GGyess — Privacy Policy

Art. 1 INTRODUCTION

The website and application available at www.ggyess.com are operated by and owned by GLOADI LLC. (hereinafter, “GGyess,” “we,” “us,” or “our”).

At GGyess we value your privacy and recognize the importance of protecting your personal information. This Privacy Policy describes how we collect, use, store, disclose, and protect information relating to individuals who visit our website, create an account, use our application, communicate with us, or interact with any of our services.

For purposes of this Policy, the term “Personal Data” refers to any information that identifies, relates to, describes, can reasonably be associated with, or could be linked, directly or indirectly, to a natural person.

GGyess is a productivity and work-management platform designed to help users, teams, and organizations manage projects, tasks, documents, collaborative workspaces, communications, files, meetings, and related workflows from a single place.

The Platform helps users and teams organize work through spaces, projects, tasks, documents, brainstorming tools, communication features, dashboards, files, time tracking, roles, permissions, and compatible integrations. This Privacy Policy explains how GGyess manages information in connection with these productivity and collaboration features.

Art. 2 SCOPE OF APPLICATION

This Privacy Policy applies to the website, web application, mobile application, platform, and related services of GGyess, collectively referred to as “the Platform” or “the Service.”

By accessing or using GGyess, you consent to the collection and use of your information in accordance with this Policy. This Policy applies when you:

• Use GGyess as an individual user, team member, administrator, customer, guest, or authorized user.
• Create, edit, upload, share, or manage content within the Platform.
• Use productivity features such as Spaces, Projects, Tasks, Documents, Brainstorming, Communication, Chats, Video Calls, Files, Timers, Dashboards, Tags, Views, Roles, Permissions, and related tools.
• Connect compatible third-party integrations, including Google Drive and Canva. If additional integrations are added in the future, GGyess may update this Policy or provide specific notices regarding those integrations.
• Visit our website or interact with pages that link to this Policy.
• Communicate with us via email, forms, customer support, commercial inquiries, marketing communications, or other channels.

This Policy does not apply to third-party websites, applications, platforms, or services that are not owned or controlled by GGyess.

Art. 3 OUR ROLE AS CONTROLLER

Depending on how GGyess is used, we may process data in different ways:

Controller

When you create your own account on GGyess, subscribe to the Service, contact us, or interact with our website, GGyess acts as the controller of the Personal Data collected for those purposes.

Processor

When an organization, company, team, or account administrator provides access to GGyess for its users, that organization may control certain workspace data, account settings, permissions, and content. In those cases, GGyess may process certain information on behalf of that organization to provide the Service.

Art. 4 CATEGORIES OF PERSONAL DATA WE COLLECT

We collect information from the following categories and sources:

• Information you provide to us directly.
• Information generated when using the Platform.
• Information collected automatically through devices, cookies, logs, and analytics technologies.
• Information received from authorized users, administrators, service providers, and compatible third-party integrations.
• Information necessary to process payments and manage subscriptions.
• Information inferred or derived from the above data to improve the user experience and the Platform.

Art. 5 INFORMATION PROVIDED DIRECTLY

When you create or use an account on GGyess, we may collect the following information:

• First and last name.
• Email address.
• Phone number, if provided.
• Company or organization name, if provided.
• Job title, role, or professional information, if provided.
• Profile photo or avatar, if provided.
• Username, display name, and account preferences.
• Login credentials or authentication information.
• Language, notifications, time zone, and platform settings.
• Billing contact information.
• Subscription plan information.
• Customer support messages, inquiries, screenshots, comments, or related correspondence.
• Marketing and communication preferences.
• Any other information you choose to submit through the Platform.

Art. 6 WORKSPACE, PRODUCTIVITY, AND COLLABORATION DATA

Because GGyess is a productivity and work-management platform, we collect and process content and activity created, uploaded, shared, or managed within the Platform. This may include:

• Spaces, projects, folders, work areas, or client areas.
• Tasks, subtasks, task names and descriptions, due dates, priorities, statuses, tags, checklists, attachments, comments, assignees, approvals, dependencies, and related activity.
• Custom statuses, workflows, categories, tags, boards, and views.
• Project timelines, Gantt charts, Kanban boards, calendar views, day/week/month views, checklist views, table views, dashboards, and related configuration data.
• Documents created, edited, uploaded, or shared through the Platform.
• Brainstorming boards, notes, ideas, comments, and collaborative content.
• Chats, group messages, communication threads, voice notes, attachments, and related metadata.
• Video call information: scheduled call details, participants, timestamps, meeting links, and technical metadata.
• Files, images, audio, video, PDFs, spreadsheets, documents, and other materials uploaded or connected.
• Time-tracking data, timers, activity logs, work sessions, task duration, and productivity records.
• Roles, permissions, invitations, team member access levels, administrative actions, and audit logs.
• Comments, mentions, notifications, reminders, and collaboration history.
• Usage activity associated with your interaction with the Platform.

Art. 7 PAYMENT AND BILLING INFORMATION

GGyess currently accepts credit or debit cards as payment methods. When you purchase a subscription or paid service, we may collect and process billing-related information such as:

• Billing contact name.
• Billing email address.
• Billing address, if required.
• Subscription plan and billing cycle.
• Payment status.
• Invoice and receipt information.
• Transaction history.
• Card brand, last four digits, expiration date, and similar limited details when provided by our payment processor.

