How Good Fortune Agency LLC handles your information when you use our website and the Vroom service. Includes our disclosures for Google API data and Limited Use requirements.
Effective date: May 11, 2026 · Last updated: May 11, 2026
Good Fortune Agency LLC ("Good Fortune", "we", "us") is a Texas limited liability company headquartered at 11333 Chimney Rock Rd, Houston, TX 77035, USA. We operate this website and the Vroom service (a marketing reporting and RFP intake tool that connects to your Google accounts).
For any privacy question, write to privacy@goodfortune.agency.
Account information. When you create a Vroom account, we collect your name, email, hashed password, and company name.
Google API data. When you connect a Google account to Vroom, you authorize us to access specific data under the scopes you approve:
– Google Ads (auth/adwords): campaign IDs, spend, clicks, conversions, ROAS.
– Search Console (auth/webmasters.readonly): queries, impressions, CTR, average position.
– Business Profile / GMB (auth/business.manage): reviews, calls, profile views, and photo metadata.
– Google Analytics (auth/analytics.readonly): sessions, conversions, source/medium, and custom dimensions you expose.
– Gmail (auth/gmail.readonly + auth/gmail.modify): message headers, body, and attachment metadata only for messages matching the filters you define (for example, your RFP intake mailbox), ingested via Google's Pub/Sub watch. We use gmail.modify solely to apply Vroom labels (e.g., "Vroom: Processed") to those matched messages — we do not send, draft, forward, or delete email on your behalf.
Site analytics. On goodfortune.agency we use Google Analytics 4 to understand which pages are useful. The marketing site does not require an account.
Cookies and device info. Standard session cookies plus analytics cookies. You can disable them in your browser without breaking the site.
We use the information above to (a) provide and improve the Vroom service, (b) deliver the reports you request, (c) authenticate you and keep your account secure, and (d) investigate abuse or security incidents.
We do NOT:
– use your information for advertising;
– sell, rent, or license your information to third parties;
– use your information to train artificial intelligence or machine learning models;
– allow humans to read your Google data, except for security and abuse investigations, to comply with applicable law, or when you explicitly request our support team to review specific records.
Vroom's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In plain English: we only use Google data to deliver user-facing features in Vroom (the reports you ask for and the RFP intake you configure). We don't transfer Google data to third parties except to subprocessors strictly necessary to operate the service or as required by law. We don't use Google data for advertising, training, or human reading except as listed in the section above.
We rely on a small set of vendors to operate Vroom. Each is bound by data processing terms equivalent to ours and is located in the USA:
– Render Services, Inc. — application hosting.
– MongoDB Atlas (MongoDB, Inc.) — primary database.
– Vercel Inc. — marketing site and static hosting.
– Google LLC — source of the authorized API data.
We update this list whenever a new subprocessor is engaged. Email privacy@goodfortune.agency to receive material change notices.
– Raw Gmail content (subject, body, attachments) is retained for 30 days, then aggregated or redacted.
– Aggregated metrics (counts, totals, derived KPIs) are retained while your account is active.
– On account deletion, all your personal data and Google-sourced data is purged within 30 days from our production and backup systems.
You can revoke Vroom's access to your Google data at any time at myaccount.google.com/permissions and via the in-app "Disconnect Google" button. Revocation stops new ingestion immediately; historical data is purged on the retention schedule above.
TLS 1.2+ in transit. Encryption at rest provided by MongoDB Atlas. OAuth refresh tokens are scoped, rotatable, and encrypted in the database. Internal access follows least-privilege role separation. We will commission an independent CASA security assessment once Vroom exits limited testing and serves a broader user base, in line with Google's annual review requirements for restricted scopes.
Depending on where you live (California, EEA/UK, Texas, or another jurisdiction with a data protection law), you have rights to access, correct, delete, port, and object to or restrict our processing of your personal information. To exercise any of these rights, email privacy@goodfortune.agency. We respond within 30 days.
We do not sell personal information as that term is defined under CCPA / CPRA.
Vroom is a B2B tool and is not directed at children. We don't knowingly collect personal information from children under 13 in the US (or under 16 in the EEA).
We will post material changes to this page at least 30 days before they take effect, and notify active users by in-app banner and email to the address on file.
Privacy questions: privacy@goodfortune.agency
Mail: Good Fortune Agency LLC, 11333 Chimney Rock Rd, Houston, TX 77035, USA
Terms of service: /terms
