Privacy Policy
This policy explains what Guuds itself collects about the merchants who use it and the visitors to guuds.guud.ai. It is not the privacy policy of any shop built with Guuds — each store publishes its own for its shoppers.
1. Who is responsible
Guuds, the operator of guuds.guud.ai, is the controller of the personal data described here. For the customer data inside your store you are the controller and Guuds is your processor: we handle it only on your instructions to run your shop.
2. What we collect
Account data: your name, email address, password (stored hashed, never in clear) and the workspaces you belong to.
Billing data: the plan you chose and the PayPal subscription reference. We never see or store your card or bank details; PayPal and Stripe hold those under their own policies.
Store data: everything you put in your store, including your customers’ orders and contact details, which we process for you.
Usage data: the pages you visit on guuds.guud.ai and the features you use in the admin, recorded by our own first-party beacon so we can see what works. We do not use third-party analytics or advertising trackers.
Support data: what you send us by email or through the contact form, kept with the lead or ticket it belongs to.
3. Why we use it
To run your account and store, to bill you, to answer support, to send the transactional emails the service needs (welcome, password reset, invoices, receipts), to keep the platform secure, and to improve the product. We send marketing email only if you asked for it and every such email has an unsubscribe link.
4. Who we share it with
Only the providers needed to run the service: Cloudflare (network and hosting edge), PayPal (your subscription), Stripe (payments on your storefront), our transactional email provider, and the guud.ai core services that power the platform. Each processes data under contract and only for that purpose. We do not sell personal data, and we disclose it to authorities only when the law requires.
5. Cookies
Guuds sets a session cookie to keep you signed in and a preference cookie for choices such as your last workspace. Both are first-party and essential; there are no advertising cookies on guuds.guud.ai.
6. How long we keep it
Account and store data is kept while your account is open and for 30 days after you close it so you can export it, then deleted. Billing records are kept for as long as tax law requires. Usage events are kept in aggregate; support messages are kept for two years.
7. Your rights
You can see, correct and export your account data from your profile at any time. You may also ask us to delete it, to restrict how we use it, or to object to a use, and you may complain to your data-protection authority. Write to the address below and we will answer within 30 days.
8. Security
All traffic to Guuds is encrypted in transit, passwords are hashed, access to production data is limited to the people who need it, and store data is backed up daily. No system is perfectly secure; if we learn of a breach affecting your data we will tell you without undue delay.
9. Changes to this policy
We will post any change here with a new effective date and email account holders before a material change takes effect.