Privacy
Privacy Policy
Effective date: 4 August 2026
1. Purpose and scope
This Privacy Policy explains how Guanta, Inc. ("Guanta", "we", "us", or "our") processes personal data through the public website at guanta.ai, including information submitted through contact and careers forms.
It does not govern personal data processed inside customer-controlled product environments. In those environments, the applicable customer agreement and data processing terms determine the parties' roles and obligations. If you use a Guanta environment provided by your employer or another organization, that organization is normally the controller of your personal data and should be your first point of contact.
This policy also does not govern third-party websites linked from the Guanta website.
2. Controller and privacy contact
The controller for the processing described in this policy is:
Guanta, Inc. 3723 Greenville Ave STE 44679 Dallas, TX 75206 United States Website: https://guanta.ai Privacy contact: privacy@guanta.ai
Guanta has designated a privacy lead to coordinate privacy requests and compliance. This contact is not described as a statutory Data Protection Officer unless and until Guanta formally determines that such an appointment is required and records the appointment.
3. Personal data we collect
Depending on how you interact with the website, we may process:
- Contact and business inquiry data: email address, message, company context, and information about the process, service, product, or automation you want to discuss.
- Careers inquiry data: email address, LinkedIn profile URL, and the note or other information you choose to provide about your background or interest in working with Guanta.
- Technical and security data: IP address, user agent, request headers, timestamps, and similar information generated when your browser communicates with the website or our hosting infrastructure.
- Communications and request records: correspondence with you and records needed to respond to, document, or follow up on your request.
We generally collect this information directly from you, your browser, or the service providers that operate the website and deliver form messages.
Please do not submit special-category personal data, government identifiers, financial account information, medical information, or other sensitive information through the public website unless Guanta specifically requests it through an appropriate secure channel.
4. Purposes and legal bases
Where the GDPR, UK GDPR, or a similar law applies, we rely on the following legal bases:
| Purpose | Personal data | Legal basis |
|---|---|---|
| Respond to contact requests and discuss possible services or projects | Contact and business inquiry data; communications | Steps requested before entering into a contract and our legitimate interest in responding to business inquiries |
| Evaluate careers inquiries and communicate with candidates | Careers inquiry data; communications | Steps requested before entering into an employment or services relationship and our legitimate interest in evaluating candidates |
| Operate, secure, diagnose, and prevent misuse of the website | Technical and security data | Our legitimate interest in providing a reliable and secure website and protecting Guanta, users, and third parties |
| Maintain necessary business, compliance, and legal records | Communications, request records, and relevant technical data | Compliance with legal obligations and our legitimate interest in establishing, exercising, or defending legal claims |
| Send optional marketing communications, if separately offered | Contact details and communication preferences | Consent, which may be withdrawn at any time |
When we rely on legitimate interests, we consider the nature of the information, the context in which it was collected, your reasonable expectations, and the potential impact on your rights.
The public website does not currently use personal data to make decisions that produce legal or similarly significant effects solely by automated means.
5. Service providers and other recipients
We share personal data only when reasonably necessary for the purposes described above. Recipients may include:
- Cloudflare, which hosts and helps protect the public website;
- Postmark, which delivers messages submitted through website forms;
- approved professional advisers, contractors, and service providers that support Guanta's business, security, or legal obligations and are subject to appropriate confidentiality and data-protection terms; and
- public authorities, courts, regulators, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, or the integrity of our services.
We do not sell personal data collected through the public website. The public website does not currently send visitor information to AI providers or to a customer relationship management system.
6. International transfers
Guanta is a United States company. Personal data may therefore be processed in the United States and in other countries where Guanta personnel or approved service providers operate.
Where personal data protected by European data-protection law is transferred to a country that has not been recognized as providing an adequate level of protection, Guanta uses an applicable transfer mechanism and supplementary safeguards where required, such as the European Commission's Standard Contractual Clauses or another legally recognized mechanism. Information about the relevant safeguard may be requested at privacy@guanta.ai, subject to necessary redactions.
7. Retention
We keep personal data only for as long as needed for the purpose for which it was collected and for applicable legal, security, accounting, or dispute-resolution requirements. Unless a longer period is justified and recorded:
- contact and business inquiries that do not become an active business relationship are reviewed for deletion or anonymization no later than 24 months after the last meaningful interaction;
- unsuccessful careers inquiries are reviewed for deletion no later than 12 months after the process or last meaningful interaction, unless the person agrees to a longer talent-pool period;
- routine website security and diagnostic logs are retained for no longer than 12 months, unless needed to investigate an incident, prevent abuse, or meet a legal obligation;
- privacy-request records are retained for the time needed to demonstrate that the request was handled and to address related legal claims; and
- where an inquiry develops into a customer, supplier, contractor, or other business relationship, the relevant contract, finance, and records-retention rules apply.
At the end of the applicable period, personal data is deleted, securely disposed of, anonymized, or restricted from ordinary use as appropriate.
8. Your rights
Subject to applicable law, you may have the right to:
- obtain confirmation of whether we process your personal data and request access to it;
- request correction of inaccurate or incomplete personal data;
- request deletion of personal data;
- request restriction of processing;
- object to processing based on legitimate interests, including direct marketing;
- receive personal data you provided in a structured, commonly used, machine-readable format and request portability where applicable;
- withdraw consent at any time where processing is based on consent, without affecting processing carried out before withdrawal; and
- lodge a complaint with a competent supervisory authority, including an authority in the country where you live or work or where an alleged infringement occurred. In Spain, the supervisory authority is the Agencia Española de Protección de Datos (AEPD).
To exercise a right or ask a privacy question, email privacy@guanta.ai. We may request information reasonably necessary to verify your identity and authority. We aim to respond within one month where the GDPR applies, subject to permitted extensions for complex or numerous requests.
9. Cookies and similar technologies
The public website does not currently use cookies for analytics, advertising, retargeting, or cross-site tracking. Browser local storage may be used to remember a theme preference; that preference remains in the browser and is not sent to Guanta as a cookie.
The current website Cookie Policy provides further details and will be updated if Guanta introduces cookies or similar tracking technologies.
10. Security
Guanta uses proportionate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. No internet transmission or storage system can be guaranteed to be completely secure.
11. Children
The public website and Guanta's business services are not directed to children. We do not knowingly request personal data from children through the website. If you believe a child has provided personal data to Guanta, contact privacy@guanta.ai so that we can assess and address it.
12. Changes to this policy
We may update this policy to reflect changes in our services, website, processing activities, service providers, or legal obligations. The published version will show its effective date. Material changes will be communicated where required by law.