GGyess uses third-party payment processors to securely process card payments. We do not store full credit or debit card numbers in our own systems.

Art. 8 AUTOMATICALLY COLLECTED INFORMATION

When you visit our website or use our Platform, we and our service providers may automatically collect certain information, which may include:

• IP address.
• Device type and operating system.
• Browser type and version.
• Internet service provider.
• Referring and exit pages.
• Pages visited and features used.
• Buttons or links clicked.
• Session duration.
• Date and time of access.
• City, derived from the IP address, not precise location.
• Device identifiers.
• Error logs, diagnostic data, and performance data.
• Search terms or navigation paths within the Platform.
• Interaction data: forms completed, preferences selected, or actions taken.

Measurement uses Google Analytics, Microsoft Clarity, and the Meta and TikTok pixels, inside and outside the app. It can include device, browser, pages viewed, time on the page, clicks, and the city derived from the IP address, not your precise location. In the European Economic Area, the United Kingdom, Switzerland, and California this runs only if you allow it. In other identified regions, including Latin America, it runs from the visit and you can reject it. If the region cannot be identified, it runs only if you allow it. Clarity can record how you interact with the page. Form masking is not complete.

Art. 9 COOKIES AND SIMILAR TECHNOLOGIES

GGyess may use cookies, pixels, local storage, web beacons, and similar technologies for the following purposes:

• Keeping you signed in.
• Remembering your preferences and settings.
• Improving the user experience.
• Measuring visits and use, inside and outside the app, according to the region and your choice.
• Protecting the Platform against fraud, abuse, and unauthorized access.

Types of cookies used

• Essential cookies: necessary for basic operation of the Platform, including keeping you signed in.
• Analytics cookies: Google Analytics and Microsoft Clarity, inside and outside the app.
• Advertising cookies: Meta and TikTok pixels.

In the European Economic Area, the United Kingdom, Switzerland, and California these cookies stay off until you accept. In other identified regions, including Latin America, they are on from the visit and you can reject them. If the region cannot be identified, they stay off until you accept. You can change the choice with the Cookies button. If you reject, Google Analytics, Clarity, and the pixels do not run.

Art. 10 INFORMATION FROM THIRD PARTIES

We may receive information about you from third parties, including:

• Account administrators who invite you to a workspace.
• Team members who assign tasks to you, mention you, or add you to projects.
• Customers, companies, or organizations that subscribe to GGyess and provide access to their users.
• Service providers supporting hosting, analytics, payments, customer support, security, email delivery, marketing, or technical operations.
• Third-party integrations you choose to connect to GGyess, such as Google Drive or Canva.
• Publicly accessible sources, where permitted by law.

Art. 11 GOOGLE DRIVE INTEGRATION

GGyess currently supports integration with Google Drive. If you choose to connect your Google or Google Drive account to GGyess, we may request access to certain Google user data only to the extent necessary to provide the features you choose to use.

Data we may access

• Email address, name, and profile information from your Google account when used for authentication or account linking.
• File names, file IDs, folder IDs, file metadata, or information about files selected in Google Drive.
• Files, folders, documents, or content you choose to connect, upload, import, attach, create, access, or manage through GGyess.
• Access or authorization tokens that allow GGyess to maintain the connection and perform actions you initiate or authorize.

Commitments regarding Google user data

• GGyess uses Google Drive data only to provide or improve user-visible features within the Platform.
• We do not use Google Drive data for advertising purposes.
• We do not sell Google users’ data.
• We do not transfer Google users’ data except when necessary to provide the connected features, comply with applicable law, protect security, or as permitted by Google’s policies.

You may disconnect Google Drive from GGyess at any time through the Platform settings or through your Google account security settings.

Art. 12 CANVA INTEGRATION

GGyess currently supports integration with Canva. If you choose to use Canva through GGyess, we may process the information necessary to connect your workflow in GGyess with Canva’s features. This may include:

• Canva account connection information.
• Design links, design identifiers, project references, or design metadata.
• Files, images, graphics, or design assets selected by the user.
• Information necessary to open, attach, create, export, import, or reference Canva designs within GGyess.
• Authorization tokens or integration credentials, when necessary.

Art. 13 PURPOSES OF PROCESSING

We use Personal Data to provide, maintain, protect, and improve GGyess. Specifically, we may use information to:

• Create and manage user accounts.
• Authenticate users and protect account access.
• Provide access to Spaces, Projects, Tasks, Documents, Brainstorming, Communication, Files, Dashboards, Views, Roles, Permissions, Timers, and related features.
• Enable collaboration among team members, customers, administrators, and guests.
• Process subscriptions, invoices, renewals, card payments, and billing communications.
• Provide customer support and respond to inquiries.
• Send transactional emails: account confirmations, subscription notices, password resets, security alerts, product updates, and service-related communications.
• Send marketing communications, newsletters, product announcements, or promotional messages, where permitted by law and user preferences.
• Analyze usage trends and improve the Platform.
• Develop, test, troubleshoot, and improve features.
• Monitor Platform performance, reliability, and security.
• Detect, prevent, and investigate fraud, abuse, unauthorized access, technical issues, policy violations, or security incidents.
• Comply with legal obligations.
• Enforce our Terms of Service, agreements, and policies.
• Protect our rights, property, users, customers, and business interests.
• Aggregate or anonymize information for analytics, product improvement, research, reporting, or business purposes.

