This policy explains which personal data Guideo collects when you visit guideo.cloud, fill in one of its forms or chat with its assistant, why we use it, who we share it with, how long we keep it and how to exercise your rights. It complies with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the amended French Data Protection Act of 6 January 1978.
It covers the guideo.cloud website. Data processed in the app.guideo.cloud application to create and view booklets (host account, content, guest data) is governed by the service's terms and conditions of sale and use.
1. Data controller
Data controller : GUIDEO CLOUD, SAS with a share capital of €1,000
Address : 9 impasse belle vue, 13580 La Fare-les-Oliviers, France
SIRET : 999 490 774 00018
For any question about your data, write to us at:
2. Data collected, purposes and legal bases
We only collect the data needed for each purpose. No data is sold or rented.
Website forms
When you fill in a form, we receive the information you enter:
- Demo request for concierge services (Pricing section): email address, phone number (optional), expected number of booklets;
- Welcome offer (promo code window): email address and website language, to send you the discount code;
- Profitability simulator: email address, profile (individual or concierge service) and number of simulated properties;
- Quote request for QR code displays: name, email address, phone and business name (optional), type and number of displays, artwork file if provided.
This data is used to answer your request, send you the offer or quote you asked for and follow up commercially. Legal basis: pre-contractual steps taken at your request and, for commercial follow-up, our legitimate interest in presenting our services. Each submission triggers an internal email notification to the Guideo team.
Guidy chat assistant
When you use the Guidy chat on the website, we record the conversation, a session identifier and a pseudonymised fingerprint of your IP address (used to prevent abuse). If you choose to leave your contact details (first name, email, phone), they are linked to the conversation so that we can get back to you.
Your messages are sent to Google's Gemini artificial intelligence service to generate the answers. Please avoid sharing sensitive information. Legal basis: our legitimate interest in answering your questions and improving the assistant; your request to be contacted when you leave your details.
Emails we send you
Emails (replies, promo code, commercial information) are sent through our provider Resend, which tells us whether they were delivered, opened or clicked. You can ask at any time to stop receiving our commercial messages by replying to one of them or by writing to us.
Audience measurement and website improvement
To understand how the website is used and improve it, we use:
- Umami, a statistics tool we host ourselves, with no cookies and no data that identifies you;
- Google Analytics 4 (through Google Tag Manager): pages viewed, visit duration, device type, traffic source, approximate location;
- PostHog (hosted in the European Union): page views, clicks and recordings of browsing sessions, with input fields always masked;
- A blog article read counter, which keeps a pseudonymised fingerprint of the IP address and the browser type so that each visitor is counted only once.
Legal basis: your consent for Google Analytics and PostHog, which you can refuse or withdraw at any time; our legitimate interest for Umami and the read counter, which do not track you on other websites.
3. Cookies and local storage
The website uses two categories of trackers:
- Strictly necessary trackers, exempt from consent: remembering your language, your light or dark theme and whether the welcome window was shown, stored in your browser (localStorage);
- Audience measurement trackers subject to consent: Google Analytics cookies (_ga, _ga_*) and PostHog identifiers (ph_*), kept for no more than 13 months.
You can accept or refuse the trackers subject to consent using the banner shown on your first visit, and change your choice at any time via the “Manage cookies” link at the bottom of every page. Your choice is kept for 6 months. You can also delete cookies and local storage from your browser settings.
4. Recipients and processors
Your data is only accessible to authorised Guideo staff and to our technical providers, who act on our instructions:
- Hostinger (company established in Lithuania): hosting of the website and database;
- Amazon Web Services (European Union): storage of images and media;
- Resend (United States): sending emails;
- Google (Ireland / United States): Google Analytics, Google Tag Manager and the Gemini model used by Guidy;
- PostHog (European Union): website usage analytics.
Some providers may process data outside the European Union, particularly in the United States. These transfers are covered by the EU-US Data Privacy Framework adequacy decision when the provider is certified, or otherwise by the European Commission's standard contractual clauses.
5. Retention periods
- Requests and commercial contacts (forms, details left with Guidy): 3 years from our last exchange;
- Guidy conversations: 12 months;
- Audience measurement data: 13 months for trackers, 25 months maximum for statistics;
- Blog read counter: 12 months;
- Artwork sent for a quote: as long as needed to process the request, then archived with the quote where applicable.
6. Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability, and to object, in particular to direct marketing, without having to give a reason. Where processing is based on your consent, you can withdraw it at any time. You can also give instructions regarding the handling of your data after your death.
To exercise your rights, write to us at:
We reply within one month. If you believe your rights have not been respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority of your country.
7. Security
We implement appropriate technical and organisational measures to protect your data:
- Encrypted connections (HTTPS);
- Access to data restricted to authorised people, with authentication;
- Pseudonymisation of recorded IP addresses;
- Masking of input fields in analytics tools.
8. Changes to this policy
This policy may change, for instance when we launch a new service or change providers. The date of the last update is shown at the top of the page.
Any questions?
For any question about how your data is processed: