Privacy Policy

This policy explains how GuideBundle (the “Service”), operated by RetreatBooker LLC, United States (“we”, “us”), handles personal data. It covers creators who build guides, readers who have a GuideBundle account, and visitors who open a guide.

1. Who is responsible for your data

• Creators and readers with an account: we are the controller of your account data.
• Guide visitors and leads: when you open a guide or give your details to a creator, that creator is the controller of the data collected through their guide, and we process it on their behalf as a processor. Please read the creator’s own privacy notice and contact them about how they use your details. We will forward requests we receive to the relevant creator where needed.

2. Data we process

Account data

Your name, email address and a password hash (we store passwords only as a bcrypt hash, never in plain text), plus account settings, plan and workspace memberships.

Workspace content

Guides, drafts and saved versions, settings, branding and images you upload.

Guide visitor data

When someone opens a guide we record a random visitor identifier, progress through steps and checklists, UTM campaign parameters, the referring site’s host and path, and the landing URL without its query string. We do not use device fingerprinting.

Leads

The name and email address a visitor chooses to give a creator through a guide, together with their progress on that guide.

Reader accounts and library

Guides in your library, your progress and invitations you accept. When you give your email to a creator, either by typing it or by using the one-click “continue as” option, that creator receives your name, email address and your progress on their guide.

AI requests and content review

When a creator uses GuideBundle AI, their brief, answers and extracted source document text are sent to our AI providers to write or translate drafts. Guide text and images are also sent for safety and quality checks before publication. Saved requests remain on the account and a browser recovery copy helps prevent lost work. We use server-managed provider credentials. Personal API key entry is no longer offered; any legacy stored keys remain encrypted with AES-256-GCM until deleted.

Billing data

Payments are processed by Stripe. Your card details go directly to Stripe, not to us. We receive subscription status, plan, billing period, your billing address for tax, and a customer reference from Stripe.

Technical data

Server logs that include IP addresses, request details and timestamps, which we use for security, abuse prevention and debugging.

Guide sales

If you sell guides, we store your business details (legal name, registration and VAT numbers, address, country and sales contact email), your sales records (amounts, tax, fees, commission and refund status) and the status of your Stripe payout account. We share your business details with Stripe to open and verify that account. If you buy a guide, Stripe processes your payment details; we receive the purchase status and amounts, and the creator receives your name, email address and progress like any other reader of their guide. We keep sales records for as long as tax and accounting law requires, even after an account is deleted, without linking them to the deleted account.

3. Why we use it and our legal bases

• To provide the Service (accounts, guides, progress, leads, libraries, invitations, transactional emails): performance of our contract with you.
• Security, fraud and abuse prevention, and debugging: our legitimate interest in keeping the Service safe and working.
• Billing and accounting records: contract and legal obligations.
• Service updates about important changes: our legitimate interest, or contract where required.
• Processing for creators (visitor data and leads): on the creator’s documented instructions under our Data Processing Addendum. The creator decides the legal basis.

We do not sell personal data and we do not use it for advertising.

4. Cookies

Our own cookies are strictly necessary first-party cookies. They are HttpOnly, which means scripts on the page cannot read them. We do not use advertising cookies.

Checkout happens on Stripe's own pages. Stripe may set its own cookies there, for example for fraud prevention, under Stripe's privacy policy.

To understand how people find and use our website and dashboard, we load Google Tag Manager and Google Analytics on those pages. Outside the European Economic Area, the United Kingdom and Switzerland, Google Analytics sets its own cookies (_ga and _ga_*, up to 2 years). Inside those regions it runs without cookies and sends only anonymous, cookieless measurements. These tools are not loaded on public guides, in the reader library or on pages opened from email links.

5. Who we share data with

We use the following service providers (subprocessors). Each is bound by a contract that protects your data.

• DigitalOcean: hosting and storage, in the data center region chosen for the Service.
• Stripe: payments, invoicing, tax calculation and payouts to creators who sell guides.
• Transactional email provider: delivery of account, invitation and password reset emails.
• Sentry: error monitoring, only if enabled.
• Google (Tag Manager and Analytics): visit measurement on our website and dashboard. Receives page addresses and technical browser details, never guide content or lead data.
• DigitalOcean AI inference and Anthropic: writing and translating drafts and reviewing safety and quality with GuideBundle AI. They receive briefs, extracted source text, guide text and images, never lead or reader data.
• OpenAI: content generation or review when selected by the application operator.

Creators receive the lead and progress data described above. We may also disclose data when required by law, to protect rights and safety, or as part of a business transfer, with notice to you.

6. International transfers

Some providers may process data outside your country, including outside the European Economic Area or the United Kingdom. Where that happens we rely on adequacy decisions or Standard Contractual Clauses and additional safeguards where appropriate.

7. How long we keep data

• Account data and workspace content: while your account exists. When you delete your account, we permanently delete your workspaces, guides, leads and uploaded files.
• Leads and visitor data: until the creator deletes them or deletes their account.
• Reader progress shared with a creator: kept by that creator. When you delete your reader account, those records are disassociated from your account.
• Backups: kept for 14 days on our servers, plus encrypted off-site copies for up to 30 days, after which deleted data is gone from backups too.
• Server logs: kept for a short period needed for security and debugging.
• Billing records: kept by Stripe and by us as long as tax and accounting law requires.

8. Your rights

Depending on where you live (for example under the GDPR or UK GDPR), you can ask to access, export, correct or delete your personal data, to restrict or object to certain processing, and to withdraw consent where we rely on it.

• You can update your details and delete your account yourself in Settings.
• Creators can delete individual leads, and can “forget” an email address across their workspace.
• If you gave your details to a creator, contact that creator first. If you cannot reach them, write to us and we will help.

To make a request, email privacy@guidebundle.com. We will respond within one month. You also have the right to complain to your local data protection authority.

9. Security

We use HTTPS, HttpOnly session cookies, CSRF protection, bcrypt password hashing, encryption of AI keys with AES-256-GCM, access scoped to each workspace, encrypted off-site backups and restricted administrative access. No system is perfectly secure, so please use a strong, unique password.

10. Children

Accounts are for people aged 16 or older. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes

We will post updates here and change the date at the top. For material changes we will notify account holders by email or in the Service.

12. Contact

Privacy questions and requests: privacy@guidebundle.com. Operator: RetreatBooker LLC, United States.