Art. 14 ARTIFICIAL INTELLIGENCE AND AUTOMATED FEATURES

GGyess may include artificial intelligence, automation, or intelligent productivity features designed to help users organize, create, summarize, classify, search, or improve their work.

If you use AI-based or automated features, information you provide may be processed to generate the requested output, such as summaries, task suggestions, document assistance, brainstorming support, productivity recommendations, or workflow improvements.

AI use principles

• GGyess will use AI-related information in accordance with this Policy and applicable product disclosures.
• Where possible, we may use aggregated or anonymized information to improve the Platform.
• AI features will not make automated decisions with significant legal effects concerning you without appropriate human oversight.
• You may disable certain AI features through account settings, where available.

Art. 15 LEGAL BASIS FOR PROCESSING

Where applicable law requires a legal basis for processing Personal Data, we may process your information based on:

• Contractual necessity: to provide the Service, manage your account, process payments, and fulfill our contractual obligations.
• Legitimate interests: to improve, protect, analyze, market, and operate GGyess, where such interests are not overridden by your privacy rights.
• Consent: when you grant permission for specific processing activity, such as connecting a third-party integration, receiving certain marketing communications, or using optional features.
• Legal obligation: when processing is necessary to comply with laws, regulations, legal process, tax obligations, or valid governmental requests.

Art. 16 DISCLOSURE AND TRANSFER OF DATA

We do not sell your Personal Data. We may disclose information only in the circumstances described in this Policy, including to:

• Service providers that help us operate GGyess: hosting, cloud storage, analytics, payment processors, email delivery providers, customer support providers, security tools, and technical infrastructure.
• Payment processors to manage card payments, subscriptions, invoices, and billing records.
• Third-party integrations you choose to connect, such as Google Drive or Canva.
• Account administrators or workspace owners when your account is part of a team, company, client workspace, or organization.
• Other users in your workspace to enable collaboration, visibility, comments, assignments, roles, permissions, messages, documents, files, or project participation.
• Professional advisers: lawyers, auditors, accountants, insurers, and consultants, when reasonably necessary.
• Authorities, regulators, courts, or law enforcement when required by law or to protect legal rights.
• Parties to a business transaction if GGyess participates in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction.
• Other third parties with your consent or following your instructions.

We require service providers to use Personal Data only as necessary to provide services to us and to apply appropriate confidentiality and security measures.

Art. 17 WORKSPACE VISIBILITY AND ADMINISTRATORS

If you use GGyess as part of a workspace, company, agency, client account, or team, certain information may be visible to the account holder, administrators, managers, or other authorized users. This may include:

• Your name and email address.
• Profile information.
• Assigned tasks.
• Comments and activity on tasks.
• Documents, files, and content shared within the workspace.
• Messages or communications within workspace features.
• Time-tracking activity or timers, if used.
• Project participation and role information.
• Activity logs or audit logs.

Workspace administrators may add or remove users, assign roles, modify permissions, access workspace content, export information, manage billing, and control account settings.

Art. 18 DATA RETENTION

We retain Personal Data only as long as necessary to provide the Service, fulfill the purposes described in this Policy, meet legal obligations, resolve disputes, enforce agreements, protect our rights, and maintain business records.

Retention periods may vary depending on:

• The type of information.
• The status of the user account.
• Subscription and billing requirements.
• Workspace administrator configuration.
• Legal, tax, accounting, or regulatory compliance obligations.
• Security and fraud-prevention needs.
• Backup and disaster-recovery processes.

When Personal Data is no longer needed, we will delete, anonymize, segregate, or securely retain it as required by law or legitimate business needs.

Art. 19 DATA DELETION

You may request deletion of your Personal Data by contacting us using the contact details at the end of this Policy. You may also delete certain information directly within your GGyess account, depending on available functionality.

Please note that deletion requests may be limited when we need to retain certain information to:

• Comply with legal obligations.
• Complete transactions.
• Maintain security.
• Resolve disputes.
• Enforce agreements.
• Protect against fraud or abuse.
• Maintain business, tax, accounting, or audit records.
• Preserve workspace content controlled by an organization, account holder, or administrator.

Art. 20 SECURITY MEASURES

We use reasonable administrative, technical, and organizational safeguards designed to protect Personal Data against unauthorized access, loss, misuse, alteration, disclosure, or destruction. These measures may include:

• Encryption in transit and at rest.
• Secure authentication practices (including two-factor authentication where available).
• Role-based access controls and permissions.
• Monitoring and logging.
• Secure hosting infrastructure.
• Administrative restrictions and internal access controls.
• Periodic security reviews and assessments.
• Backup and data-recovery procedures.
• Staff training on data protection.

