Privacy Policy

1. What we collect

From providers we collect:

• Name, phone number, email, business address.
• Identity verification data (SSN/EIN, bank account) is collected and stored by Stripe Connect; Guildry never receives or stores those values. For fraud prevention, Guildry stores one-way cryptographic hashes (a scrambled fingerprint that cannot be reversed back into the original, protected by a secret key kept on our servers) of your insurance policy number and Stripe account ID — and, if an account is banned, of its phone number and email.
• Insurance policy details (insurer, policy number, expiration, uploaded policy document).
• Service categories, ZIP codes, business profile information.
• Operational data: customers added, quotes created, jobs completed.
• Photos and work documentation you or your team upload — a profile photo, and job photos, notes, and evidence — kept in private storage and used as described in Section B4 of the Terms of Service.

About customers (patrons) we collect:

• Name, phone number, service address (for the job to be performed).
• Payment card information, collected and stored by Stripe; we never see or store full card numbers.
• Ratings and reviews you submit after a paid job, and any tip you choose to add. Your rating includes a comment that may be shared with your provider (and, in future phases, displayed publicly) and a separate private note visible only to Guildry’s review Council. Today, both are reviewed only by Guildry.
• Photos and notes your provider uploads to document the work. These can show your home or property; we use them to keep an accurate record of the job and to resolve disputes or guarantee claims. They are stored privately and are not public.
• Comments, problem reports, and claim evidence you submit through the platform.

In most cases your service provider gives us this information when they set up your job — you don’t fill out a Guildry form — and confirms to us that you agreed to be contacted by text about it (see Section 3).

From visitors who contact us or ask about joining the pilot we collect:

• Your name, phone number, email, and how you prefer to be contacted.
• Your answers to our short intake questions (what best describes you, your biggest pain points, and how you found us).

We use this only to respond to you, decide pilot invitations, and understand who is interested in Guildry. We do not use it for marketing lists or share it with anyone beyond the service providers in Section 5.

Automatically, for record-keeping, security, and fraud prevention, we collect:

• Your IP address and basic device/browser information — when you sign up or sign in, when you accept an agreement or confirm SMS consent for a customer (we keep it with that record as evidence), and in our security, rate-limiting, and abuse-prevention logs (including a list of IP addresses we have blocked for abuse).
• An audit log of significant account and transaction activity (what was done, and when).
• Text message records: copies of the text messages sent and received through Guildry’s number — the message content, the phone numbers involved, and any photos attached — so there is an accurate record of what was communicated about a job.

2. How we use it

• To coordinate the service (route the right provider to the right job).
• To send transactional SMS (quote links, payment requests, scheduling confirmations, reminders).
• To process payments through Stripe and pay providers.
• To prevent fraud and stop banned accounts from re-joining, by matching one-way hashes of phone numbers, email addresses, insurance policy numbers, and payment-account IDs against our banned list.
• To maintain quality and accountability — ratings, completed jobs, payment outcomes, and dispute results are used to calculate internal quality and trust scores for providers. Guildry uses these scores to vet, monitor, and make decisions about the providers in its network. During the pilot, these scores are internal to Guildry and are not shown publicly.
• To comply with applicable law and respond to legal requests.

3. SMS / text-messaging program

Guildry sends transactional text messages (SMS) to the mobile number associated with a job. Message categories include quote links, payment requests and receipts, scheduling and appointment confirmations, reminders, and account or support notices. We do not send marketing or promotional text messages.

How consent is obtained. Customers are typically added to a job by a vetted Guildry provider, who attests at the time of entry that the customer agreed to receive transactional texts from Guildry about their service. You can also consent directly — for example, by replying START to our number, or by providing your number yourself through a Guildry page. We keep a record of when and how consent was captured. The first message Guildry sends to a number identifies Guildry and includes opt-out and help instructions.

Frequency. Message frequency varies with your service activity — for example, when a quote is sent, a payment is due, or an appointment is upcoming. We keep a record of the text messages sent and received through Guildry’s number as part of the engagement’s history.

