and Transparency: Data processing is lawful, fair, and transparent

• Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes

• Data Minimization: We collect only data that is necessary and relevant

• Accuracy: We ensure data is accurate and kept up to date

• Storage Limitation: Data is stored only as long as necessary

• Integrity and Confidentiality: Data is processed securely with appropriate protection

• Accountability: We demonstrate compliance with data protection principles

3. Legal Basis for Processing

We process your data based on the following legal grounds:

3.1 Consent

• Newsletter subscriptions

• Optional feature preferences

• Marketing communications

3.2 Contract Performance

• Account creation and management

• Service provision and functionality

• User support and assistance

3.3 Legitimate Interests

• Service improvement and analytics

• Security and fraud prevention

• System maintenance and optimization

3.4 Legal Obligations

• Compliance with applicable laws

• Response to lawful requests

• Record keeping requirements

4. Data Collection and Storage

4.1 Firebase/Firestore Integration

We use Google Firebase and Firestore for:

• Authentication: Secure user login and account management

• Data Storage: Encrypted storage of user information

• Security: Industry-standard security protocols

• Backup and Recovery: Automated data protection measures

4.2 Data Categories

Personal Data:

• Name and email address

• Authentication credentials (encrypted)

• Basic profile information

• Account preferences and settings

Usage Data:

• Service interaction patterns

• Feature usage analytics

• Performance metrics

• Error logs and diagnostics

Technical Data:

• Device information

• IP addresses

• Browser and system information

• Cookies and tracking data

4.3 Data Anonymization

• AI queries are anonymized and not linked to user accounts

• Analytics data is aggregated and de-identified

• Personal identifiers are removed from research data

5. Data Security Measures

5.1 Technical Safeguards

• Encryption: Data encrypted in transit (TLS) and at rest (AES-256)

• Access Controls: Multi-factor authentication and role-based access

• Network Security: Firewalls, intrusion detection, and monitoring

• Regular Updates: Security patches and system updates

5.2 Organizational Safeguards

• Staff Training: Regular privacy and security training

• Access Policies: Strict need-to-know access principles

• Incident Response: Defined procedures for security breaches

• Vendor Management: Due diligence for third-party processors

5.3 Firebase Security Features

• Authentication Security: OAuth 2.0 and secure token management

• Database Rules: Granular access control and validation

• Monitoring: Real-time security monitoring and alerts

• Compliance: Google's enterprise-grade security infrastructure

6. Data Sharing and Transfers

6.1 Third-Party Processors

We share data with trusted processors including:

• Google (Firebase/Firestore): Cloud infrastructure and authentication

• Analytics Providers: Anonymized usage analytics

• Support Services: Customer service and technical support

6.2 International Transfers

• Data may be transferred to and processed in other countries

• We ensure adequate protection through:

  • Standard Contractual Clauses (SCCs)

  • Adequacy decisions

  • Binding Corporate Rules where applicable

6.3 No Data Sales

We do not sell, rent, or trade personal data to third parties for commercial purposes.

7. User Rights and Controls

7.1 Access Rights

• Request access to your personal data

• Receive information about processing activities

• Obtain copies of your data in a portable format

7.2 Correction and Update

• Correct inaccurate or incomplete data

• Update account information and preferences

• Modify consent settings

7.3 Deletion Rights

• Request deletion of personal data (subject to legal obligations)

• Account closure and data removal

• Right to be forgotten (where applicable)

7.4 Processing Restrictions

• Object to certain types of processing

• Restrict processing under specific circumstances

• Opt-out of marketing communications

7.5 Data Portability

• Receive your data in a structured, machine-readable format

• Transfer data to another service provider

• Export account information and user content

8. Data Retention

8.1 Retention Periods

• Account Data: Retained while account is active

• Usage Analytics: Up to 2 years for service improvement

• Legal Records: As required by applicable laws

• Marketing Data: Until consent is withdrawn

8.2 Automated Deletion

• Inactive accounts may be deleted after appropriate notice

• Temporary data is automatically purged

• Backup data follows the same retention schedule

9. Privacy by Design

9.1 Built-in Protection

• Privacy considerations integrated into system design

• Default settings favor user privacy

• Minimal data collection practices

9.2 Regular Assessments

• Privacy impact assessments for new features

• Regular security audits and penetration testing

• Compliance reviews and updates

10. Breach Notification

10.1 Internal Procedures

• Immediate containment and assessment

• Documentation and investigation

• Risk evaluation and mitigation

10.2 User Notification

• Users notified within 72 hours of high-risk breaches

• Clear communication about impact and response

• Guidance on protective measures

10.3 Regulatory Notification

• Authorities notified as required by law

• Cooperation with regulatory investigations

• Implementation of additional safeguards

11. Children's Data Protection

11.1 Age Restrictions

• Service not intended for children under 13

• Parental consent required for users 13-16 (where applicable)