Art. 21 INTERNATIONAL DATA TRANSFERS

GGyess is operated by GLOADI LLC. in the United States. We work to store our own data in the United States. We cannot guarantee where Google, Microsoft, Meta, TikTok, or Cloudflare store data they process. Your information may also be processed in other countries where we or our service providers operate.

Those countries may have data protection laws that differ from those in your jurisdiction. Where required by applicable law, we will use appropriate safeguards for international transfers of Personal Data, which may include standard contractual clauses, data processing agreements, or other approved mechanisms.

Art. 22 CHILDREN'S PRIVACY

GGyess is not intended for children under 16.

We do not knowingly collect Personal Data from children under 16. If we learn that we have collected Personal Data from a child under 16 without appropriate parental or guardian consent, we will take reasonable steps to delete that information.

Art. 23 USERS' RIGHTS

Depending on your location, you may have certain rights regarding your Personal Data. These rights may include:

• Right of access: to the Personal Data we process about you.
• Right of rectification: to request correction of inaccurate or incomplete Personal Data.
• Right of erasure: to request deletion of certain Personal Data.
• Right to restriction of processing: to restrict or object to certain processing.
• Right to data portability: to receive your data in a structured, commonly used format.
• Right to withdraw consent: where processing is based on consent.
• Right to object: to certain types of processing, such as direct marketing.
• Right not to be subject to automated decisions: including profiling with significant effects.
• Right not to be discriminated against: for exercising your privacy rights.
• Right to lodge a complaint: with a competent data protection authority.

To exercise your rights, contact us using the information provided in the “Contact” section. For privacy and security reasons, we may need to verify your identity before processing your request. We will respond within the timeframes established by applicable law.

Art. 24 COMMERCIAL COMMUNICATIONS

We may send you marketing communications about GGyess, such as product updates, feature announcements, newsletters, offers, surveys, and educational content.

You may opt out of marketing emails using the unsubscribe link in the email or by contacting us. Even if you opt out of marketing communications, we may continue to send transactional or service-related messages.

Art. 25 NO SALE OF PERSONAL DATA

GGyess does not sell, rent, lease, trade, or monetize Personal Data in any way. We do not sell Personal Data to advertisers, data brokers, or third-party information resellers.

We may disclose information to service providers, integrations, administrators, or legal parties as described in this Policy, but such disclosure does not constitute a sale of Personal Data.

Art. 26 GOOGLE API LIMITED USE POLICY

GGyess’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. When GGyess accesses Google user data through Google Drive or other Google API services authorized by the user:

• It will use Google user data only to provide or improve user-visible features in the Platform.
• It will request only the permissions necessary for the offered features.
• It will not use Google user data for advertising purposes.
• It will not sell Google user data.
• It will not transfer Google user data except when necessary to provide or improve user-visible features, comply with law, protect security, or as permitted by Google’s policy.
• It will not allow human access to Google user data unless the user has provided permission, it is necessary for security reasons, required by law, or permitted under applicable policy.
• It will apply reasonable and appropriate security measures to protect Google user data.

Art. 27 THIRD-PARTY SERVICES AND INTEGRATIONS

GGyess may allow users to connect compatible third-party services, currently including Google Drive and Canva. If additional integrations are added in the future, GGyess may update this Policy or provide specific notices regarding those integrations.

When you connect a third-party service, you authorize GGyess to access, process, transfer, or display certain information from that service according to the permissions you grant.

Third-party services are not owned or controlled by GGyess. Their own privacy policies, terms, security practices, and account settings apply. Review the privacy policy and terms of any third-party service before connecting it to GGyess.

Art. 28 ACCESSIBILITY AND USERS WITH DISABILITIES

GGyess is committed to making its Platform accessible to all users, including people with disabilities. If you need assistance exercising your privacy rights, accessing this Policy in an alternative format, or contacting us about privacy matters, please contact us using the details in the “Contact” section and we will make reasonable efforts to assist you.

Art. 29 PRIVACY BY DESIGN AND BY DEFAULT

GGyess adopts privacy-by-design and privacy-by-default principles in developing and maintaining the Platform. This means:

• Integrating privacy considerations in the early stages of designing new features and services.
• Collecting only the minimum data necessary for each purpose.
• Applying more protective privacy settings by default.
• Ensuring data protection measures are proactive, not reactive.
• Conducting data protection impact assessments (DPIAs) where applicable.

Art. 30 RECORD OF PROCESSING ACTIVITIES

In accordance with obligations arising from applicable data protection regulations, GGyess maintains internal records of Personal Data processing activities it carries out as controller or processor. Those records include, among other information, the categories of data processed, processing purposes, categories of recipients, and planned retention periods.

Art. 31 SECURITY BREACH NOTIFICATION

If a security breach affecting your Personal Data occurs, GGyess will act with due diligence to:

• Assess and contain the security breach as quickly as possible.
• Notify competent supervisory authorities within the timeframes established by applicable law, where required.
• Inform affected users when the breach is likely to result in a high risk to their rights and freedoms, in accordance with applicable regulations.
• Document the breach, its effects, and corrective measures taken.

