Privacy policy

Companies use GuideBerry to train their people and keep their policies. For the content a company puts in GuideBerry and the records of its people's training, that company is the controller and we process the data on its behalf, under our agreement with it.

For the details of people who sign up, contact us or visit our website, we are the controller.

Account details: your name, work email address and sign-in details. Passwords are handled by our sign-in provider and we never see them.

Company details: the company's name, logo, groups, roles and locations.

People's details, added by their company: name, work email, role, team, location, manager and, if they add one, a photo.

Training content: the subjects, pages, files, videos and quizzes a company writes or uploads.

Training records: which pages each person has read, their quiz answers and scores, and their signatures, each kept with the date, the version of the document and a fingerprint of its content.

Comments and questions people post under a page, with their name and the time, which everyone who can read that page can see.

Text sent to our AI features, when someone uses them to draft a page or suggest quiz questions.

Technical data needed to run and protect the service, such as device and browser type and server logs.

To provide GuideBerry: to sign people in, show them their training, record their progress and signatures, send reminders and show managers and owners their reports.

To keep the service secure, prevent abuse and fix problems.

To answer questions and give support.

To improve GuideBerry, using information about how the service performs.

We do not sell personal data, we do not show advertising, and we do not use a company's content to train AI models.

When someone uses AI writing or asks AI a question, the text they enter, and the page text needed for the request, is sent to Anthropic, our AI provider, to produce a draft or an answer. Anthropic does not use it to train its models. Nothing the AI produces is saved unless the author chooses to keep it.

Google Cloud and Firebase host the service: sign-in, the database, file storage and the website. Data is stored in the United States.

Anthropic provides the AI features.

Mux stores uploaded videos and streams them to viewers.

Resend sends our emails, such as training reminders. It receives the recipient's name and email address and the text of the email.

Before we use any other provider that handles personal data, for example for payments, we will add it to this list.

Each provider may use the data only to provide its service to us, under a written agreement.

Our providers store and process data in the United States and possibly other countries. Where the law requires it, we rely on safeguards such as the European Commission's standard contractual clauses.

We keep a company's data for as long as it uses GuideBerry.

When a person deletes their own account, their sign-in is removed. Their training records stay with their company, as part of the company's records.

When an owner deletes the company, all of its data is deleted. Copies in our backups are removed within [number] days.

Every company's data is kept apart from every other company's, and automated tests check this on every change we make. Data is encrypted in transit and at rest, and access within our team is limited to what each person needs.

We do not use advertising or tracking cookies. Your browser stores your sign-in so you stay signed in, and the point where you stopped a video so it can resume. You can clear these at any time in your browser.

Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or limit how it is used, and to receive a copy of it.

If your data is in GuideBerry because of your employer, please ask your employer first: they decide how it is used, and we will help them answer you.

For anything else, or if you are not satisfied, write to us. You can also complain to your local data protection authority.

GuideBerry is for work and is not meant for anyone under 16.

If we change this policy, we will update the date at the top, and tell account owners before any important change takes effect.

Questions about privacy: [contact email]. Post: [Company legal name], [registered address].