Privacy Policy

Information We Collect

We collect the following information when you use Guavy:

• Account & contact info. Email address, subscription plan, and API key.
• App activity & usage. API request history (endpoints, timestamps, response times), daily and monthly usage counts, and session activity.
• Device & browser data. IP address, browser type, operating system, and pages visited. This data may be collected by third-party analytics services (Google Analytics) and advertising tools (X/Twitter) via cookies and similar technologies.
• Notifications. Email preferences to deliver alerts and updates you opt into.
• Purchases & subscriptions. Entitlement status, product identifiers, and metadata via Stripe. We do not store your full payment card details.
• Support & feedback. Messages and attachments you send to our support channels.

We do not collect: bank account credentials, full payment card numbers, or the ability to move your funds.

How We Use Your Information

We use your information to:

• Operate and improve the Services (including personalized alerts and insights).
• Maintain security, prevent abuse, and debug issues (e.g., crash analytics).
• Communicate with you about features, updates, and support.
• Comply with legal obligations and enforce our terms.

If you're in the EEA/UK, our processing is based on: performance of a contract (to provide the Services), legitimate interests (security, analytics, improvements), consent (marketing where required), and legal obligations.

How We Share Your Information

We do not sell your data. We only share it with:

• Service providers (processors): e.g., cloud hosting/database (MongoDB Atlas), subscription/billing infrastructure (Stripe), email delivery (Resend), and CAPTCHA verification (Cloudflare Turnstile). These providers may process data on our behalf under contracts.
• Legal & safety: If required by law or to protect rights, safety, and security.
• Business transfers: In a merger, acquisition, or asset sale, your information may be transferred under continued protection.
• Analytics & advertising: We use Google Analytics to understand how visitors use our website and X (Twitter) conversion tracking to measure the effectiveness of our advertising campaigns. These services may collect information such as IP address, browser type, pages visited, and interactions using cookies or similar technologies. We do not sell your personal information. If we use analytics that could be considered "sharing" under California law, we will disclose that and provide a "Do Not Sell or Share" option.

Data Retention

We keep personal data only as long as necessary to provide the Services and for legitimate business or legal purposes. Typical examples:

• Account data: retained while your account is active and then deleted or anonymized within a reasonable period after closure.
• Crash/diagnostic logs: commonly 30–180 days.
• Backups: retained for limited disaster-recovery windows.

We can provide more detail upon request.

Data Security

We use administrative, technical, and physical safeguards to protect your information, including encryption in transit and at rest. No method of transmission or storage is 100% secure.

Your Rights

Depending on where you live, you may have rights to:

• Access, correct, or delete your personal information.
• Portability (receive a copy in a structured format).
• Object or restrict certain processing.
• Withdraw consent (for example, marketing emails).
• Opt out of sale/sharing (California; we currently do not sell/share).
• Complain to a regulator (e.g., the ICO in the UK, a DPA in the EEA, or the Office of the Privacy Commissioner of Canada).

To exercise your rights, contact us (see "Contact Us"). We may need to verify your identity.

Changes to This Policy

We may update this policy from time to time. We'll post the updated version and revise the "Updated on" date above. If changes are material, we'll provide additional notice.

Contact Us

If you have questions or concerns, please email us at support@guavy.com.