What is GDPR?

The General Data Protection Regulation (GDPR) is a European privacy law that went into effect on May 25, 2018. The purpose of GDPR is to protect the private information of EU citizensand give them more control over their personal data. These regulations ensure that businesses process personal data fairly and lawfully, allow individuals to exercise legal rights over their data (such as access, correction, or deletion), and enforce strong security protections to safeguard stored data.

Who does the GDPR apply to?

The GDPR applies to all businesses and individuals based in the EU, as well as those outside the EU that process the personal data of EU individuals. Personal data, as defined by GDPR, includes any information that can identify a natural person, such as names, email addresses, or IP addresses.

Guidejar as a Data Controller

When you create an account in Guidejar, we collect the following information:

  • Email address (for authentication and communication)
  • Name (for personalization)
  • Photo (optional, for personalization)
  • Billing details (processed securely by our payment processor - Stripe)
  • Usage analytics (to improve the service and provide better support)

Guidejar does not store credit card information. All payment processing is handled by our payment processor - Stripe.

You as a Data Controller

If you use Guidejar to create guides, you may collect end-user data through our forms or custom embeds. As the account owner, you are responsible for ensuring compliance with GDPR when collecting and processing end-user data.

We provide tools that allow you to:

  • Manage collected user data (view, edit, or delete responses)
  • Permanently delete guides and associated data
  • Export your data upon request

Guidejar as a Data Processor

Guidejar processes data on behalf of its customers when they create and share guides. We do not own, share, or sell any user-collected data.

  • Stores guide-related data securely
  • Implements necessary security measures to protect end-user data
  • Allows customers to manage and delete their collected data

Our Subprocessors

To operate the service efficiently, Guidejar uses trusted third-party vendors. Check out the table below for more information.

NamePurposeLocation
Google Cloud PlatformCloud Infrastructure & Data storageUnited States
VercelFrontend hosting & Redis CachingUnited States
CloudflareFile storage and CDNUnited States
ElevenlabsAI voice generationUnited States
SupabaseFull Text SearchUnited States
TinybirdAnalytical databaseEurope
StripePayment processingUnited States
PosthogProduct analyticsUnited States
Google AnalyticsWebsite traffic and usage analyticsUnited States
SendgridEmail sendingUnited States
CrispCustomer supportUnited States

Your Rights Under GDPR

As a Guidejar user, you have the right to:

  • Access your personal data (request a copy of your stored information)
  • Request data deletion (permanently remove your account and data)
  • Modify your personal information (update your name, email, or preferences)
  • Limit data usage (opt-out of marketing communications)

To exercise any of these rights, please contact us at [email protected].

Security and Data Protection

Guidejar follows industry-standard security measures to protect your data from unauthorized access, misuse, or disclosure. In the event of a security breach, we commit to notifying affected users within 72 hours, in compliance with GDPR regulations.

Final Notes

Guidejar is committed to transparency and privacy. If you have any questions regarding GDPR compliance, data handling, or security measures, feel free to reach out to our team at [email protected].