Privacy Policy

For your account details (your name, email, login) Gudvins is the data fiduciary. For the business content you put into your workspace— leads, contacts, companies, deals, and anything imported from a Google Sheet, which may include personal data about your customers — you are the data fiduciary and Gudvins is a data processor acting only on your instructions.

• Account: your name, work email, hashed password (or Google sign-in), and the workspace you create.
• Workspace content: the records you or your team enter or import — names, phone numbers, emails, budgets, notes, and similar fields.
• Google connection: if you connect Google Sheets, the email address of that Google account, an access/refresh token, and the contents of the one spreadsheet you explicitly pick.
• Usage & logs: IP address, browser type, pages viewed, timestamps, and error diagnostics, kept for security and debugging.
• Cookies: a session cookie to keep you logged in. We do not use advertising or third-party tracking cookies.

The Google Sheets connector uses the drive.file scope, so Gudvins can only ever see the individual spreadsheet you choose in Google’s file picker — nothing else in your Drive.

We use that spreadsheet’s data solely to copy rows into your Gudvins workspace as leads, on the schedule you set. We do not sell it, use it for advertising, or use it to train generalised AI models. No human reads it except (a) with your explicit consent for support, (b) where needed for security or to comply with law, or (c) in aggregated, de-identified form.

Gudvins’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect Google at any time from Settings → Google Sheets sync, or revoke access at myaccount.google.com/permissions.

• To run the Service — store your records, sync sheets, score leads, show reports.
• To secure the Service — detect abuse, debug, keep backups.
• To support you when you contact us.
• To send essential service messages (e.g. security or billing notices). No marketing email without opt-in.
• To meet legal obligations.

We do not sell personal data.

• Supabase — database and authentication hosting (region: Mumbai, India).
• Vercel — application hosting and delivery.
• Google — Sheets and Drive APIs, only for the connector you enable.

Each processes data only to provide infrastructure to Gudvins. Some processing may occur outside India under contractual safeguards.

We keep workspace data while your workspace is active. If you delete your workspace, we remove it from live systems immediately and from encrypted backups within 30 days. Access and refresh tokens are deleted as soon as you disconnect Google. Logs are kept up to 90 days.

All traffic is encrypted with TLS. Google refresh tokens are encrypted at rest with AES-256-GCM. Every workspace’s data is isolated by row-level security so one customer can never read another’s. Access to production is limited and logged.

You can access, correct, export, or delete your data. Most of this is self-serve: edit records in the app, use Settings → Export for a full JSON copy, and Settings → Delete workspace to erase everything. For anything else, or to raise a grievance, email hello@gudvins.in and we will respond within 30 days. If your data was added to a workspace by a company you deal with, contact that company (the data fiduciary) first; we will assist them.

The Service is for businesses and is not directed to anyone under 18.

We will post any change here and update the date above. Material changes will also be notified by email or in-app.

Gudvins Tech — hello@gudvins.in