Goodsift collects only the information needed to operate brand applications, reviews, risk reports, login, payments, and analytics.
Evidence attachments for risk reports are private by default and are not published as original files.
Automated brand icons and product visuals may be resolved from public or configured sources with fallback behavior when an asset cannot load.