• Enhanced protection for minor users

11.2 Special Safeguards

• Additional security measures for youth accounts

• Limited data collection and processing

• Regular review of protection measures

12. Compliance and Certification

12.1 Regulatory Compliance

• GDPR (General Data Protection Regulation)

• CCPA (California Consumer Privacy Act)

• COPPA (Children's Online Privacy Protection Act)

• Other applicable privacy laws

12.2 Industry Standards

• SOC 2 Type II compliance

• ISO 27001 security standards

• NIST Cybersecurity Framework

13. Data Protection Officer

For data protection inquiries, contact our Data Protection Officer:

Email: dpo@goodgov.ai
Address: 5557 Baltimore Ave, Ste. 500-1022, Hyattsville, MD 20781
Phone: (301) 531-4723

14. Supervisory Authority

For EU residents, you have the right to lodge complaints with your local supervisory authority. For other jurisdictions, contact the relevant privacy regulator.

15. Policy Updates

This policy may be updated to reflect changes in:

• Legal requirements

• Technology and security practices

• Business operations

• User feedback and needs

Updates will be communicated through our standard notification procedures.

This Data Protection Policy demonstrates our commitment to responsible data handling and user privacy protection.

Privacy Policy for Good Gov AI

Effective Date: May 23, 2025
Last Updated: May 23, 2025

1. Introduction

Good Governance Consulting LLC, hereto referred to as Good Gov AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our legislative assistant application ("Service").

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, and basic profile information to verify the account (whether you create an account directly with us using email and password, or sign in through Google or Meta platforms)

• Authentication Data: Encrypted passwords for direct account creation (we do not store plain text passwords)

• User Content: Messages, queries, and testimony drafts you submit through our Service

• Contact Information: Email address for newsletter subscriptions and communications

Important Note: AI queries are currently anonymized and are not associated with your specific user account.

2.2 Information Collected Automatically

• Usage Data: How you interact with our Service, including pages visited, features used, and time spent

• Device Information: Device type, operating system, browser type, and IP address

• Location Data: General location information (city/state level) to provide relevant legislative information

• Cookies and Tracking: We use cookies and similar technologies to enhance user experience

2.3 Information from Third Parties

• Google Services: If you choose to log in through Google, we may receive basic profile information (name, email, profile picture) as permitted by your Google account settings

• Meta Platforms: If you choose to log in through Facebook or Instagram, we may receive basic profile information as permitted by your privacy settings

• Government Data: Publicly available legislative information, committee schedules, and legislator contact information

3. How We Use Your Information

We use your information to:

• Provide and maintain our Service

• Process your requests for legislative assistance

• Generate personalized content and recommendations

• Send newsletters and updates (with your consent)

• Improve our Service through analytics

• Comply with legal obligations

• Protect against fraud and abuse

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Your Consent

We may share information when you explicitly consent to such sharing.

4.2 Service Providers

We may share information with trusted third-party service providers who assist us in operating our Service, including:

• Cloud hosting providers

• Analytics services

• Customer support platforms

4.3 Legal Requirements

We may disclose information if required by law, court order, or government request.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit and at rest

• Regular security assessments

• Access controls and authentication

• Secure data storage practices

6. Data Retention

We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this policy. Specific retention periods include:

• Account information: Until you delete your account

• Usage data: Up to 2 years for analytics purposes

• Newsletter subscriptions: Until you unsubscribe

7. Your Rights and Choices

Depending on your location, you may have the following rights:

7.1 Access and Portability

Request access to your personal information and receive a copy in a portable format.

7.2 Correction

Request correction of inaccurate or incomplete information.

7.3 Deletion

Request deletion of your personal information, subject to certain exceptions.

7.4 Opt-Out

Unsubscribe from marketing communications or opt-out of certain data processing.

7.5 Data Portability

Request transfer of your data to another service provider.

To exercise these rights, contact us at [privacy@goodgov.ai].