Art. 32 CUSTOMER DATA, USER DATA, WEBSITE VISITOR DATA, AND BUSINESS CONTACTS

For clarity, GGyess may process different categories of information depending on how a person interacts with the Platform:

Customer Data

“Customer Data” means information, content, files, documents, tasks, projects, messages, comments, workspace logs, attachments, and other data submitted to GGyess by a customer, company, organization, team, account holder, or workspace administrator, or on their behalf.

User Data

“User Data” means Personal Data relating to individuals who use the Platform, including account holders, administrators, team members, invited users, customers, collaborators, guests, or other authorized users.

Website Visitor Data

“Website Visitor Data” means information collected from individuals who visit our website, landing pages, help pages, blogs, forms, or other public pages.

Business Contact Data

“Business Contact Data” means information relating to prospective customers, partners, vendors, affiliates, event participants, or individuals who interact with GGyess for commercial, sales, support, marketing, partnership, or communication purposes.

When GGyess processes Customer Data on behalf of a customer, company, organization, account holder, or workspace administrator, GGyess may act as a service provider or processor. In those cases, the customer or account holder is generally responsible for determining how and why Customer Data is processed.

When GGyess processes information for its own business purposes, such as account management, billing, website analytics, marketing, platform security, customer support, and legal compliance, GGyess may act as controller or business, depending on applicable law.

Art. 33 WORKSPACE OWNERS, ADMINISTRATORS, AND ORGANIZATIONAL ACCOUNTS

If you use GGyess as part of a workspace, team, company, client account, agency, educational institution, or organization, your account and activity may be managed by the workspace owner or administrator.

Depending on the subscription plan, role configuration, and permissions enabled within the Platform, workspace owners and administrators may be able to:

• Add, invite, approve, restrict, suspend, or remove users.
• Assign roles and permissions.
• Create, edit, access, export, retain, or delete workspace content.
• View user profiles, names, emails, roles, task assignments, comments, documents, files, chats, project activity, time tracking, and related workspace records.
• Access information stored in spaces, projects, tasks, documents, dashboards, brainstorming boards, communication areas, meetings, file sections, and other collaborative areas.
• Configure integrations, security settings, billing configuration, subscription plans, and workspace preferences.
• Restrict a user’s ability to edit, delete, export, or modify information associated with the workspace.
• Review workspace activity to maintain security, compliance, productivity, and operational continuity.

Art. 34 DATA PROCESSING ADDENDUM

Certain customers, companies, or organizations may be eligible to enter into a Data Processing Addendum or similar data protection agreement with GGyess.

A Data Processing Addendum may describe additional obligations regarding:

• Processing of Customer Data.
• Roles of controller, processor, business, service provider, customer, and account administrator.
• Subprocessors or service providers used to provide the Platform.
• Security measures.
• International data transfers.
• Data retention and deletion.
• Customer instructions.
• Confidentiality obligations.
• Legal compliance.

Where a Data Processing Addendum applies, GGyess will process Customer Data in accordance with that agreement and the customer’s documented instructions, unless applicable law requires otherwise.

Art. 35 SUBPROCESSORS, CONTRACTORS, VENDORS, AND SERVICE PROVIDERS

GGyess may use third-party service providers, vendors, contractors, subprocessors, consultants, and technical partners to help operate, protect, maintain, support, analyze, and improve the Platform.

Those providers may deliver services such as:

• Cloud hosting and infrastructure.
• Data storage and backups.
• Payment processing.
• Credit or debit card processing.
• Fraud detection and prevention.
• Security monitoring.
• Analytics.
• Error tracking.
• Email delivery.
• Customer support.
• Ticketing and help desk tools.
• Communication tools.
• Video conferencing or meeting infrastructure.
• File storage.
• Authentication.
• Database management.
• Performance monitoring.
• Marketing operations.
• Product analytics.
• Legal, accounting, tax, compliance, and professional advisory services.

These providers may access Personal Data only as necessary to provide services to GGyess and must use that information in accordance with contractual obligations, confidentiality requirements, security standards, and applicable law.

GGyess does not authorize service providers to use Personal Data for their own independent purposes unless permitted by law, necessary to provide the service, or disclosed to the user.

Art. 36 PRODUCT ANALYTICS, SESSION DATA, AND PLATFORM IMPROVEMENT

GGyess may collect analytics and usage data to understand how users interact with the Platform and to improve performance, usability, reliability, security, and user experience. This may include:

• Features used.
• Spaces, projects, tasks, documents, dashboards, views, comments, files, or communication areas accessed.
• Search terms used within the Platform.
• Types, sizes, and names of uploaded files.
• Task activity, assignments, due dates, priorities, statuses, and workflow interactions.
• Number of workspaces, spaces, projects, tasks, or documents created.
• Pages viewed, clicks, and session duration, with Google Analytics and Microsoft Clarity, inside and outside the app, according to the region and your choice.
• Device type, operating system, browser type, IP address, city derived from the IP address, crash logs, and diagnostic data.
• Feature adoption, performance metrics, error reports, and troubleshooting data.
• Interactions with integrations such as Google Drive and Canva.

Google Analytics and Microsoft Clarity measure use inside and outside the app. The Meta and TikTok pixels measure visits for advertising. In the European Economic Area, the United Kingdom, Switzerland, and California they run only if you allow it. In other identified regions, including Latin America, they run from the visit and you can reject them. If the region cannot be identified, they run only if you allow it. Clarity can record the interaction, and form masking is not complete.

