Privacy Policy
Last updated: September 11, 2026
At GUPER, we are committed to protecting the privacy and security of the personal data of our users, merchants, and their customers. GUPER is a CRM, loyalty, customer service and artificial intelligence platform for retail: it manages customer profiles, cashback and points balances, campaigns, messaging over WhatsApp and other channels, support handled by AI agents, and advertising spend auditing. This policy describes how we collect, use, store, and protect personal information across all of those modules.
1. Information We Collect
- Merchant name and contact details (email, phone, address)
- Purchase transaction information (amounts, dates, products)
- End-customer data: name, phone (WhatsApp), and email
- Platform usage data and configuration preferences
- Technical device and browser information (cookies, IP)
- Content of support conversations over WhatsApp and other channels, including end-customer messages and agent replies
- A log of operations executed on the platform, including those requested through an artificial intelligence assistant
2. How We Use the Information
- Operate and maintain the CRM, loyalty and customer service platform
- Process and manage cashback balances, points, coupons and gift cards
- Send notifications and campaigns to end customers via WhatsApp, email, SMS or RCS
- Handle end-customer requests with artificial intelligence agents, escalating to a person when needed
- Calculate purchase behavior metrics such as recency, frequency, value and churn probability
- Generate reports and analytics for merchants
- Improve and personalize the user experience
- Comply with legal and regulatory obligations
3. Data Sharing and Ownership
We do not sell or share personal data with third parties for marketing purposes. We share information only with essential service providers required to operate the platform (hosting, messaging such as Twilio, data processing), when required by law or a competent authority, and with the merchant to whom the customer transaction belongs. Data collected through our platform is owned by the company that contracts our services, and that company may export its data at any time to integrate it with its internal systems.
4. Data Retention
We retain personal data while the merchant account is active and for the period necessary to fulfill the purposes described in this policy. Once the commercial relationship ends, data is deleted or anonymized within a reasonable period, unless legally required to be retained.
5. User Rights
- Access your stored personal data
- Request correction of inaccurate data
- Request deletion of your personal data
- Withdraw consent for data processing
- Request portability of your data
6. Data Security
We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, alteration, or destruction, including encryption in transit and at rest, access controls, and continuous monitoring.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to improve the user experience, remember preferences, and analyze platform usage. You can manage your cookie preferences in your browser settings.
8. Third-Party Services
Our platform may integrate with third-party services (Shopify, WooCommerce, POS systems, Twilio for message delivery, among others). These providers process data solely according to our instructions and in accordance with their own privacy policies.
9. Artificial Intelligence and MCP Server
GUPER uses artificial intelligence in two places in the product, and in both the data processed belongs to the merchant and to its end customers.
Agent-handled support. When the merchant turns on automated support, an AI agent reads purchase history, balance and the ongoing conversation in order to reply to the end customer. The conversation is recorded on that customer\u2019s profile. A case can be escalated to a person on the merchant\u2019s team, and the end customer can ask for a human at any time.
MCP server. The merchant may connect its account to an external AI assistant such as Claude or ChatGPT in order to query and operate the platform in plain language. When it does: the assistant reaches only operations published by GUPER, with the same permissions that user holds in the system; operations that move value require explicit confirmation; every call is logged with the user, the operation and the date; and the assistant provider becomes a processor of the data the merchant queries, under its own privacy terms. The merchant enables and revokes the connection.
We do not use merchant data or their end-customer data to train artificial intelligence models, our own or third-party.
10. Advertising Platform Data
When a merchant connects their Meta Ads, Google Ads, or Google Analytics 4 account, GUPER reads performance data from that account to generate the audit reports the merchant itself requests:
- Spend, impressions, clicks, reach, and frequency at the campaign level
- Conversions and conversion value as reported by the platform
- Site visits, traffic source, and e-commerce data in aggregated form
We do not collect end-user personal data from these platforms. Access is read-only: GUPER does not create, modify, or pause campaigns. Access credentials are stored encrypted and data is stored in isolation per merchant. It is not sold, not shared between merchants, and not used for ad targeting. When the account is disconnected from the dashboard, the access credentials are deleted immediately. Performance data already imported is retained so the merchant does not lose their history when re-authorizing, which happens routinely because these platforms' permissions expire periodically. That data is deleted when the merchant requests it or when the contract ends, following the procedure on our data deletion page.
11. Changes to This Policy
We reserve the right to update this privacy policy at any time. Changes will be notified through the platform or by email.
12. Contact
Email: contacto@guper.co · Web: guper.ai
