Privacy Policy

1. What we collect

From providers we collect:

• Name, phone number, email, business address.
• Identity verification data (SSN/EIN, bank account) is collected and stored by Stripe Connect; Guildry never receives or stores those values. For fraud prevention, Guildry stores one-way cryptographic hashes (a scrambled fingerprint that cannot be reversed back into the original, protected by a secret key kept on our servers) of your insurance policy number and Stripe account ID — and, if an account is banned, of its phone number and email.
• Insurance policy details (insurer, policy number, expiration, uploaded policy document), for general liability and workers’ compensation coverage.
• If you sign one of Guildry’s workers’ compensation statements (the “I work alone” statement or the “Independent subcontractors” statement) instead of giving us a workers’ compensation certificate: the full legal name you type as your signature, your business name, the exact words you signed, when you signed, and your IP address and browser information at that moment, along with your business type and how many other people were on your team in Guildry at the time.
• Service categories, ZIP codes, business profile information, and, if you tell us, the software and services you use to run your business.
• Operational data: customers added, quotes created, jobs completed.
• Photos and work documentation you or your team upload — a profile photo, and job photos, notes, and evidence — kept in private storage and used as described in Section B4 of the Terms of Service.
• If you own a business on Guildry and use Guildry’s assistant: what you type into it. We pass it to our AI company to get an answer and do not keep it (see Section 5).

About customers (patrons) we collect:

• Name, phone number, service address (for the job to be performed).
• Payment card information, collected and stored by Stripe; we never see or store full card numbers.
• Ratings and reviews you submit after a paid job, and any tip you choose to add. Your rating includes a comment that may be shared with your provider (and, in future phases, displayed publicly) and a separate private note visible only to Guildry’s review Council. Today, both are reviewed only by Guildry.
• Photos, notes, and documents your provider uploads about the work. These can show your home or property; we use them to keep an accurate record of the job and to resolve disputes or guarantee claims. They are stored privately and are not public.
• Comments, problem reports, and claim evidence you submit through the platform.

In most cases your service provider gives us this information when they set up your job — you don’t fill out a Guildry form — and confirms to us that you agreed to be contacted by text about it (see Section 3).

When you ask Guildry for help with a job, we pass your name, phone number and request to one provider, and keep a record of which provider we introduced you to. We use that record to pay that provider correctly on your later jobs with them; it never changes what you pay.

From visitors who contact us or ask about joining the pilot we collect:

• Your name, phone number, email, and how you prefer to be contacted.
• Your answers to our short intake questions (what best describes you, your biggest pain points, and how you found us), and any message you write to us.

We use this only to respond to you, decide pilot invitations, and understand who is interested in Guildry. We do not use it for marketing lists or share it with anyone beyond the service providers in Section 5.

Automatically, for record-keeping, security, and fraud prevention, we collect:

• Your IP address and basic device/browser information — when you sign up or sign in, when you accept an agreement or confirm SMS consent for a customer (we keep it with that record as evidence), and in our security, rate-limiting, and abuse-prevention logs (including a list of IP addresses we have blocked for abuse).
• An audit log of significant account and transaction activity (what was done, and when).
• Text message records: copies of the text messages sent and received through Guildry’s number — the message content, the phone numbers involved, and any photos attached — so there is an accurate record of what was communicated about a job.

2. How we use it

• To coordinate the service (route the right provider to the right job).
• To send transactional SMS (quote links, payment requests, scheduling confirmations, reminders).
• To process payments through Stripe and pay providers.
• To prevent fraud and stop banned accounts from re-joining, by matching one-way hashes of phone numbers, email addresses, insurance policy numbers, and payment-account IDs against our banned list.
• To maintain quality and accountability — ratings, completed jobs, payment outcomes, and dispute results are used to calculate internal quality and trust scores for providers. Guildry uses these scores to vet, monitor, and make decisions about the providers it works with. During the pilot, these scores are internal to Guildry and are not shown publicly.
• To answer a business owner’s questions about their own business, and suggest changes for them to confirm, through Guildry’s assistant, as described in Section 5.
• To improve Guildry, such as deciding which other software to connect with, using what providers tell us about the tools they use. We don’t share these answers with the companies named.
• To comply with applicable law and respond to legal requests.

