Privacy Policy

For your account details (your name, email, login) Gudvins is the data fiduciary. For the business content you put into your workspace — leads, contacts, companies, deals, and anything imported from a Google Sheet, which may include personal data about your customers — you are the data fiduciary and Gudvins is a data processor acting only on your instructions.

• Account: your name, work email, hashed password (or Google sign-in), and the workspace you create.
• Workspace content: the records you or your team enter or import — names, phone numbers, emails, budgets, notes, and similar fields.
• Google connection: if you connect Google Sheets, the email address of that Google account, an access/refresh token, and the contents of the one spreadsheet you explicitly pick.
• Usage and logs: IP address, browser type, pages viewed, timestamps, and error diagnostics, kept for security and debugging.
• Cookies and advertising: a session cookie to keep you logged in, and — if you arrive from an advertisement — the campaign parameters in that link, so we can tell which campaigns work. We also use the Meta Pixel on gudvins.in and on our signup pages to measure which adverts lead to a signup. It records page views and whether you signed up, and Meta may match that to your Facebook or Instagram account. You can stop it with any tracker-blocking browser or extension, or through Meta ad preferences. The pixel never runs inside your workspace, so your leads and customers are never sent to Meta.

The Google Sheets connector uses the drive.file scope, so Gudvins can only ever see the individual spreadsheet you choose in Google's file picker — nothing else in your Drive.

We use that spreadsheet's data solely to copy rows into your Gudvins workspace as leads, on the schedule you set. We do not sell it, use it for advertising, or use it to train generalised AI models. No human reads it except (a) with your explicit consent for support, (b) where needed for security or to comply with law, or (c) in aggregated, de-identified form.

Gudvins's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect Google at any time from Settings → Google Sheets sync, or revoke access at myaccount.google.com/permissions.

• To run the Service — store your records, sync sheets, score leads, show reports.
• To secure the Service — detect abuse, debug, keep backups.
• To support you when you contact us.
• To send essential service messages (for example security or billing notices). No marketing email without opt-in.
• To meet legal obligations.

We do not sell personal data.

• Supabase — database, authentication and file storage, in the AWS Mumbai region (ap-south-1).
• Vercel — application hosting and delivery, from their Mumbai region (bom1).
• Cloudflare — this marketing website, DNS, and email forwarding for our own addresses.
• Google — Sheets and Drive APIs, only for the connector you enable.
• Meta (Facebook) — advertising measurement on our public pages only, never inside a workspace.

Each processes data only to provide infrastructure to Gudvins. Your workspace records are stored in India; some operational metadata (such as logs) may be processed outside India under contractual safeguards.

We keep workspace data while your workspace is active. If you delete your workspace, we remove it from live systems immediately and from encrypted backups within 30 days. Access and refresh tokens are deleted as soon as you disconnect Google. Logs are kept up to 90 days.

All traffic is encrypted with TLS. Google refresh tokens are encrypted at rest with AES-256-GCM. Every workspace's data is isolated by row-level security so one customer can never read another's. Access to production is limited and logged. There is more detail, including what we have not done yet, on our security page.

You can access, correct, export, or delete your data. Most of this is self-serve: edit records in the app, use Settings → Export for a full copy, and Settings → Delete workspace to erase everything. For anything else, or to raise a grievance, email hello@gudvins.in and we will respond within 30 days. If your data was added to a workspace by a company you deal with, contact that company (the data fiduciary) first; we will assist them.

The Service is for businesses and is not directed to anyone under 18.

We will post any change here and update the date above. Material changes will also be notified by email or in-app.

Gudvins Tech — hello@gudvins.in