1. Who we are
Guestcrew Ltd. is a company registered in the United Kingdom. References to Guestcrew, we, us, or our in this policy refer to Guestcrew Ltd. and its operating subsidiaries. We are the data controller for personal information processed through guestcrew.com and the workspace application.
2. What we collect
Account data. Name, email, password hash, LinkedIn ID and avatar (when you sign in with LinkedIn), workspace memberships, role assignments, and 2FA recovery codes.
Profile and verification data. Job title, bio, expertise tags, professional links, and the signals used to compute your Authority Score and Badge tier.
Content data. Pitches, queries, drafts submitted to the GEO Simulator, and the resulting analyses. Drafts pasted into the GEO Simulator are processed in memory and not persisted to our database.
Billing data. Plan tier, subscription status, invoice history, and the last four digits of the payment method. Card numbers are handled by Stripe and never reach our servers.
Operational data. Logs, IP addresses, user-agent strings, and event traces required to operate the platform securely.
3. Why we process it
To provide the service you signed up for, to verify identity and reputation signals, to charge subscriptions, to prevent abuse, to comply with legal obligations, and to communicate with you about your account or material product changes.
4. Lawful bases (UK GDPR)
We rely on contract performance for account and billing data, legitimate interest for security and abuse prevention, consent for optional marketing, and legal obligation where applicable.
5. Sharing
We share data with sub-processors who help us run the service: Stripe (payments), our cloud hosting provider, our email provider, our error-tracking provider, and the LLM provider that powers GEO analysis. We do not sell personal data.
6. International transfers
Some of our sub-processors are located outside the UK and EEA. Where required, we use Standard Contractual Clauses or equivalent safeguards.
7. Your rights
You can access, correct, export, or delete your personal data from your account settings. You can also write to [email protected]. We respond within 30 days. You have the right to lodge a complaint with the UK ICO.
8. Retention
Account data is retained for the life of the account. Billing records are retained for seven years to meet UK tax obligations. Operational logs are retained for 90 days unless tied to an active security incident.
9. Children
Guestcrew is not intended for users under 16. We do not knowingly collect data from children.
10. Changes
We will post material changes to this policy on this page and notify account holders by email at least 14 days before they take effect.
11. Contact
Questions about this policy go to [email protected].