Privacy Policy

1. Introduction

Guffles Inc. ("Guffles," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our intent-based lead discovery platform and related services (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, and company information when you register
• Billing Information: Payment card details, billing address (processed securely by our payment processor, Stripe)
• Profile Information: Job title, industry, and preferences you provide
• Communications: Messages you send to us via email or support channels
• Waitlist Information: Email address when you join our waitlist

2.2 Information Collected Automatically

• Usage Data: Features used, pages visited, actions taken within the Service
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, referring URLs
• Cookies and Similar Technologies: See Section 7 for details

2.3 Information from Third Parties

• LinkedIn Data: Publicly available profile information and engagement data from LinkedIn posts you analyze
• Authentication Providers: Information from Google or other OAuth providers if you choose to sign in with them

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our lead discovery platform
• Account Management: To create and manage your account, process payments
• Communication: To send service updates, security alerts, and support messages
• Analytics: To understand how users interact with our Service and improve it
• Security: To detect, prevent, and address fraud or security issues
• Legal Compliance: To comply with applicable laws and regulations
• Marketing: With your consent, to send promotional communications (you can opt out anytime)

4. Legal Bases for Processing (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, we process your data based on:

• Contract Performance: Processing necessary to provide services you requested
• Legitimate Interests: Processing for our business interests (improving services, security) that don't override your rights
• Consent: Where you have given explicit consent (e.g., marketing emails)
• Legal Obligation: Processing required to comply with applicable laws

5. How We Share Your Information

We do not sell your personal information. We may share data with:

• Service Providers: Third parties that help us operate our Service (hosting, payment processing, analytics)
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law or to protect our rights
• With Your Consent: When you explicitly authorize sharing

Our Service Providers Include:

• Supabase: Database and authentication services
• Stripe: Payment processing
• Vercel: Website hosting
• OpenAI/Anthropic: AI-powered features
• Analytics providers: Usage analytics (PostHog, Google Analytics)

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Account Data: Retained while your account is active and for 30 days after deletion request
• Billing Records: Retained for 7 years as required for tax and legal purposes
• Usage Logs: Retained for 90 days
• Waitlist Data: Retained until you unsubscribe or we launch (whichever is first)
• Lead Analysis Data: Retained for 12 months or until you delete it

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Required for the Service to function (authentication, security)
• Analytics Cookies: Help us understand how you use our Service
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.

8. Your Privacy Rights

8.1 Rights for All Users

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Opt out of marketing communications

8.2 Additional Rights (GDPR - EEA/UK/Switzerland)

• Data portability (receive your data in a structured format)
• Restrict processing
• Object to processing based on legitimate interests
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority

8.3 California Privacy Rights (CCPA/CPRA)

California residents have the right to:

• Know what personal information we collect and how it's used
• Delete personal information
• Opt out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising privacy rights
• Correct inaccurate personal information
• Limit use of sensitive personal information

To exercise these rights, contact us at privacy@guffles.com or use the account settings in your dashboard.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments
• Access controls and authentication
• Secure data centers (via our hosting providers)

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice (e.g., email notification).

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at: