Privacy Policy
This Privacy Policy explains how PocoPoints Inc. (“Company,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use our enterprise SaaS platform, Guppers (the “Service”).
As an enterprise-grade service, Guppers primarily processes data on behalf of our corporate customers (“Customers”). In those instances, PocoPoints Inc. acts as a Data Processor, and our Customer acts as the Data Controller.
1. Information We Collect
We collect information to provide a secure and efficient experience for our enterprise users.
1.1 Personal Data You Provide
- Account Information: Name, professional email address, job title, and login credentials.
- Billing Information: Credit card details or billing addresses (typically processed via a secure third-party payment processor).
- Communication Data: Information provided during support requests, feedback, or inquiries.
1.2 Information Collected Automatically
- Usage Data: Log files, IP addresses, browser types, and device identifiers.
- Technical Data: Information about how you interact with the Service, such as features used and time spent on specific pages.
1.3 Customer Data
“Customer Data” refers to the data uploaded or submitted to Guppers by our Customers. PocoPoints Inc. processes this data strictly according to the Customer’s instructions and the governing Terms and Conditions.
2. How We Use Your Information
We use the collected information for the following purposes:
- Service Delivery: To provide, maintain, and update Guppers.
- Customer Support: To troubleshoot issues and respond to service requests.
- Security & Compliance: To monitor for fraudulent activity and ensure compliance with our legal obligations.
- Communication: To send administrative messages, such as updates to our terms or security alerts.
3. How We Share Information
We do not sell your personal data. We may share information only in the following circumstances:
- Sub-processors: Third-party service providers (e.g., cloud hosting like AWS or GCP, payment processors) who assist in delivering the Service.
- Legal Requirements: If required to do so by law or in response to valid requests by public authorities.
- Business Transfers: In connection with any merger, sale of company assets, or acquisition of all or a portion of our business.
- SMS Consent: Mobile information will not be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
4. Data Security
PocoPoints Inc. employs industry-standard administrative, technical, and physical safeguards.
- Encryption: All data is encrypted in transit (TLS) and at rest (AES-256).
- Access Control: Access to Customer Data is restricted to authorized personnel on a “need-to-know” basis.
- Audits: We conduct regular security assessments to ensure the integrity of the Guppers platform.
5. Data Retention
- Account Data: We retain your account information as long as your account is active or as needed to provide the Service.
- Customer Data: We retain Customer Data in accordance with the timelines specified in our agreement with the Customer. Upon termination, data is typically deleted or anonymized within 30-60 days.
6. Your Rights and Choices
Depending on your jurisdiction (such as the EU under GDPR or California under CCPA), you may have the following rights:
- Access/Portability: Request a copy of your personal data.
- Correction: Request that we correct inaccurate information.
- Deletion: Request the deletion of your personal data (subject to legal or contractual obligations).
- Opt-out: You may opt-out of receiving promotional communications from us at any time.
Note: If your data was submitted via an employer using Guppers, please direct your request to your organization’s administrator.
7. International Data Transfers
PocoPoints Inc. is headquartered in the United States. Information collected may be transferred to, and maintained on, servers located outside of your state or country. We ensure that such transfers comply with applicable data protection laws through Standard Contractual Clauses (SCCs) or other recognized mechanisms.
8. Updates to This Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via the Service or by email prior to the change becoming effective.
9. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact: