Privacy Policy

This policy explains what Perennial Tontine LLC ("Guppi," "we," "us") collects, why, and what your rights are. It covers the website at guppi.ai, the hosted service at app.guppidev.com, and the Guppi software you install on your own hardware. We are the data controller for the personal data described here.

The short version

• The bench software collects nothing. Guppi installed on your own hardware runs entirely on your network, sends us no telemetry or analytics, and works offline indefinitely. Your measurement data lives in a Postgres database on your machine, under your control. This policy barely applies to it, because we never see that data.
• This website uses no cookies. We measure traffic with Plausible, a cookieless analytics service that stores no personal identifiers.
• The cloud service collects only what it needs to work: your account details and the data you choose to send it.
• We do not sell or share personal data for advertising, and we never have.

1. Data we collect, and why

Website (guppi.ai)

Aggregate, anonymized usage statistics via Plausible Analytics: page views, referrer, browser type, and country, derived without cookies or persistent identifiers. IP addresses are used transiently to derive coarse location and are not stored. Legal basis: legitimate interest in understanding site usage.

Cloud service (app.guppidev.com)

If you create an account, we collect and store:

• Account data — your email address and authentication credentials. Legal basis: performance of our contract with you.
• Rig and telemetry data — instrument readings, test executions, artifacts (such as captured waveforms), and rig configuration that your bench sends when you pair it with the cloud. Pairing is your choice; an unpaired bench sends nothing. Legal basis: performance of contract.
• AI feature inputs — prompts and context you submit to AI-assisted features, processed by our AI provider (currently OpenAI) to generate responses. We do not use your content to train models, and our provider agreements prohibit them from doing so. Legal basis: performance of contract.
• Service logs — IP address, timestamps, and request metadata, retained briefly for security, abuse prevention, and debugging. Legal basis: legitimate interest in keeping the service secure.
• Billing data — if you buy a paid plan, our payment processor collects your payment details; we receive only your billing status and last four card digits, never full card numbers. Legal basis: performance of contract and legal obligation (tax records).
• Correspondence — emails you send us, kept so we can answer you and improve support. Legal basis: legitimate interest.

We do not collect special-category data, we do not profile you, and we make no automated decisions with legal effect.

2. What we do with it

We use your data to operate the service you signed up for: authenticate you, store and display your telemetry, run AI features you invoke, bill you, secure the platform, and communicate with you about the service. We do not sell it, rent it, share it with advertisers, or use it for cross-context behavioral advertising. We may send product-update emails; every one includes an unsubscribe link.

3. Service providers (subprocessors)

A small number of providers process data on our behalf, each receiving only what their function requires:

• Hosting — cloud infrastructure providers that run the cloud service and store its database and artifacts.
• Plausible Analytics — cookieless website statistics (EU-hosted).
• OpenAI — inference for AI-assisted features; inputs are processed to generate responses and not used for training.
• Payment processor — payment handling for paid plans (e.g. Stripe); they are an independent controller of your card data.

We may disclose data if required by law, to protect our rights or users' safety, or as part of a merger or acquisition — in which case this policy continues to apply to data collected under it.

4. International transfers

We are based in the United States and process data there. Where data of EU/EEA or UK residents is transferred to the US, we rely on our providers' standard contractual clauses or equivalent safeguards.

5. Security

Data in transit is encrypted with TLS; data at rest is stored on encrypted infrastructure. Access to production systems is limited to those who need it to operate the service. No system is perfectly secure — if we learn of a breach affecting your personal data, we will notify you as required by law.

6. Retention and deletion

Cloud data is retained while your account is active. Delete your account (or email us) and we delete your personal data and telemetry within 30 days, except minimal records we must keep for legal, tax, or security reasons, and backups that expire on a rolling schedule. Service logs are kept no longer than 90 days. Data on your own bench is yours — we never had it.

7. Your rights

You can request access to, a copy of, correction of, or deletion of your personal data, object to or restrict processing, and withdraw consent where processing is based on it — by emailing perennialtontine@gmail.com. We respond within 30 days and do not discriminate against you for exercising your rights.

• EU/EEA & UK — you additionally have the right to data portability and to lodge a complaint with your supervisory authority.
• California — you have the rights to know, delete, correct, and opt out of sale or sharing under the CCPA/CPRA. We do not sell or share personal information as those terms are defined, and we honor Global Privacy Control signals for the website (which sets no cookies to begin with).

8. Children

Guppi is a professional tool, not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

9. Do Not Track

The website does not track you across sites, so there is nothing for a Do Not Track or GPC signal to disable — but we honor them anyway.

10. Changes

If this policy changes materially, we will note it here, update the date above, and — for changes affecting cloud accounts — notify you by email before they take effect. Continued use after a change means acceptance.

11. Contact

Perennial Tontine LLC, 1710 Jackson St, North Chicago, IL 60064, United States. Questions or requests: perennialtontine@gmail.com.