4. Cookies and data stored on your device

Guildry uses only first-party, essential cookies. We do not use advertising cookies, analytics cookies, or third-party tracking of any kind, and we do not allow other companies to collect information about you through our site. The two cookies we set are:

• guildry_session — keeps you signed in. It expires after 7 days without activity and, at the latest, 30 days after you sign in.
• guildry_view — remembers whether you last used the provider or freelancer view so your actions are labeled correctly. It is deleted when you close your browser.

The app also stores a small amount of data in your own browser so it works smoothly: your invite code during sign-up (removed once your account is created), the time your data last synced, and a cache of the app’s files so pages load even when your connection is spotty. For providers and freelancers, the app keeps an offline copy of your recent assigned jobs on your device — including the customer’s name, phone number, and service address — so the dashboard keeps working without an internet connection. That copy is removed when you sign out, and you can also remove it at any time by clearing your browser’s site data for guildry.net.

Do Not Track and Global Privacy Control. Guildry does not build advertising profiles, follow you across other websites, or allow other parties to collect that kind of information through Guildry. What we do record and pass on to your provider is whether a quote or payment link we sent you has been opened — described in Section 5. Because there is no cross-site tracking to turn off, our site does not respond to browser “Do Not Track” signals. Likewise, because we never sell or share personal information, a Global Privacy Control (GPC) signal has nothing to opt you out of — you already have that outcome by default.

5. Who we share with

Your provider and their team. To arrange and perform your service, we share your name, contact information, service address, and engagement details (such as quotes, appointments, and invoices) with the provider business (the Guild) handling your work and the team members assigned to it. Often your provider already has your contact details, because they added you to Guildry to coordinate your service. Providers are independent businesses, not Guildry employees. Our provider terms require them to use your information only to perform and communicate about engagements arranged through Guildry, and prohibit them from soliciting off-platform work from customers Guildry introduced to them, while they use Guildry and for 12 months after their account closes.

Whether you opened a link we sent you. When your provider sends you a quote by text, we tell them whether the quote link has been opened — a simple yes or no, with no date or time, so they know whether to follow up. We also record when a payment link is first opened, and your provider can see that with the date and time. We do not tell them how many times you looked, how long you spent, what device you used, or anything about your location, and we stop recording once a link has been used. These records show that a link was opened, not who opened it — your provider holds the same link, so their own visit can be counted as yours. Apart from these, we do not report your activity to your provider.

Beyond your provider, we share personal information only with the vendors (subprocessors) that help us operate Guildry, and only as needed to deliver the service (and with the calendar services described below):

• Stripe — payment processing and identity verification.
• Twilio — SMS delivery.
• Supabase — database and storage hosting.
• Vercel — web application hosting.
• Sentry — error monitoring and diagnostics (when enabled).
• Anthropic, PBC — the AI model behind Guildry’s assistant for business owners (see Guildry’s assistant at the end of this section).

These vendors are contractually limited to using the information to perform services for Guildry. We do not sell or rent personal information, and we do not share personal information for third-party advertising.

Calendars you connect. If a business owner or a member of their team turns on a private calendar link, the calendar service they choose (such as Apple, Google or Microsoft) reads the kind of work, the city and the time of their visits. It never receives patrons’ names, phone numbers, email addresses or street addresses. If you add a visit to your own calendar, its details go to the calendar service you pick.

Beyond these, we may also disclose information in a few specific situations:

• To comply with law or respond to a valid legal request, such as a subpoena or court order.
• Through Stripe to card networks and banks when we respond to a payment dispute or chargeback — this can include relevant photos, messages, and job records.
• To a mediator, arbitrator, or arbitration administrator, and to our professional advisors, if a dispute goes through the dispute-resolution process in our Terms of Service.
• To a successor if Guildry is ever part of a merger, acquisition, or sale of assets. This policy would continue to apply to your information, and we would post notice of any material change.

Text-messaging opt-in data and consent are never shared with third parties or affiliates for marketing or promotional purposes. The only parties that handle your mobile number for messaging are the subprocessors above (such as Twilio), acting solely to deliver Guildry’s own transactional messages on our behalf; they do not receive your opt-in for their own marketing.

Guildry’s assistant (AI)

Guildry may offer a business owner an assistant on their dashboard. The owner types a question about their own business, such as “what’s on next week?”, a change they want, or a general question, such as how to word a reply to a customer, and the assistant answers, opens the right Guildry screen, fills in a Guildry form for the owner to check and save, or suggests a change. Only the business’s owner can use it. It runs on an AI model made by Anthropic, PBC.

