Privacy: ambassador portal

This page covers the Guavi Partners portal only. Everything else is in the Guavi privacy policy.

Who is responsible

Sans Decorum d.o.o., Topniška ulica 70, Suite 76, 1000 Ljubljana, Slovenia, operates Guavi and is the controller. Privacy questions: privacy@guavi.app.

What we process and why

• Your email address, to send you a one-time sign-in link. The link is stored only as a scrambled (hashed) value and is deleted within a day.
• If you sign in with Google, Google confirms your email address to us. We use it only to find your Guavi account and keep nothing else from Google.
• Sign-in records (when you signed in), to keep the portal secure. Kept for 12 months.
• Rate-limit counters keyed to a one-way code of your email and network address, so nobody can flood the sign-in form. No email or IP address is stored. Deleted after about an hour.
• Your referral statistics: how many people joined with your code and how many became active. These are counts only.

We process this to run the ambassador programme you joined (Art. 6(1)(b) GDPR) and to keep it secure (Art. 6(1)(f) GDPR).

What you don't see, and why

You never see who the people you referred are, or when or where they check in. The portal only shows numbers, join months and a rough status. That protects their privacy.

Cookies

One cookie keeps you signed in for up to 30 days. It is strictly necessary for the portal to work, so it doesn't need consent. There is no analytics or tracking here.

Your rights

You can access, correct or delete your data, object to processing, or ask for a copy. Use Download my data while signed in, or email privacy@guavi.app. You can also complain to the Information Commissioner of the Republic of Slovenia (ip-rs.si).