8. Third-Party Authentication Services

8.1 Google Sign-In

If you use our Service through Google Sign-In:

• We only access basic profile information you explicitly authorize

• We comply with Google's API Services User Data Policy

• You can revoke our access through your Google account settings

• We do not store Google login credentials

8.2 Meta Platform Integration

If you use our Service through Meta platforms (Facebook, Instagram):

• We only access information you explicitly authorize

• We comply with Meta's Platform Policy and Data Use Policy

• You can revoke our access through your Meta account settings

• We do not store Meta login credentials

8.3 Direct Account Creation

If you create an account directly with us:

• Passwords are encrypted and securely stored

• We follow industry-standard security practices

• You can update your password at any time through account settings

9. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected

• Right to delete personal information

• Right to opt-out of the sale of personal information

• Right to non-discrimination for exercising privacy rights

12. European Privacy Rights (GDPR)

For users in the European Economic Area, we process your data based on:

• Consent for newsletter subscriptions and optional features

• Contract performance for providing our Service

• Legitimate interests for Service improvement and security

• Legal obligations for compliance requirements

13. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes with your consent, using clear natural language that complies with state and federal regulations. Notification methods include:

• Posting the updated policy on our website

• Sending email notifications to registered users

• Displaying prominent notices within our Service

14. Contact Information

For questions about this Privacy Policy or our privacy practices, contact us:

Email: info@goodgov.ai
Address: 5557 Baltimore Ave, Ste. 500-1022, Hyattsville, MD 20781
Phone: (301) 531-4723

15. Compliance Certifications

We are committed to maintaining compliance with applicable privacy laws and industry standards, including:

• General Data Protection Regulation (GDPR)

• California Consumer Privacy Act (CCPA)

• Meta Platform Policies

• SOC 2 Type II standards (if applicable)

Data Deletion Policy

Effective Date: May 23, 2025
Last Updated: May 23, 2025

1. Introduction

This Data Deletion Policy outlines how Good Gov AI handles the deletion of user data in compliance with privacy laws and regulations. We are committed to providing users with clear, accessible methods to control and delete their personal information.

2. Types of Data Deletion

2.1 User-Initiated Deletion

• Account Deletion: Complete removal of user account and associated data

• Selective Data Deletion: Removal of specific data categories or content

• Content Deletion: Removal of user-generated content (testimony drafts, queries)

2.2 Automatic Deletion

• Inactive Account Deletion: Accounts inactive for extended periods

• Temporary Data Purging: Automatic removal of temporary files and cache

• Retention Period Expiry: Data deleted when retention periods end

2.3 Legal or Administrative Deletion

• Legal Compliance: Deletion required by court orders or regulations

• Terms Violation: Account deletion due to terms of service violations

• Security Breach: Precautionary deletion for security purposes

3. User Rights and Deletion Requests

3.1 Right to Deletion (Right to be Forgotten)

Users have the right to request deletion of their personal data when:

• The data is no longer necessary for the original purpose

• Consent is withdrawn and no other legal basis exists

• Data has been unlawfully processed

• Deletion is required for legal compliance

• The user was a minor when data was collected

3.2 Deletion Request Methods

Self-Service Options:

• Account settings deletion button

• In-app data management tools

• Profile and content deletion controls

Assisted Deletion:

• Email request to info@goodgov.ai

• Written request to our business address

• Phone request to (301) 531-4723

3.3 Request Processing Timeline

• Acknowledgment: Within 24 hours of request

• Processing: Within 30 days for standard requests

• Complex Requests: Up to 90 days with explanation

• Completion Notification: Confirmation when deletion is complete

4. Data Categories and Deletion Procedures

4.1 Account Information

Data Included:

• Name and email address

• Authentication credentials

• Profile information and preferences

• Account settings and configurations

Deletion Process:

• Immediate removal from active databases

• Firebase Authentication account deletion

• Firestore document removal

• Backup system purging within 30 days

4.2 User-Generated Content

Data Included:

• Testimony drafts and saved content

• Chat history and AI interactions

• Bookmarks and favorites

• Notes and personal annotations

Deletion Process:

• Immediate removal from user interface

• Database record deletion within 24 hours

• AI query anonymization (already implemented)

• Content backup removal within 30 days

4.3 Usage and Analytics Data

Data Included:

• Service usage patterns

• Feature interaction data

• Performance metrics

• Error logs and diagnostics

Deletion Process:

