Privacy Notice

Pre-publication draft: this document is not an approved public-beta contract. Publication and open registration remain disabled.

Document: privacy

Version: 2026-07-22-beta-readiness-1

Effective date: 2026-07-22

Content hash: 3b79f21a7310cf2774e1e0710f4938adb2f596506c0327aa76f2a4651b30f432

Privacy: privacy@gutmask.xyz

Who is responsible

Website and account controller: Not configured — public beta remains disabled. The hosted service may process customer runtime data on the customer's instructions; the final controller/processor allocation must match the approved deployment and DPA.

• Country: Not configured — public beta remains disabled
• Privacy contact: privacy@gutmask.xyz

Data and purposes

GutMask processes the data needed to provide accounts, authentication and MFA, security and audit evidence, support and abuse handling, Portal/runtime workflows, files and messages, organization and license administration, mail delivery, backup, observability, and requested browser preferences.

• Contract and pre-contract steps support account and service delivery.
• Legitimate interests may support proportionate security, abuse prevention, reliability, and service improvement.
• Consent is used only where processing actually relies on consent; cookie choice is not acceptance of product terms.

Retention, recipients, and transfers

Retention periods, active subprocessors, data locations, transfer safeguards, and backup deletion windows must be completed from the deployed vendor inventory before approval.

• Access is limited by role and operational need.
• Raw credentials and private tokens are not intended for support submissions.

Rights and requests

Depending on applicable law, individuals may request access, correction, deletion, restriction, objection, portability, or lodge a complaint with a supervisory authority.

• Requests are sent to privacy@gutmask.xyz.
• Identity may be verified before disclosing or changing account data.