Privacy Policy

GoCheckLog is operated by GoCrewIT LLC, Chicago, IL. Journey Monitor is a GoCheckLog module. Contact: Michael Drayton, WhatsApp +1 773 234-3045.

When you create an account we collect your email address and a password. The password is stored by our authentication provider as a hash — we do not store or have access to your password itself. We record when your account was created and when your email address was confirmed.

When you connect a HighLevel location, Journey Monitor reads records from that location in order to reconstruct a customer journey: contacts, opportunities, conversations, messages and calendar events.

Inspection results are not stored by GoCheckLog. Records are read from HighLevel when you run an inspection and returned to your browser. We do not keep a copy of the HighLevel records an inspection examined.

GoCheckLog requests five read-only HighLevel scopes and refuses a connection that grants anything beyond them. We do not request, and cannot exercise, permission to create, edit or delete records in your HighLevel location.

The access and refresh tokens HighLevel issues for your connection are encrypted with AES-256-GCM before being stored. The encryption key is held only by the running application and is never stored in the database.

You can disconnect a location at any time from your account page, which deletes our stored copy of those credentials. Disconnecting does not uninstall the application inside HighLevel; to revoke access fully, also remove the app from the location in HighLevel.

GoCheckLog does not receive, process or store your card details. Payment is handled by the payment provider through which you purchase — the HighLevel Marketplace, or Stripe where a direct subscription is offered. We store a record of your subscription status so we know what your account is entitled to; we do not store card numbers.

Not yet finalized. The final list of payment providers depends on which purchase paths are live at launch.

GoCheckLog uses the following providers. Each processes data on our behalf in order to operate the service.

• Railway — hosts the GoCheckLog application. Requests you make to the application are served from it.
• Supabase — stores your account record and password hash, your encrypted HighLevel credentials, and your subscription and entitlement records. It also provides the sign-in and email-confirmation mechanism.
• Cloudflare — provides DNS and content delivery for our websites, and operates the authentication gate in front of the application during the invite-only period. That gate sees the email address of anyone who signs in through it.
• HighLevel — is the source of the records an inspection reads, and the processor of payments for a Marketplace purchase. HighLevel handles billing, refunds and cancellation under its own terms.
• Stripe — is configured for a direct purchase path that is not currently live. It processes no customer data today. If that path opens, this policy will say so before it does.

We do not sell personal information, and we do not share it with anyone for advertising.

Not yet finalized. The sender used for account and confirmation emails has not been confirmed — it is either Supabase’s own email service or a separate mail provider. It will be named here once established.

Access to your data is isolated at the database level by row-level security, so records belonging to one account are not reachable from another. Which HighLevel location an inspection reads is determined on the server from your authenticated session.

No system can be guaranteed secure. This section describes the measures we take; it is not a warranty that a breach cannot occur.

Inspection results are never stored, so there is nothing to retain from an inspection. What we hold is your account record, your subscription and entitlement status, and your encrypted HighLevel credentials if you have connected a location.

When you disconnect a location, the stored credentials for it are deleted immediately. Disconnecting does not uninstall the application inside HighLevel; to revoke access there as well, remove it from the location in HighLevel.

When your account is deleted, your account record, profile, HighLevel connection and credentials, subscription record and entitlement records are deleted with it.

Records of Marketplace and payment events are kept separately and are not deleted with your account. These are the notifications HighLevel and our payment providers send us about installations and payments. They identify a HighLevel location or company rather than you personally, and we keep them as a record that those events happened. Ask us if you want to know what they contain for your location.

Single-use sign-in and connection tokens expire within minutes and are deleted as soon as they are used.

Not yet finalized. We have not set a fixed retention period for account, billing or event records — today they are kept until deleted rather than expiring on a schedule. Self-service account deletion is not yet available; deletion is performed on request, using the contact details below.

You may ask us to give you a copy of the personal information we hold about you, to correct it if it is wrong, or to delete your account and the information attached to it.

Email [email protected] from the address on your GoCheckLog account and say what you want done. Writing from your account address is how we know the request is yours; if you cannot, we may ask you something only the account holder would know rather than act on an unverified request.

We respond within 30 days. If a request is complex enough that we need longer, we will tell you within those 30 days and explain why.

Deleting your account is permanent. We will tell you what will be removed and what will not — see the retention section above — before we do it.

Not yet finalized. Privacy rights and response obligations vary by jurisdiction, and the jurisdiction-specific sections of this policy have not been drafted. The commitment above applies to everyone regardless.

The GoCheckLog application uses cookies that are necessary for you to stay signed in. It does not set advertising cookies.

Not yet finalized. Whether analytics will be used on this marketing site, and which provider, has not been decided. This section will state exactly what is in use before any analytics is added.

We may update this policy as the product changes. When we do, we will update the date below. Material changes will be communicated to account holders.

Michael Drayton
GoCrewIT LLC
Chicago, IL
WhatsApp: +1 773 234-3045

For anything about this policy, or to make a request under the section above, email [email protected].