Privacy policy
Who is responsible
Guizzo is in development. Until a company is set up, Guizzo is run by Mirko Nosenzo, a private individual in Italy, who is the data controller for this site (guizzo.ai) and for the Guizzo beta (app.guizzo.ai and mcp.guizzo.ai). Write to privacy@guizzo.ai about anything on this page.
What we collect
On this site, we count views of each page of this site per day, by where they came from (another site, a campaign link, or another of our pages), as plain totals: no cookies, and nothing that identifies you (no IP address, no browser details) is stored with them. The site sets no cookies and uses no tracking or advertising tools. Our hosting provider processes technical data such as your IP address and browser type, only to deliver the site and protect it from abuse.
If you sign up for the beta, on this site or on app.guizzo.ai:
- your email address, and your name if you give it, and the workspaces you belong to;
- if you signed up with the form on this site, where you came from: the site that linked to us, or the campaign name in the link you followed (such as
utm_source=linkedin); - if every place for a new workspace is taken when you sign up, your email address and when you joined the queue, so that places go in order of arrival;
- which version of the Terms of Service you accepted, and when;
- the sign-in codes we email you, stored only in a form that cannot be read back;
- if you add a passkey, its public key. Your fingerprint, face or PIN never leave your device: we never receive them;
- if you turn on notifications on a device, the address its browser gives us to reach it and the keys that encrypt what we send, the kind of device (such as "Safari on iPhone"), and when it last got a notification or opened the app;
- the AI apps you connect to Guizzo: the name the app gives itself, when you connected it and when it was last used, and the access tokens it uses, stored only in a form that cannot be read back;
- what you and your agents send through Guizzo: questions, approval requests, the email addresses of the people they go to, and their answers;
- the contacts you or your agents save in the address book: their name, email address and an optional note, seen only by you or, if you share them, by your workspace;
- the facts and decisions you or your agents save as team context, as written, with who saved them, when, and who decided: seen only by you or, if you share them, by your workspace. They can mention other people.
If someone sent you a question through Guizzo, we have your email address, the question and the answer you give. You do not need an account to answer.
If you stop requests from a workspace, or from anyone on Guizzo, with the link in a request email or on its page, we keep your email address, what you stopped and when, and which workspace's request the link was in, so that nothing more is sent to you and we can see which workspaces people stop.
If you mark a request email as spam in your email app, your email provider tells our email service, Cloudflare, which stops sending you our email. Cloudflare tells us which email it was, and we note that the request was reported and stop requests to you from anyone on Guizzo, as if you had used the stop link, so that we can see which workspaces people report. If you then ask us for a code to undo that stop, we ask Cloudflare to deliver our email to you again so that the code reaches you; if you do not undo the stop within a few minutes, we ask Cloudflare to stop it again.
If our email to you bounces for good, because the address does not exist or refuses email, we stop requests to it from anyone on Guizzo, so that no one is charged for requests that cannot arrive, and the person who asked sees that their email did not reach you. If the address has a Guizzo account, requests still reach you there, without the email. The stop ends as soon as someone signs in to Guizzo with a code sent to that address, which shows that it works.
If you report abuse to abuse@guizzo.ai, we keep your email address and your message to look into it and to tell you the outcome. We never tell the people you report who reported them. If we take a decision under our terms about a workspace or an account, we keep a record of it: what we decided, the reasons, the request it concerns, whom we told, the email address of whoever reported it, and our notes.
If someone saved you as a contact, we have the name, email address and note they entered, so that they and their agents can send you questions. You can ask them, or us, to remove it.
Cookies
guizzo.ai sets no cookies. app.guizzo.ai sets one cookie, only when you sign in: it keeps you signed in for up to 30 days, or until you sign out. It is strictly necessary for the service you ask for, so it needs no consent, and it is never used for tracking. On both, if you pick a light or dark theme, your browser remembers that choice in its local storage: it stays on your device and is never sent to us. In the same way, if you put off the offer to turn on notifications, your browser remembers it for 30 days.
Why, and on what basis
If you are in the queue, we use your email address to tell you when your place is ready, and for nothing else. The legal basis is the agreement to provide the beta to you, which you ask for when you sign up (GDPR Art. 6(1)(b)). When you sign up, or later in your account settings, you can also ask for occasional news about Guizzo (the box is never ticked for you), such as what we are building and when new features arrive; every news email has a link to stop it. The legal basis for news is your consent, given when you turn it on (Art. 6(1)(a)). You can withdraw it at any time.
We use where you came from, and the visit totals, only to learn which links and posts bring people to Guizzo. The legal basis is our legitimate interest in knowing which of our own announcements work (Art. 6(1)(f)).