GGyess may use aggregated, anonymized, segregated, or pseudonymized data for analytics, reporting, business intelligence, product development, research, performance improvement, marketing analytics, and other lawful business purposes.

Art. 37 SUPPORT, SALES, TRAINING, RESEARCH, AND FEEDBACK

If you contact GGyess for customer support, sales, billing, onboarding, training, product feedback, research, demonstrations, or troubleshooting, we may collect and process information related to that interaction. This may include:

• Your name, email, phone number, company name, and job title.
• Tickets and support requests.
• Questions, comments, screenshots, screen recordings, files, logs, attachments, or documentation you provide.
• Chat conversations with support representatives or automated support tools.
• Call recordings, video conference recordings, meeting notes, or transcripts, where permitted by law and communicated to you when necessary.
• Product feedback, survey responses, usability research, beta feedback, testimonials, reviews, or feature requests.
• Information necessary to verify your identity or authorize support actions.

We may use this information to respond to requests, resolve technical issues, provide training, improve the Platform, maintain quality control, support internal operations, prevent fraud, and develop better services.

Art. 38 BETA FEATURES, EXPERIMENTS, AND PRODUCT TESTING

GGyess may offer beta features, early-access features, experimental tools, preliminary versions, or testing environments.

If you choose to use beta or experimental features, GGyess may collect additional information such as:

• Bug reports.
• Feature feedback.
• Performance data.
• Usage activity.
• Error logs.
• Screenshots or recordings submitted by the user.
• AI interaction metadata if the beta feature includes artificial intelligence.

Beta features may change, stop working, be discontinued, or be modified at any time. Information collected through beta features may be used to test, troubleshoot, improve, protect, and develop GGyess products and services.

Art. 39 ADDITIONAL DISCLOSURES ON ARTIFICIAL INTELLIGENCE AND MACHINE LEARNING

GGyess may include artificial intelligence, automation, machine learning, or intelligent productivity features that help users organize, summarize, classify, draft, search, prioritize, brainstorm, or manage their work.

When a user activates an AI-based feature, GGyess may process:

• Content submitted to the AI feature.
• The workspace object from which the feature was activated, such as a task, project, document, chat, brainstorming board, file, or dashboard.
• The timestamp of the interaction.
• The user who activated the feature.
• The type of AI feature used.
• The output generated by the feature.
• Feedback provided about the output.
• Related metadata necessary to operate, protect, improve, or troubleshoot the feature.

If GGyess uses third-party AI providers to power certain features, those providers may process information only as necessary to provide the requested AI functionality, subject to contractual obligations and applicable law.

Planily AI features send the provider the content the user submits to the feature, such as tasks, documents, spreadsheet rows, or the text of a post. The provider depends on the workspace plan: OpenAI on plans other than Growth and Business, and xAI (Grok) on Growth and Business.

OpenAI does not use data sent to its API to train its models unless the customer explicitly opts in. By default, OpenAI keeps abuse-monitoring logs, which may include the submitted content and the response, for up to 30 days, unless the law requires a longer period. If the API organization has an OpenAI-approved zero-retention setting, that period does not apply to customer content.

xAI does not train its models on API inputs or outputs without explicit permission. By default, xAI keeps those requests, encrypted at rest, for up to 30 days for abuse auditing, and then deletes them, unless the law requires a longer period. If the xAI team has Zero Data Retention enabled, that period does not apply and the content is not stored on disk. That setting is configured in the xAI console.

If a person connects their own AI client, such as ChatGPT or Claude, through the GGyess connector, that client may read workspace data because the person authorized it. That access is separate from the data Planily sends to OpenAI or xAI.

Where possible, GGyess will seek to use aggregated, anonymized, or segregated information for improvement, analytics, testing, and product development.

Workspace owners and administrators may have controls or settings related to whether AI features are enabled, disabled, restricted, or available to users within their workspace.

Art. 40 SENSITIVE PERSONAL DATA

GGyess does not intentionally request sensitive Personal Data unless necessary for a specific feature, required by law, voluntarily submitted by the user, or included in content uploaded to the Platform.

Sensitive Personal Data may include information such as government identification numbers, financial account information, health information, biometric data, precise geolocation, racial or ethnic origin, religious beliefs, political opinions, trade union membership, sexual orientation, or other categories protected under applicable law.

Users are responsible for ensuring they have appropriate authorization before uploading, sharing, or processing sensitive information through GGyess.

Where required by law, GGyess will request consent before processing certain types of sensitive information. GGyess does not use or disclose sensitive Personal Data for purposes other than those permitted by applicable law.

Art. 41 PUBLIC CONTENT, TESTIMONIALS, REVIEWS, AND COMMUNITY AREAS

If GGyess offers public forums, communities, blogs, public comments, public reviews, testimonials, customer stories, webinars, events, or similar public-facing areas, any information you choose to submit may be visible to others. This may include:

• Your name.
• Profile information.
• Company name.
• Comments.
• Reviews.
• Questions.
• Feedback.
• Testimonials.
• Images or content you choose to share.