Opt-out and help. You can opt out at any time by replying STOP to any message; you will receive one confirmation and no further texts. Reply HELP for help, or contact us at hello@guildry.net or 1 (480) 637-7287. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

Your mobile opt-in is never shared. Text-messaging opt-in data and consent are not shared with, sold to, or rented to any third parties or affiliates for marketing or promotional purposes (see Section 5).

Phone calls. Separately from the text-messaging program described in this section, Guildry may place service-related, non-marketing phone calls to coordinate an engagement or resolve a claim. We do not make telemarketing calls.

4. Cookies and data stored on your device

Guildry uses only first-party, essential cookies. We do not use advertising cookies, analytics cookies, or third-party tracking of any kind, and we do not allow other companies to collect information about you through our site. The two cookies we set are:

• guildry_session — keeps you signed in. It expires after 7 days without activity and, at the latest, 30 days after you sign in.
• guildry_view — remembers whether you last used the provider or freelancer view so your actions are labeled correctly. It is deleted when you close your browser.

The app also stores a small amount of data in your own browser so it works smoothly: your invite code during sign-up (removed once your account is created), the time your data last synced, and a cache of the app’s files so pages load even when your connection is spotty. For providers and freelancers, the app keeps an offline copy of your recent assigned jobs on your device — including the customer’s name, phone number, and service address — so the dashboard keeps working without an internet connection. That copy is removed when you sign out, and you can also remove it at any time by clearing your browser’s site data for guildry.net.

Do Not Track and Global Privacy Control. Guildry does not track you over time or across other websites, and we do not allow other parties to collect that kind of information through Guildry. Because there is no cross-site tracking to turn off, our site does not respond to browser “Do Not Track” signals. Likewise, because we never sell or share personal information, a Global Privacy Control (GPC) signal has nothing to opt you out of — you already have that outcome by default.

5. Who we share with

Your provider and their team. Guildry’s job is to connect you with a provider — so to arrange and perform your service, we share your name, contact information, service address, and engagement details (such as quotes, appointments, and invoices) with the provider business (the Guild) handling your work and the team members assigned to it. Often your provider already has your contact details, because they added you to Guildry to coordinate your service. Providers are independent businesses, not Guildry employees. Our provider terms require them to use your information only to perform and communicate about engagements arranged through Guildry, and prohibit them from soliciting off-platform work from customers who were first introduced to them through Guildry during the pilot.

Beyond your provider, we share personal information only with the vendors (subprocessors) that help us operate Guildry, and only as needed to deliver the service:

• Stripe — payment processing and identity verification.
• Twilio — SMS delivery.
• Supabase — database and storage hosting.
• Vercel — web application hosting.
• Sentry — error monitoring and diagnostics (when enabled).

These vendors are contractually limited to using the information to perform services for Guildry. We do not sell or rent personal information, and we do not share personal information for third-party advertising.

Beyond these, we may also disclose information in a few specific situations:

• To comply with law or respond to a valid legal request, such as a subpoena or court order.
• Through Stripe to card networks and banks when we respond to a payment dispute or chargeback — this can include relevant photos, messages, and job records.
• To a mediator, arbitrator, or arbitration administrator, and to our professional advisors, if a dispute goes through the dispute-resolution process in our Terms of Service.
• To a successor if Guildry is ever part of a merger, acquisition, or sale of assets. This policy would continue to apply to your information, and we would post notice of any material change.

Text-messaging opt-in data and consent are never shared with third parties or affiliates for marketing or promotional purposes. The only parties that handle your mobile number for messaging are the subprocessors above (such as Twilio), acting solely to deliver Guildry’s own transactional messages on our behalf; they do not receive your opt-in for their own marketing.

6. How long we keep it

We keep your account data until you delete your account or ask us to delete it — we do not automatically delete inactive accounts. Some records are kept longer, on purpose:

• Transaction and payment records, for at least seven years, to meet tax and financial recordkeeping requirements. Text message records are kept as part of the job record for the same reasons.
• Legal-compliance records that survive account deletion: records of the agreements you accepted, SMS consent and opt-out records (including when and how consent was given, and the IP address at the time), our security audit log, and sign-up records such as the IP address used at registration (kept to help prevent banned users from re-registering).
• Ratings and reviews you submitted — they are part of the permanent quality record of a job and remain after deletion, with your name removed, as described in Sections A8 and C4 of our Terms of Service.
• The one-way identity hashes described in Section 1, retained indefinitely — including after you delete your account — so that banned accounts cannot re-join under a new signup.

