Privacy Notice

you live once llc, operator of Gus Picks, is the data controller for the personal data described here. This notice explains what we collect through guspicks.com, why, on what legal basis, and what you can do about it.

What we collect and why

• Account data — email address and login credentials, plus your admin status. Used to create and secure your account. Legal basis: performance of a contract.
• Questionnaire and pull data — the answers, tags, moods, and free-text notes you submit, and which picks were served to you. Used to generate your recommendations and to improve the pick bank. Legal basis: performance of a contract and our legitimate interest in improving the product.
• Entitlement and purchase records — your token balance, membership status, and a ledger of credits granted and spent. Used to deliver what you paid for and to keep accurate financial records. Legal basis: contract and legal obligation.
• Device and usage data — a browser fingerprint used to give anonymous visitors one free pull per collection, plus IP address, approximate location, and basic request logs. Used for abuse prevention, security, and service reliability. Legal basis: legitimate interests.
• Support messages — anything you send us by email. Used to answer you. Legal basis: legitimate interests.

We do not sell your personal data, we do not run advertising, and we take no affiliate commissions. Card details never reach our servers — payment data is collected and processed by Paddle.

Who we share it with

• Merchant of Record — Paddle.com Market Ltd, which sells our products to you and handles payment, subscription management, tax compliance, invoicing, and refunds.
• Service providers — our hosting, database, authentication, and email providers, acting as processors on our instructions.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where we are required to disclose by law.

Retention

Account, entitlement, and credit-ledger records are kept for as long as your account is open, and afterwards only as long as needed for tax and accounting purposes (normally seven years). Questionnaire and pull records are retained while your account is open and are anonymised once they are no longer linked to you. Logs are kept for up to 12 months. When data is no longer needed it is deleted or anonymised.

International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA we rely on adequacy decisions or Standard Contractual Clauses as the safeguard.

Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive it in a portable format, and withdraw consent at any time. Email hello@guspicks.com and we will respond within one month. If you are in the UK or EEA and are unhappy with our response, you can complain to your local supervisory authority.

Security

We use appropriate technical and organisational measures, including encryption in transit and at rest, row-level access controls on our database so you can only read your own records, and least-privilege access for administrators.

Cookies and similar technologies

We use strictly necessary storage only: a session cookie/token to keep you signed in and a locally stored browser fingerprint to enforce the one-free-pull limit. We do not use advertising or third-party analytics cookies. Paddle may set its own cookies during checkout — see Paddle's privacy notice. You can clear this storage in your browser at any time, though doing so will sign you out.

Contact

you live once llc — hello@guspicks.com.