Privacy Policy

1. Data we collect

• Account data you provide: name, email, password (stored hashed), and practice details such as practice name and your role.
• Payment data: when you subscribe, payments are handled by Stripe. We do not store your full card number; we receive limited billing information (such as country, the last four digits, subscription status, and any VAT/tax ID you enter) from Stripe.
• Usage data: content you view or complete, progress, saved items, and similar in-product activity.
• Technical data: IP address, device and browser information, and cookies strictly necessary to keep you signed in.
• Communications: messages you send us, and email engagement (such as opens and clicks) where you have subscribed to our emails.

2. How we use your data

• to provide, maintain, and secure the Service and your account;
• to process payments, manage your subscription, and apply the correct taxes;
• to respond to your requests and provide support;
• to send service and account emails, and, with your consent or as otherwise permitted, marketing emails you can unsubscribe from at any time;
• to improve the Service and understand how it is used;
• to comply with legal obligations and enforce our terms.

3. Legal bases (where GDPR/UK GDPR applies)

We rely on: performance of our contract with you (to provide the Service and process payments); our legitimate interests (to secure and improve the Service, and to send business-to-business communications); your consent (for certain marketing, which you can withdraw at any time); and compliance with legal obligations (such as tax and accounting).

4. Who we share data with

We share personal data only with service providers who process it on our behalf, including:

• Supabase (authentication and database hosting);
• Vercel (application hosting);
• Stripe (payments, billing, and tax);
• Resend (transactional and account email);
• Beehiiv (newsletter and marketing email, where you subscribe).

We do not sell your personal data. We may disclose data if required by law, to protect our rights, or in connection with a business transfer.

5. Cookies

We currently use only cookies that are strictly necessary to keep you signed in and to secure the Service. We do not use advertising cookies. If we introduce analytics or other non-essential cookies, we will update this policy and provide any consent controls the law requires.

6. International transfers

We and our providers may process data in the United States and other countries. Where we transfer personal data out of the UK, EEA, or other regions with transfer restrictions, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

7. Data retention

We keep personal data for as long as your account is active and as needed to provide the Service, then only as long as necessary to meet legal, tax, accounting, and dispute-handling obligations. When no longer needed, we delete or anonymise it.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, and residents of the UK/EEA have rights under the GDPR, including the right to complain to a supervisory authority. To exercise any right, email support@guideable.me. We will respond within the time the law requires.

9. Security

We use technical and organisational measures to protect personal data, including encryption in transit, access controls, and reputable infrastructure providers. No system is perfectly secure, but we work to protect your data and to notify you and the relevant authorities of a breach where the law requires.

10. Children

The Service is intended for business users and is not directed to children under 16. We do not knowingly collect data from children.

11. Changes and contact

We may update this policy from time to time and will post the new version here with an updated date. For any privacy question or request, contact:

Guideable, operated by Brendon Macdonald
Email: support@guideable.me