7. Your rights

If you have a Guildry account, you can download a copy of your data at any time from your account settings. Patrons and freelancers can also delete their account there. If you own a provider (guild) account, account deletion is handled with our support team — email hello@guildry.net — so open jobs, team access, and pending payments can be wound down first; your deletion rights are otherwise the same. The download currently covers your profile, engagements, payments, reviews, messages, insurance, and consent records; for a complete copy of everything we hold about you, email hello@guildry.net and we will provide it.

Deleting your account removes your personal details (name, email, phone number, and service address) from your account profile, permanently disables sign-in with your number, and deletes the documents and photos you uploaded. Some records are kept after deletion, with your name and contact details removed where we can, because the law requires it or because they keep the platform honest: the records described in Section 6, and the log of text messages about your jobs. Some of your information also lives with the companies that process it for us: Stripe keeps payment and identity-verification records, and Twilio keeps message-delivery logs, under their own legal obligations and privacy policies — deleting your Guildry account does not erase those records.

You can also ask us to correct inaccurate information. You don’t need a Guildry account to use these rights: if a provider added your phone number to coordinate a job and you never created an account, you can still ask for a copy, correction, or deletion of your information by emailing hello@guildry.net — we will verify the request by confirming you control the phone number on the record.

California residents (CCPA / CPRA)

Guildry does not currently meet the size thresholds that make the CCPA/CPRA legally binding on it. We make the disclosures below anyway, and we voluntarily extend these rights to all our users, wherever they live.

In the prior 12 months we have collected these categories of personal information: identifiers (name, phone, email, IP address, cookies); commercial information (engagements, quotes, invoices, payments, and tips); financial information (processed by Stripe); audio, electronic, and visual information (job photos, which may show your property, and the content of text messages exchanged through Guildry); internet or other electronic network activity (sign-in IP address, device/browser information, and security audit logs); and, for providers, professional and government-ID information for verification. We collect it from you (including when you contact us through our website) and from your service provider or customer as part of a booking, and use it for the purposes in Section 2.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising — so there is nothing to opt out of on that front. We have not done so in the prior 12 months. See Section 4 for how we respond to Do Not Track and Global Privacy Control signals.

Sensitive personal information. Government identifiers (such as SSN/EIN) and financial-account details are collected only to verify identity and process payments through Stripe, and are used solely for those purposes — never to infer characteristics about you, and never sold or shared.

You have the right to know/access, delete (subject to the legal record-keeping exceptions in Section 6), and correct your personal information, and to not be discriminated against for exercising these rights. Exercise them from your account settings (download for everyone; delete for patron and freelancer accounts — provider-guild owners: email us to close your account) or by emailing hello@guildry.net. If you have an account, we will verify your request against it; if you don’t — for example, you only ever used our text-message links — we will verify you against the phone number and engagement details we have on file before acting. You may use an authorized agent.

8. Security

We use industry-standard practices: encrypted connections (HTTPS), encrypted storage at rest, role-based access controls, and structured audit logs of sensitive operations. No system is perfectly secure; we recommend you keep your account phone number protected and report anything suspicious immediately. If we learn of a security breach affecting your personal information, we will notify you as required by applicable law — including Arizona’s data-breach notification law — and tell you what happened and what we are doing about it.

9. Children

Guildry is not directed to children under 18 and we do not knowingly collect information from them. If you believe a minor has provided us information, contact us and we will delete it.

10. Contact

Privacy questions and requests can be directed to hello@guildry.net. You can also write to us by U.S. mail: Guildry LLC (an Arizona limited liability company), at its statutory-agent address on file with the Arizona Corporation Commission — the same mail route described in the Notices section of our Terms of Service. Email is the fastest way to reach us during the pilot.