Privacy policy

This policy explains how Gugab handles personal data. Gugab is provided by SHOVVA LTD (“we”, “us”), 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Contact us about privacy at support@gugab.com.

Who is responsible

For your own account (as a business using Gugab) and for visitors to this website, we are the controller. For the details of your customers that you add to quotes, you are the controller and we are your processor.

What we collect

• Your account: name, email, password (stored hashed), business name, contact details, logo, settings and plan.
• Quotes and customers: what you add, such as customer names, email addresses, phone numbers, company names, job addresses and the items on your quotes.
• When customers respond: the name they type to accept, any message they send, and the time. To help settle disputes we keep a one-way hash of their IP address and their browser type.
• Payments: handled by Stripe. We receive payment status and amounts, never full card details.
• Emails we send: recipient, subject, time and whether it was delivered.
• This website: server logs kept by our host for security. We don’t use advertising or analytics cookies.

Why we use it

• To provide the service you signed up for (contract).
• To take payments and keep financial records (contract and legal obligation).
• To keep the service secure and prevent abuse (legitimate interests).
• To send service emails such as notifications and receipts. We don’t send marketing emails without your consent.

Who we share it with

Only the providers we need to run the service, under contracts that protect your data:

• IONOS for hosting and backups (Germany).
• Stripe for subscriptions and deposits.
• Resend (Plus Five Five, Inc.) for sending email.
• Your browser’s push service (Apple, Google, Microsoft or Mozilla), only if you turn on notifications: it delivers them to your device, and their content is encrypted so it can’t read them.
• Postmark (ActiveCampaign) for sending email, where enabled.
• Cloudflare for custom domains, where you use one.

Where data is transferred outside the UK, we rely on adequacy regulations or standard contractual clauses.

How long we keep it

We keep your account data while your account is open. When you delete your account, your business data, quotes and customer details are deleted straight away; backups are overwritten within [30] days. We keep payment records for as long as the law requires.

If you use Gugab for your business, you can also remove one customer at any time in Settings, Account. Their contact details, messages and unpaid quotes are deleted. Quotes they paid for are kept as your financial records, with nothing left on them that says who they were for.

Cookies

We use only essential cookies: the ones that keep you logged in to the app. We don’t use advertising or analytics cookies, and we don’t set cookies when a customer opens a quote. The details are in our cookie policy.

Your rights

You can ask to access, correct, delete or move your data, or object to how we use it. Most of this you can do yourself: download your data or delete your account in Settings, Account. If you’re a customer of a business that uses Gugab, please contact that business first: it decides what is held about you and can correct or remove it in the app, and we’ll help it respond. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Changes

We’ll update this policy when our practices change and show the date at the top.