Privacy Policy

Effective October 23, 2026

This policy describes how Common Good Labs handles personal information through our website and partner portal. It does not describe separate research datasets or project-specific data governed by other agreements.

Information we collect

When you submit a form, we receive the information you provide, such as your name, email address, organization, city interests and responses. When you use the partner portal, we process account identifiers, contact information, organization membership, access permissions and activity needed to operate the service.

If you choose Google sign-in, Google and our authentication provider, WorkOS, provide basic identity information, such as your account identifier, email address and profile information. This sign-in integration does not request access to your Gmail messages, Google Drive files or contacts.

Our hosting and security services process technical information, such as IP addresses, browser information, requests and security events. Cookies and similar technologies support sign-in, session management and abuse prevention.

How we use information

We use information to respond to inquiries, manage requested newsletter and event communications, authenticate users, provide authorized research access, administer organizations and articles, protect our services and troubleshoot problems.

Service providers and sharing

We use providers including Webflow for website hosting and forms, WorkOS for authentication, Cloudflare for hosting, storage and security, and email services to deliver communications. Information is processed by these providers as needed to supply their services. Authorized Common Good Labs team members receive form submissions and administer portal access. We may disclose information when required by law or necessary to protect rights and security.

Website analytics and embedded content

The public website may use Google Analytics to understand website use. The partner portal is configured to exclude authenticated research pages from that analytics integration. Embedded maps and other third-party content may connect your browser to their providers, which process information under their own privacy policies.

Retention and security

We retain information for the purposes described in this policy, including service operation, security, backups and applicable legal obligations. Retention varies by information type and purpose. We use access controls and other safeguards to protect information, but no system can guarantee absolute security.

Your choices and requests

You can unsubscribe from newsletters using the instructions in those messages. To request access, correction or deletion of personal information, or ask a privacy question, contact info@commongoodlabs.com. We may need to verify your identity and may retain information where required or permitted by applicable law. You can also manage Google account connections through your Google account settings.

Changes to this policy

We may update this policy as our services or practices change. The published policy will show its effective date.