Data responsibility

Use only the data a support workflow needs

Goodwin CRM is designed around limited, documented support use cases for authorized Facebook Pages. This overview explains the product’s data-handling principles alongside the effective privacy notice.

Handling principles

Keep customer context tied to a defined purpose

Data handling is reviewed against the actual service, relevant provider relationships, retention needs, and applicable legal obligations.

Purpose limitation

Use eligible Page and conversation context only for the documented, human-led support workflow for which access was authorized.

Access boundaries

Limit workspace access to approved team members and separate existing private-beta connections from unverified external onboarding.

Deletion and disconnection

Treat revoking Meta authorization and requesting deletion as distinct actions, with identity and authority verified before a request is fulfilled.

Lifecycle review

Document the path through the service

A release-ready data map should identify what data enters the service, why it is needed, where it is processed, who can access it, how long it is retained, and how a request moves through deletion or correction.

This overview does not invent provider names, storage locations, or transfer terms. The privacy notice states the information currently available for publication, and operational records should remain aligned with the service as it changes.

Inquiry hygiene

Do not send sensitive payloads through a contact form

The inquiry endpoint accepts a limited set of text fields and never accepts attachments. Messages should not contain customer conversations, passwords, access tokens, credentials, or other secrets.

The contact form clearly shows whether inquiry delivery is available. When available, anti-abuse and delivery controls apply; attachments and sensitive payloads are not accepted.

Connect product behavior to reviewed disclosures

The effective privacy notice describes inquiry data, authorized support context, service-provider categories, retention principles, and user choices.