Privacy and security

Your data is yours

You own everything your visitors submit and the reports we make from it. You are the business responsible for it, and we are your service provider.

How we use it

We use your customer data only to provide the service, keep it secure and fix problems you report. We don't sell it or share it for advertising. We don't use it to train AI models, and our AI vendor's terms bar it from training on it. We don't use it in examples or marketing; example screens on our website use fictional businesses.

How we protect it

• a separate database for each customer
• private photo storage, served through links that expire
• encryption in transit
• limits on chat volume and spend
• for law and accounting firms, an authenticator code for each person you enroll, and long digit runs that look like account or ID numbers removed before storage

Where it is stored

Customer data is stored in North America, and our databases are in the United States. Encrypted backup copies are also kept with Google, encrypted before upload with keys only we hold. For law and accounting firms, AI processing stays in the United States. The vendors we use are listed in Appendix C of our Customer Terms, and we email you at least 14 days before adding one.

If something goes wrong

If we discover a security breach that affects your data, we notify you within 48 hours of discovery.

Your part

Post a privacy notice on your website that covers the service and names GKTech as your service provider. Don't ask visitors for Social Security numbers, full card numbers or bank details.

Our website's own policy is at gktechsolutions.com/privacy.