What Anthropic receives. To answer, Guildry sends Anthropic the owner’s words, the last few questions and answers in the same conversation, today’s date and time, and only the parts of that business’s records the assistant looks up to answer: patrons’ first names and the city in their saved address; team members’ first names, which visits they are on, and when they are away; engagement and schedule names as the business wrote them, and each engagement’s status and the date it was created; visit dates and times, and whether each is done, and how often repeat visits recur; the business’s hours; the status, amounts and dates of its open quotes and invoices; the amounts and dates of its paid invoices; the items on its Attention list; and Guildry’s own record numbers and links. From its records, Guildry never sends Anthropic a phone number, email address, street address, note or message, photo, rating or review, payment card or bank detail, or what a team member is paid, except for anything the business itself typed into an engagement’s or schedule’s name. What an owner types is sent as typed, so the assistant asks owners not to type phone numbers or addresses.

What is kept. Guildry does not store what an owner types into the assistant or what the assistant answers. We keep a record of each request Guildry sends Anthropic: when, for which business, which AI model, its size and what it cost, whether or not it was answered. When an owner signs Yes on a card, we record who signed it, what kind of change it was and when. If the change is made, we keep the same records of it as if the owner had made it by hand, and note that the assistant suggested it. Anthropic handles the information for Guildry as our service provider. As of September 2026, Anthropic’s commercial terms say it may not train its AI models on this information. Its service terms allow training only for a customer that joins its data-sharing program, and Guildry has not joined it. Its data retention policy says it deletes it within 30 days, unless Anthropic needs to keep it longer to enforce its usage policy (for example, a conversation its automated safety systems flag may be kept for up to 2 years, and its safety scores about that conversation for up to 7 years) or the law requires it.

Nothing changes without the owner. The assistant never changes anything by itself. It can only fill in a form, which changes nothing until the owner saves it, or suggest a few kinds of change, such as moving a visit, adding time off or resending a payment link. A reply the assistant drafts is not sent by Guildry; the owner sends it themselves. Guildry then shows the owner a card saying what will change and who, if anyone, will get a text, and nothing changes until the owner signs Yes on it. Patrons never talk to the assistant, and any text sent after the owner signs Yes is Guildry’s usual message for that change, not written by the AI.

Your choices. Guildry turns the assistant on business by business, and using it is optional. An owner can ask us at hello@guildry.net to turn it off for their business. Patrons and team members cannot turn it off for themselves. Questions about the assistant also go to hello@guildry.net.

6. How long we keep it

We keep your account data until you delete your account or ask us to delete it — we do not automatically delete inactive accounts. Some records are kept longer, on purpose:

• Transaction and payment records, for at least seven years, to meet tax and financial recordkeeping requirements.
• Text messages are the exception, and we keep them for less time on purpose: we delete text messages between you and Guildry 60 days after they are sent. Two kinds are kept longer, because we may need them to show we respected your choices — any message you sent us containing STOP or a similar opt-out word, and messages to or from a number that has opted out of our texts. Your consent and opt-out records themselves are separate, and are kept as described in the next point.
• Legal-compliance records that survive account deletion: records of the agreements you accepted, SMS consent and opt-out records (including when and how consent was given, and the IP address at the time), any signed workers’ compensation statement (the “I work alone” statement or the “Independent subcontractors” statement; kept in full, including the name you typed and the IP address and browser information recorded when you signed, because it is the record of what you signed), our security audit log, and sign-up records such as the IP address used at registration (kept to help prevent banned users from re-registering).
• Ratings and reviews you submitted — they are part of the permanent quality record of a job and remain after deletion, with your name removed, as described in Sections A8 and C4 of our Terms of Service.
• If you close a business account: the photos and files attached to its engagements, quotes and invoices, so that a patron’s later claim or a card dispute can be answered; the business name on its past bills and ratings; the record that a bond or licence was on file, with its dates (the files are deleted); and the owner’s name, phone number and email for 30 days after the last payment was paid out.
• The one-way identity hashes described in Section 1, retained indefinitely — including after you delete your account — so that banned accounts cannot re-join under a new signup.

The notices in your Guildry notifications list are deleted 12 months after they arrive.

