Privacy Policy

Last updated: 3 April 2026

Haijahr Limited ("we", "us", "our") operates the Guseto platform, a guided selling SaaS service. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website and services.

1. Data We Collect

Account Information

When you register for a Guseto account, we collect your name, email address, and password. If you manage a team, we may also store the names and email addresses of team members you invite.

Product Data

You may upload product information (names, descriptions, prices, images, and custom attributes) to build recommendation flows. This data is stored on your behalf and used solely to power your guided selling widgets.

Widget Session Data

When an end-user interacts with a Guseto widget embedded on your store, we collect anonymised session data such as answers selected, products viewed, and add-to-basket events. This data is used to provide recommendations and analytics.

Analytics and Usage Data

We collect standard usage information such as pages visited, browser type, device type, and IP address to improve our service and diagnose technical issues.

2. How We Use Your Data

• Providing the service: To operate your account, process your flows, and deliver product recommendations to your end-users.
• Recommendations: Widget session data is used in real time to score and rank products based on your configured rules.
• Analytics: To provide you with dashboards showing session counts, completion rates, product clicks, and conversion metrics.
• Service improvement: Aggregated, anonymised data may be used to improve the platform's performance and features.
• Communication: To send you essential service notifications, security alerts, and (with your consent) product updates.

3. Data Location and Sovereignty

All Guseto data is stored on servers located within the European Union. Haijahr Limited is registered in England and Wales, and we are committed to keeping all infrastructure within Europe. We will not transfer, store, or process your data on servers outside of Europe. No United States, Chinese, Russian, or other non-European infrastructure is used in any part of the service.

We will never sell the company to, or transfer ownership to, any non-European entity. This commitment ensures that your data remains subject to European data protection standards for the lifetime of the service.

4. Multi-Tenant Data Isolation

Guseto is a multi-tenant platform. Each tenant's data (products, flows, analytics, API keys) is logically isolated. Your data is never shared with, or accessible to, other tenants. Access controls ensure that authenticated users can only view and modify data belonging to their own tenant.

5. Third-Party Sharing

We do not sell, rent, or trade your personal data to third parties. We may share data only in the following circumstances:

• Legal obligations: If required by law, regulation, or legal process.
• Service providers: With trusted hosting and infrastructure providers who process data on our behalf under strict data processing agreements.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to you.

6. Data Retention and Deletion

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data and tenant data within 30 days, except where retention is required by law. Anonymised, aggregated analytics data may be retained indefinitely.

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data and account.
• Data portability: Request your data in a structured, machine-readable format.
• Object: Object to processing of your data for specific purposes.

To exercise any of these rights, please contact us at hello@guseto.app.

8. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), secure password hashing, and access controls. However, no method of transmission or storage is 100% secure.

9. Cookies

We use cookies and similar technologies on our website. For full details, please see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Haijahr Limited
Email: hello@guseto.app