Public content may be read, collected, indexed by search engines, copied, stored, or used by other individuals or third parties.

If you submit a public review, testimonial, comment, or endorsement, GGyess may display it on its website, marketing materials, public pages, or promotional content, where permitted by law and with your consent when required.

You may contact GGyess to request removal of public content. In some cases, we may not be able to fully remove content that has already been copied, indexed, archived, shared by others, or retained for legal or technical reasons.

Art. 42 INVITATIONS AND INFORMATION PROVIDED ABOUT OTHER PEOPLE

Users may invite other people to join a workspace, project, team, task, meeting, document, or other area of GGyess.

When you invite another person, assign them to a task, mention them in a comment, add them to a workspace, or provide their contact information, you represent that you have authority to share that information with GGyess.

GGyess may use the provided contact information to send invitations, notifications, reminders, or communications related to the workspace.

The invitation may include your name, email address, workspace name, company name, or other relevant context so the invitee can understand who invited them and why.

Art. 43 DATA EXPORT AND PORTABILITY

Depending on your role, plan, permissions, and workspace settings, GGyess may allow you or your administrator to export certain data from the Platform. Exportable information may include:

• Account information.
• Workspace information.
• Project data.
• Task data.
• Documents.
• Files.
• Comments.
• Reports.
• Time-tracking information.
• Activity logs.
• Other information created or stored within the Platform.

If you are an administrator or account holder, you may have broader export permissions than an ordinary user.

Art. 44 LIMITATIONS ON DELETION

GGyess will make reasonable efforts to delete Personal Data when required by law, requested by the user, or no longer necessary for the purposes described in this Policy.

However, deletion may be limited in certain cases, including when information:

• Is necessary for legal, tax, accounting, billing, compliance, or audit obligations.
• Is necessary to complete transactions.
• Is necessary to detect, prevent, or investigate fraud, abuse, security incidents, or unauthorized activity.
• Is stored in backup systems for a limited period.
• Is controlled by a workspace owner, company, organization, customer, team, or administrator.
• Has been shared with other users in a collaborative workspace.
• Is part of business records, invoices, receipts, support history, or transaction logs.
• Has been anonymized, aggregated, or segregated.
• Cannot be deleted immediately due to technical limitations, disaster-recovery systems, or security requirements.

When deletion is not immediately possible, GGyess may securely store, isolate, restrict, anonymize, or segregate information until deletion is technically or legally appropriate.

Art. 45 GLOBAL PRIVACY RIGHTS

GGyess respects privacy rights that may apply to users in different jurisdictions. Depending on where you reside, you may have the right to:

• Know what Personal Data we collect, use, disclose, or share.
• Access your Personal Data.
• Request correction of inaccurate Personal Data.
• Request deletion of certain Personal Data.
• Request restriction of processing.
• Object to certain processing.
• Withdraw consent where processing is based on consent.
• Request data portability.
• Opt out of certain marketing communications.
• Opt out of certain targeted advertising or profiling, where applicable.
• Appeal a privacy-related decision, where applicable.
• Designate an authorized agent to submit a request on your behalf, where applicable.
• Not be discriminated against for exercising your privacy rights.

GGyess may extend certain privacy rights globally even when not legally required, but some rights may be limited depending on applicable law, user role, account ownership, workspace permissions, technical feasibility, legal obligations, and the nature of the requested data.

Art. 46 PRIVACY RIGHTS IN CALIFORNIA AND OTHER U.S. STATES

If you are a resident of California or another U.S. state with applicable privacy laws, you may have additional rights regarding your Personal Data. These include the right to:

• Know the categories of Personal Data collected.
• Know the categories of sources from which Personal Data is collected.
• Know the business or commercial purposes for collecting, using, disclosing, or sharing Personal Data.
• Know the categories of third parties to whom Personal Data is disclosed.
• Request access to specific pieces of Personal Data.
• Request correction of inaccurate Personal Data.
• Request deletion of certain Personal Data.
• Opt out of the sale or sharing of Personal Data, if applicable.
• Opt out of targeted advertising, where applicable.
• Limit use or disclosure of sensitive Personal Data, where applicable.
• Appeal a denied request, where applicable.
• Use an authorized agent to submit a request, where permitted by law.

GGyess does not sell Personal Data. GGyess does not knowingly sell or share Personal Data of individuals under 16.

If GGyess engages in activities that could be considered “sharing” or “targeted advertising” under certain U.S. state privacy laws, users may have the right to opt out as required by applicable law.

Art. 47 GLOBAL PRIVACY CONTROL AND DO NOT TRACK

Some browsers and devices allow users to send privacy signals, such as Global Privacy Control (GPC) or Do Not Track.

In the European Economic Area, the United Kingdom, Switzerland, and California, measurement stays off until you allow it. In other identified regions, including Latin America, measurement runs from the visit and you can reject it. If the region cannot be identified, it stays off until you allow it.

Do Not Track is a browser setting that asks websites not to track users. Because there is no uniform industry standard for responding to Do Not Track signals, GGyess may not respond to those signals unless required by applicable law.

You manage this choice in the cookie notice and with the Cookies button, inside and outside the app. You can also use your browser settings.