7. Your rights

If you have a Guildry account, you can download a copy of your data at any time from your account settings. Patrons and freelancers can also delete their account there. If you own a business (guild) on Guildry, you can ask to close it from your profile, under Close my business account. If you have work still open or a payment still held, the page lists what has to finish first, and Guildry closes your account for you, usually within a day of it finishing; you can stop the request until it starts closing. Closing ends your whole Guildry account, and removes your personal details as described below. Your deletion rights are otherwise the same. The download currently covers your profile, engagements, payments, reviews, messages, insurance, and consent records; for a complete copy of everything we hold about you, email hello@guildry.net and we will provide it.

Deleting your account removes your personal details (name, email, phone number, and service address) from your account profile, permanently disables sign-in with your number, and deletes the documents and photos you uploaded, other than those attached to an engagement, quote or invoice of a business you closed (see Section 6). If you close a business account, you are signed out at once, and your name, phone number and email are removed 30 days after the last payment was paid out to you (at once if there was none, and later if a claim or problem is still open then), so that a late claim or card dispute can still be answered. Some records are kept after deletion, with your name and contact details removed where we can, because the law requires it or because they keep the platform honest: the records described in Section 6, and the log of text messages about your jobs. Some of your information also lives with the companies that process it for us: Stripe keeps payment and identity-verification records, and Twilio keeps message-delivery logs, under their own legal obligations and privacy policies — deleting your Guildry account does not erase those records. Guildry keeps no copy of what its assistant sends Anthropic, and deleting your Guildry account does not delete it. Anthropic keeps and deletes it under its own policy, described in Section 5. You can ask us at hello@guildry.net to pass a deletion request to Anthropic, and we will.

You can also ask us to correct inaccurate information. You don’t need a Guildry account to use these rights: if a provider added your phone number, or Guildry passed it to a provider, to coordinate a job and you never created an account, you can still ask for a copy, correction, or deletion of your information by emailing hello@guildry.net — we will verify the request by confirming you control the phone number on the record.

California residents (CCPA / CPRA)

Guildry does not currently meet the size thresholds that make the CCPA/CPRA legally binding on it. We make the disclosures below anyway, and we voluntarily extend these rights to all our users, wherever they live.

In the prior 12 months we have collected these categories of personal information: identifiers (name, phone, email, IP address, cookies); commercial information (engagements, quotes, invoices, payments, and tips); financial information (processed by Stripe); audio, electronic, and visual information (job photos, which may show your property, and the content of text messages exchanged through Guildry); internet or other electronic network activity (sign-in IP address, device/browser information, and security audit logs); and, for providers, professional and government-ID information for verification. We collect it from you (including when you contact us through our website) and from your service provider or customer as part of a booking, and use it for the purposes in Section 2.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising — so there is nothing to opt out of on that front. We have not done so in the prior 12 months. See Section 4 for how we respond to Do Not Track and Global Privacy Control signals.

Sensitive personal information. Government identifiers (such as SSN/EIN) and financial-account details are collected only to verify identity and process payments through Stripe, and are used solely for those purposes — never to infer characteristics about you, and never sold or shared.

You have the right to know/access, delete (subject to the legal record-keeping exceptions in Section 6), and correct your personal information, and to not be discriminated against for exercising these rights. Exercise them from your account settings (download for everyone; delete for patron and freelancer accounts; business owners close their account from their profile, under Close my business account) or by emailing hello@guildry.net. If you have an account, we will verify your request against it; if you don’t — for example, you only ever used our text-message links — we will verify you against the phone number and engagement details we have on file before acting. You may use an authorized agent.

8. Security

We use industry-standard practices: encrypted connections (HTTPS), encrypted storage at rest, role-based access controls, and structured audit logs of sensitive operations. No system is perfectly secure; we recommend you keep your account phone number protected and report anything suspicious immediately. If we learn of a security breach affecting your personal information, we will notify you as required by applicable law — including Arizona’s data-breach notification law — and tell you what happened and what we are doing about it.

9. Children

Guildry is not directed to children under 18 and we do not knowingly collect information from them. If you believe a minor has provided us information, contact us and we will delete it.

10. Contact

Privacy questions and requests can be directed to hello@guildry.net. You can also write to us by U.S. mail: Guildry LLC (an Arizona limited liability company), at its statutory-agent address on file with the Arizona Corporation Commission — the same mail route described in the Notices section of our Terms of Service. Email is the fastest way to reach us during the pilot.