Privacy Policy

Go4Wood LLC, 1925 Rock Hill Rd, Eastover, North Carolina 28312, United States, is the controller of personal information collected through go4wood.com. For anything in this policy, write to [email protected].

Information you give us

• Account: email address and password (stored hashed by our authentication provider), display name, avatar, and any profile or gallery description you add.
• Content you post: project photos, portfolio items, build journals, forum threads and posts, comments, store reviews, marketplace listings and their images, and files you upload.
• Messages: direct messages you send to other members. These are stored so they can be delivered and shown in your inbox. They are not end-to-end encrypted; an administrator can access them where necessary to investigate a report of abuse or to comply with law.
• Tools you use: project estimates, cost-tracker projects, cut lists, shop-time entries, and similar working data you enter.
• Support: what you send us through the contact form or by email.

Information collected automatically

• Usage events: which content and tools you view, whether you clicked a membership prompt, and whether you started checkout. We use this to understand what is working, not to build advertising profiles.
• Technical data: IP address, browser and device type, and timestamps, from ordinary web server logs and from our rate limiting, which exists to stop abuse.
• Error reports: when something breaks, we may capture the error, the page it happened on, and your account ID so we can fix it.

Payment information

Card details go directly to Stripe and are never stored on our servers. We keep the customer and subscription identifiers Stripe returns, your plan, and your billing status, so we know what access to give you.

• To operate your account and give you the access your membership includes.
• To display the content you choose to publish, to the audience you chose.
• To take payment, manage renewals, and handle refunds and disputes.
• To send service email — sign-in and password resets, message and comment notifications, receipts, and important changes to the Service.
• To keep the site safe: moderation, investigating reports, preventing spam and fraud, and enforcing our terms.
• To understand aggregate usage and improve the product.
• To meet legal and tax obligations.

If you are in the EU or UK, our legal bases are performance of a contract (running your account), legitimate interests (security, abuse prevention, product improvement), consent (where we ask for it), and legal obligation.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We use a small number of processors who handle data on our behalf:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting and content delivery.
• Stripe — payment processing and subscription billing.
• Resend — transactional email delivery.
• Google Maps — map display on the store locator. Loading a map involves Google receiving your IP address and is subject to Google’s own privacy policy.

We also share information where the law requires it, to protect our rights or someone’s safety, and — if the business is ever sold or merged — with the acquirer, who would remain bound by this policy.

Anything you choose to publish (profile, gallery, forum posts, marketplace listings) is visible to other members or the public, depending on the surface. Treat it as public.

We use cookies that are necessary for the site to work: keeping you signed in, remembering your theme, security, and — where you arrived through an affiliate or campaign link — remembering that referral so it can be credited correctly.

We do not use third-party advertising or cross-site tracking cookies. You can clear or block cookies in your browser, but signing in will not work without the essential ones.

Account and content data is kept while your account is open. If you deactivate, we retain your data so the account can be restored. Billing records are kept as long as tax and accounting law requires (generally seven years). Server and security logs are kept for a short period. Backups are cycled out on a rolling basis, so removed data can persist in backups briefly after it is taken off the live system.

You can view and edit your profile in your account settings, and delete content you have posted.

You can turn off notification emails from your settings. Security and billing email cannot be turned off while your account is open.

If you have a question or a concern about how we handle your information, email [email protected] or use the contact form.

Traffic is encrypted in transit. Access to member data is restricted at the database level by row-level security, and administrative access is limited to accounts that need it. No system is perfectly secure; if a breach affects your personal information we will notify you and any regulator as required by law.

The Service is not intended for anyone under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.

We operate in the United Statesand our providers may process data in the United States and elsewhere. Where personal information moves out of the EEA or UK, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses.

If we make a material change we will give notice on the site or by email before it takes effect. The “last updated” date above always reflects the current version.