• Personal identifiers removed immediately

• Anonymized data may be retained for analytics

• Raw usage logs deleted within 90 days

• Aggregated data remains anonymized

4.4 Technical Data

Data Included:

• IP addresses and device information

• Browser and system details

• Cookies and tracking data

• Session information

Deletion Process:

• Session data cleared immediately

• Device information removed within 7 days

• IP address logs deleted within 30 days

• Cookies expired or deleted

5. Firebase/Firestore Deletion Procedures

5.1 Authentication Data

• Firebase Authentication user deletion

• Associated tokens and credentials revoked

• Third-party authentication links removed

• Security keys and recovery information deleted

5.2 Database Records

• Firestore document deletion

• Subcollection and nested data removal

• Index updates and cleanup

• Reference integrity maintained

5.3 Storage Files

• Cloud Storage file deletion

• Media and document removal

• Backup file purging

• CDN cache clearing

5.4 Backup and Recovery Systems

• Backup data identification and removal

• Point-in-time recovery cleanup

• Disaster recovery system updates

• Archive system purging

6. Deletion Verification and Confirmation

6.1 Pre-Deletion Verification

• User identity confirmation

• Account ownership verification

• Request authenticity validation

• Legal basis assessment

6.2 Deletion Execution

• Systematic removal across all systems

• Database integrity maintenance

• Service functionality preservation

• Error handling and logging

6.3 Completion Confirmation

• User notification of completion

• Deletion report generation

• Audit trail documentation

• Quality assurance review

7. Exceptions and Limitations

7.1 Legal Retention Requirements

Data may be retained when required by:

• Federal or state legal obligations

• Court orders or legal proceedings

• Regulatory requirements

• Law enforcement requests

7.2 Technical Limitations

• Backup Systems: Up to 30 days for complete removal

• CDN Caching: Up to 72 hours for global propagation

• Third-Party Systems: Dependent on processor deletion timelines

• Anonymized Data: Cannot be deleted if truly anonymized

7.3 Business Necessity

Limited data retention for:

• Fraud prevention and security

• Financial record keeping

• Legal defense purposes

• Regulatory compliance

8. Third-Party Data Deletion

8.1 Google/Firebase

• Coordinate deletion with Google's retention policies

• Ensure compliance with Google Cloud data handling

• Verify deletion across Firebase services

• Maintain documentation of deletion requests

8.2 Authentication Providers

• Google Sign-In data unlinking

• Meta platform authentication removal

• Third-party profile disconnection

• Provider notification of account deletion

8.3 Analytics and Service Providers

• Request deletion from analytics platforms

• Remove data from customer support systems

• Clear marketing and communication databases

• Update third-party processor records

9. Data Recovery and Undeletion

9.1 Recovery Limitations

• Deleted data cannot be recovered after processing

• No backup restoration after deletion completion

• Irreversible nature of deletion process

• Clear communication of permanence

9.2 Grace Period

• 7-day grace period for account deletion requests

• User notification before final deletion

• Option to cancel deletion during grace period

• Immediate deletion available upon request

10. Audit and Compliance

10.1 Deletion Auditing

• Regular audit of deletion procedures

• Compliance verification processes

• System integrity checks

• Documentation review and updates

10.2 Regulatory Compliance

• GDPR Article 17 (Right to Erasure)

• CCPA deletion provisions

• COPPA data deletion requirements

• Other applicable privacy law compliance

10.3 Record Keeping

• Deletion request logs

• Processing timeline documentation

• Completion verification records

• Audit trail maintenance

11. User Support and Assistance

11.1 Deletion Guidance

• Step-by-step deletion instructions

• FAQ and help documentation

• Video tutorials and guides

• Live support for complex requests

11.2 Partial Deletion Options

• Selective data category deletion

• Content-specific removal

• Historical data preservation options

• Granular privacy controls

12. Contact Information

For data deletion requests or questions:

Primary Contact:info@goodgov.ai
Data Protection Officer:dpo@goodgov.ai
Phone: (301) 531-4723
Address: 5557 Baltimore Ave, Ste. 500-1022, Hyattsville, MD 20781

13. Policy Updates

This policy will be updated to reflect:

• Changes in legal requirements

• Technology and system updates

• User feedback and needs

• Best practice evolution

We are committed to providing clear, accessible, and comprehensive data deletion services that respect user privacy and comply with applicable laws.