Privacy Policy

Introduction

Guildy helps users convert their Gmail job-related email threads into a visual job pipeline and provides AI interview preparation tools. This Privacy Policy explains how we collect, use, store, and protect your information.

Google API Services Disclosure

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data We Access

We only request the minimum access necessary to operate Guildy.

Google OAuth Scopes Requested

We never request permission to send, delete, or modify email.

Gmail Data We Process

We access:

• Message metadata (message ID, thread ID, from/to, subject, date, labels)
• Limited text snippets for pipeline creation and stage detection
• Parsed context such as interview-related phrases (e.g., "schedule interview," "next round," "offer," "unfortunately")

We do not access Drive, Calendar, Photos, Contacts, or non-Gmail Google services.

Purpose of Data Use

We use Gmail data only to provide core user-visible features:

• Identify job-related threads and group them into pipelines
• Determine interview stage and timeline context
• Provide interview prep content tailored to the pipeline stage
• Support user notes and organization

We do not use Gmail data for:

• Advertising or marketing
• Profiling unrelated to job-search assistance
• Data sales or brokerage

Storage & Retention

Sharing & Transfers

We do not:

• Sell personal data
• Share Gmail content with advertisers
• Allow third parties to train AI models on your data
• Allow human access to Gmail content unless required by law, abuse prevention, or user-initiated support

We may use service providers acting solely as data processors under confidentiality and Limited Use restrictions.

AI & Machine Learning

Guildy may send limited text context (or de-identified features) to an AI model to:

• Infer interview stages
• Generate interview prep questions and feedback

We require all AI vendors to not train on your data, consistent with Google's Limited Use policy.

Security

We implement strong security measures, including:

• TLS encryption in transit
• Encrypted data storage
• Restricted production access with logging
• Role-based internal access controls
• Secure secrets management
• Regular security reviews and monitoring

User Controls

Children's Privacy

• Guildy is not intended for children under 16.
• We do not knowingly collect data from children.
• If you believe we have, contact us for prompt deletion.

International Transfers

• Data may be processed in the United States.
• Where required, we apply appropriate safeguards for international transfers.

Changes to This Policy

• We may update this policy. Any updates will be posted here with a new effective date.
• Material changes may be communicated via email or in-app notice.

Contact Us

Guildy.ai, Inc.
San Francisco, CA, USA
support@guildy.ai