Security

Your business data stays yours, and stays protected

Here’s exactly how GoodTaco protects the apps you build and the records in them: who can sign in, where your data lives, and what we never do with it.

  • Encrypted

    In transit and at rest

  • Never used to train AI

    By us or our AI providers

  • You choose who gets in

    Private apps on Pro

  • Backed up automatically

    Plus every app version saved

Signing in to GoodTaco

  • Sign in with your Google account, or with your email address and a password.
  • Your password is stored scrambled, never as the password itself.

Who can see and change your apps

  • Want an app only your team can open? Make it private on Pro or Enterprise. People sign in with Google or an emailed link before they see any data, and only the people or roles you choose get in.
  • Apps on Free and Hobby are public: anyone with the link can open them.
  • On Pro and Enterprise, you choose what each teammate can do: manage the team, edit apps, or only see the apps you share with them.

Your connected tools

  • Google Sheets, Airtable, QuickBooks and your other tools connect through their own sign-in, so you never give us their passwords.
  • GoodTaco sees only the Google Sheets you pick or that your apps create, never the rest of your Google Drive.
  • When an app sends email from your Gmail, GoodTaco gets permission to send only. We can’t read, search, change or delete your email, and we don’t keep copies of what your apps send.
  • The access your tools give us is stored encrypted and used only by GoodTaco’s servers to run your apps. The AI assistant that builds your apps never sees your Google access.
  • Disconnect a tool in GoodTaco whenever you like. You can also remove GoodTaco’s access to Google in your Google Account.
Manage your Google permissions

Where your data lives

  • GoodTaco runs on Amazon Web Services and Cloudflare, with the other providers on our sub-processors list.
  • Your data travels over encrypted connections and is encrypted at rest with our cloud providers.
  • If your app runs on a Google Sheet, your records stay in that sheet, in your own Google account.
See every company that helps us run GoodTaco

Your data and AI

  • We don’t use your content to train or fine-tune AI models, and our AI model providers don’t use it to train theirs.
  • The AI assistant builds each app in its own isolated workspace.

Backups and versions

  • Records in GoodTaco databases are backed up automatically by our hosting providers. Apps on a Google Sheet keep their records in your sheet.
  • Every change to an app is saved as a new version, and you choose which version your team uses. If a change isn’t right, publish the one before it.

Deleting your data

  • Close your workspace or account and we delete its apps and content within 30 days.
  • Tried GoodTaco with a spreadsheet and didn’t keep the app? We delete the app and your file after 24 hours.

If something goes wrong

  • If we confirm a breach that affects your data, we tell you without undue delay, and regulators where the law requires it.

Security questions?

Does your IT person or insurer have questions? Send us their security questionnaire at compliance@goodtaco.ai and we’ll answer it.

Build your app on GoodTaco, free

Turn a spreadsheet or an idea into an app your team can use. No credit card needed.

Start free