We use your account data to let you sign in and to run the service for you and your team, including the notifications you turn on. The legal basis is the agreement to provide the beta to you (Art. 6(1)(b)). We send the questions to the people they are addressed to, and their answers back, on behalf of the person who asked, on the basis of the legitimate interest of that person and ours in delivering them (Art. 6(1)(f)). Address book contacts are kept on the same basis, so that questions reach the right person, and so are facts and decisions saved as team context, so that the team and its agents can find them again. Technical data for security is processed on the basis of our legitimate interest in keeping the service safe (Art. 6(1)(f)). When you stop requests, we keep that choice on the basis of your interest and ours in respecting it (Art. 6(1)(f)). To protect people from unwanted or bulk requests and enforce our terms, we count for each workspace how many different addresses it writes to, how often it reaches the daily limit, how many of its requests go unanswered and how many people stop it or report its emails as spam, and we look at workspaces whose numbers stand out. Nothing is decided automatically from these numbers. When we act on a report or on these checks, a person decides, and we keep the record of the decision to tell the people concerned why, to review it if they ask, and to handle repeated cases. The legal basis is the legitimate interest of the people who receive requests and ours in keeping the service free of abuse (Art. 6(1)(f)). We also keep a record of each email we send and whether it arrived, so that we can tell when email does not reach people, tell the sender when their request did not arrive, and keep our email deliverable; the legal basis is our legitimate interest, and that of the people who use Guizzo, in email that reliably arrives (Art. 6(1)(f)).
We will not send you news unless you ask for it, and we will never sell or share your email for anyone else's marketing.
How long we keep it
An account that never gets past the first step (giving your name and accepting the terms) is deleted after 7 days. Your place in the queue is deleted when your place is ready, or when you delete your account. A place that is ready waits 48 hours for you, and an invitation to join a team works for 30 days; either is deleted if you do not use it. The waitlist we had before the beta opened is closed: addresses confirmed on it moved to the queue, and the rest were deleted.
The news list is kept apart from accounts. Your address stays on it until you stop the news (a link in every news email, or your account settings on app.guizzo.ai) or ask us to delete it. News asked for on the old waitlist form and never confirmed is deleted after 30 days.
Sign-in codes are deleted within a day of expiring, which they do after 10 minutes. Sessions end after 30 days. A device stops getting notifications when you sign out on it or your session there ends, and gets them again when you sign in on it once more. It is deleted when you remove it in your account settings, its browser's push service says it no longer exists, or it has not opened the app for 180 days. An app you connect stays connected while it is in use: its access lasts one hour and is renewed for up to 30 days at a time, and it ends when you disconnect the app or leave the workspace. Account data, questions and answers are kept while your account and workspace exist, and deleted when you ask us to. A personal contact is deleted when it is removed or when the person who saved it leaves the workspace; a shared one when it is removed or the workspace is deleted. Facts and decisions are kept while they are current, and deleted when someone removes them, when the workspace is deleted, or, for private ones, when their author leaves the workspace. Once replaced by a newer one or past the date they were valid until, they are kept for the history of the workspace's plan (30 days on the Free plan) and then deleted.
A stop on requests is kept until you undo it, from the page right after, from your account settings, or from the stopped requests page on app.guizzo.ai with a code we email you (deleted within a day of expiring, which it does after 10 minutes). A stop on one workspace also ends when you join it or it is deleted. A record of every email we send is kept for 30 days, even if the request it delivered is deleted sooner: the address it went to, what kind of email it was (a question, a sign-in code…), the workspace and request it was about, when it was sent, and what our email service, Cloudflare, tells us about its delivery (delivered, delayed, bounced or reported as spam, with the receiving server's reply). After that, we keep only daily totals, with no addresses. Records of decisions taken under our terms, with the reporter's email address, are kept for 12 months. When you export your data, or a workspace owner exports the workspace, the file is kept for 7 days so that it can be downloaded, and then deleted.
Who else handles it
Cloudflare, Inc. hosts the site and the app, stores the account data, and sends our emails, such as sign-in codes, invitations and questions (Cloudflare Email Service). Apart from the push services below, it is the only provider that handles your data. Data is stored in the European Union. Where Cloudflare may access it from outside the EU, the transfer is covered by the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.
If you turn on notifications, they reach your device through the push service of your browser's or phone's maker: Apple, Google, Mozilla or Microsoft. What we send is encrypted for your device only, so the push service cannot read it; it handles only the address of your device and when a notification goes to it. A notification says who asks you something and from which workspace, not the question itself.
When you connect an AI app (such as Claude or ChatGPT), what that app reads from Guizzo and sends to it is handled by the app's provider under its own privacy policy.
Your rights
You can ask to see, correct or delete your data, to restrict or object to its use, to receive it in a portable format, and to withdraw your consent. If you have an account, you can download your data yourself as a JSON file from your account settings. For anything else, write to privacy@guizzo.ai and we will reply within one month. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).
Changes
If this policy changes, we will update the date above. If we ever want to use your email for something new, we will ask you first.