Privacy Policy

This Privacy Policy describes how Zendo Home Technologies, LLC ("Zendo," "we," "us") collects, uses, and shares information when you use GuidePix (the "Service"). By using GuidePix you agree to the practices described below.

1. Who this policy applies to

GuidePix is a B2B platform. Our direct customers are organizations ("Operators") that use the Service to manage visual SOPs and verify shift work. Operators invite their own managers and workers ("End Users") onto the platform. Operators are the data controllers of any End User and operational data they put into GuidePix; Zendo acts as a data processor on their behalf.

2. Information we collect

• Account data. Email address, name, organization, and role (manager, worker, admin). Workers authenticate via magic link or device session and do not have a traditional password.
• SOP and operational content. Reference photos, written steps, room/property labels, and any acceptable-variation notes Operators upload.
• Worker submissions. Photos captured from a live camera while completing a task, the resulting AI verification score, manager overrides, and appeal notes. Submission photos are automatically purged 90 days after the task is completed.
• Usage data. Pages viewed, features used, verification counts, device/browser metadata, IP address, and error logs — used to operate, secure, and improve the Service.
• Billing data. Plan tier and usage. Payment card details are collected and stored by our payment processor (Stripe); we never see full card numbers.

3. How we use information

• To run AI verification on submitted photos.
• To show Operators activity, analytics, and audit history.
• To improve verification accuracy using anonymized, org-scoped manager corrections ("Learned Corrections").
• To send transactional email (magic links, receipts, usage alerts).
• To detect fraud, abuse, and replayed/screenshotted submissions.
• To meet legal, tax, and accounting obligations.

We do not sell personal information. We do not use End User content to train third-party foundation models.

4. Subprocessors

We rely on a small set of vendors to run the Service: cloud hosting and database (Supabase / Lovable Cloud), AI inference providers (e.g. Google Gemini via the Lovable AI Gateway), email delivery, and payments (Stripe). Each is bound by confidentiality and security obligations.

5. Data retention

• Worker submission photos: 90 days after the task is completed, then automatically purged. The verification record, score, and audit history are retained.
• SOP reference photos and written content: retained for the life of the Operator's account.
• Account and billing records: retained while the account is active and for a reasonable period afterward to satisfy legal obligations.

6. SMS / text messaging

GuidePix sends transactional SMS messages (shift assignments, urgent operational messages, and one-time secure sign-in links) to staff mobile numbers that Operators enter during onboarding after obtaining verbal consent from the staff member. Typical volume is roughly 2–10 messages per week depending on shift activity. Message and data rates may apply. Recipients can reply HELP for help or STOP at any time to unsubscribe; STOP and HELP are handled automatically by our messaging provider.

Mobile phone numbers and SMS opt-in data are never shared with third parties or affiliates for marketing or promotional purposes. Mobile numbers are shared only with our SMS delivery subprocessor (Twilio) solely to transmit the transactional messages described above.

7. Security

Data is encrypted in transit (TLS) and at rest. Access to production data is restricted to authorized personnel. Row-level security policies enforce that each Operator can only see their own data. No service is perfectly secure, and we cannot guarantee absolute security.

8. Your choices

End Users should direct access, correction, or deletion requests to the Operator that invited them. Operators can export or delete their data at any time by contacting support. We will honor verified requests in accordance with applicable law (including GDPR and CCPA where applicable).

9. Children

GuidePix is not directed to children under 16 and we do not knowingly collect personal information from them.

10. Changes

We may update this policy from time to time. Material changes will be announced via the Service or by email. Continued use after the effective date constitutes acceptance.

11. Contact

Zendo Home Technologies, LLC — privacy@guidepix.com