Art. 48 COMMUNICATIONS, NOTIFICATIONS, AND SERVICE MESSAGES

GGyess may contact you via email, phone, SMS, in-app notifications, push notifications, chat, or other communication channels, depending on the information you provide and your communication preferences.

Service-related communications

These communications may include account creation messages, workspace invitations, password reset notices, security alerts, billing notices, subscription updates, payment confirmations, product updates, system notifications, task reminders, project notifications, collaboration alerts, and changes to legal terms or policies. Certain transactional or service-related communications cannot be opted out of because they are necessary to provide the Platform.

Promotional communications

These may include product announcements, feature updates, educational content, newsletters, offers, events, webinars, surveys, and marketing campaigns. You may opt out of promotional emails by following the unsubscribe instructions in the message or by contacting GGyess.

Art. 49 ADVERTISING, MARKETING ANALYTICS, AND EMAIL TRACKING

GGyess may use limited information to understand the effectiveness of its marketing, advertising, website content, emails, and campaigns. This may include:

• Whether an email was opened.
• Whether a link in an email was clicked.
• Which pages were visited.
• Which forms were submitted.
• City, derived from the IP address, not precise location.
• Device and browser information.
• Interaction with marketing content.

The Meta and TikTok pixels measure visits for advertising, inside and outside the app, under the same regional rule: prior permission in the European Economic Area, the United Kingdom, Switzerland, and California; on from the visit in other identified regions, including Latin America; and only with permission if the region cannot be identified. City is derived from the IP address, not precise location.

Art. 50 LOCAL STORAGE AND DEVICE-BASED FUNCTIONALITY

GGyess may store certain information locally in your browser, device, or application environment to help the Platform operate more efficiently. This may include:

• Login session information.
• User preferences.
• Language settings.
• Interface configuration.
• Draft content.
• Temporary files.
• Cached data.
• Offline or performance-related data.

Local storage can improve speed, reliability, and user experience. Deleting browser data, application data, or local storage may affect the functionality of certain features.

Art. 51 DATA ACCURACY AND USER RESPONSIBILITY

Users are responsible for keeping their account information accurate and up to date. You may update certain account information directly through your GGyess account settings.

If you use GGyess through an organization, company, customer, team, or workspace controlled by another account holder, the workspace administrator may need to update some information.

Users are responsible for ensuring they have the right to upload, share, submit, or process any information, files, documents, messages, images, video, audio, customer data, employee data, personal data, or third-party data through GGyess.

Art. 52 USER SECURITY RESPONSIBILITIES

GGyess applies reasonable safeguards to protect information, but users also play an important role in maintaining security. Users should:

• Use strong, unique passwords.
• Keep login credentials confidential.
• Avoid sharing accounts.
• Use secure devices and networks.
• Periodically review workspace permissions.
• Remove users who no longer need access.
• Avoid uploading highly sensitive information unless necessary.
• Be careful when connecting third-party integrations.
• Immediately report suspected unauthorized access.

Art. 53 THIRD-PARTY INTEGRATIONS AND PASSWORDS

When users connect third-party services to GGyess, such as Google Drive or Canva, the third-party service may share information with GGyess or receive information from GGyess depending on configuration, permissions, and user actions.

GGyess does not intend to collect or store passwords for third-party services. Integrations generally rely on authorization tokens, OAuth permissions, API keys, or similar secure methods provided by the third-party service.

Users may revoke access to third-party integrations through GGyess settings, where available, or through the third-party provider’s account settings. Disconnecting an integration may limit or disable features that depend on that integration.

Art. 54 ACCESSIBILITY OF THIS PRIVACY POLICY

GGyess aims to make this Privacy Policy reasonably accessible to all users. If you need this Policy in an alternative format or have difficulty accessing it, you may contact us at:

Art. 55 ORDER OF PRECEDENCE

This Privacy Policy may be supplemented by other agreements, notices, or terms, including GGyess’s Terms of Service, subscription terms, the Data Processing Addendum, integration-specific notices, or product-specific disclosures.

If an independent written agreement applies to a customer’s use of GGyess, that agreement may prevail with respect to the subject matter covered by that agreement.

Art. 56 CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically. If we make changes, we will publish the updated Privacy Policy on our website or in the Platform and update the “Last updated” date shown in the header.

Where required by law or where changes are material, we may provide additional notice—for example, by email, in-app notification, or another reasonable method.

Continued use of GGyess after changes take effect constitutes acceptance of the updated Privacy Policy. If you do not agree with the updated Privacy Policy, you must stop using the Platform and may request deletion of your account or Personal Data as described above.

Art. 57 COMPLAINTS

If you have a complaint or concern about this Privacy Policy or how GGyess processes your Personal Data, please contact us first so we can try to resolve your issue.

Users in certain jurisdictions may also have the right to lodge a complaint with a local data protection authority.

California users

California users and residents may contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs:

• Address: 1625 North Market Blvd., Suite N 112, Sacramento, California 95834
• Phone: (800) 952-5210 or (916) 445-1254

We will not discriminate against any user for exercising privacy rights.

Art. 58 CONTACT

To request information, unsubscribe from our mailing list, request deletion of your data, exercise your privacy rights, or ask a question about this Privacy Policy, contact us: