gpodz Privacy Policy

Effective date: October 24, 2026

Toolkit-CLI LLC ("gpodz", "we", "us") runs gpodz, an AI business assistant for small and mid-sized businesses. This policy explains what personal information we collect, how we use it, and the choices you have.

1. Who this applies to

• Business owners and their staff who create an account and use gpodz.
• Customers of those businesses whose information a business chooses to store or act on through gpodz.
• Visitors to gpodz.com and app.gpodz.com.

When a business uses gpodz with its own customers, that business decides what customer information it stores and why. We process it on the business's behalf.

2. Information we collect

• Account information: name, email address, business name, time zone, and login details handled by our sign-in provider.
• Business content you add: messages, notes, documents, calendar entries, contacts, and settings you create in gpodz.
• Connected accounts: when you connect a third-party service (for example Google, QuickBooks, or Square), we receive the access that service grants us, store tokens encrypted, and read only the data needed for the feature you asked for.
• Usage and technical data: logs, device type, IP address, and error reports, used to keep the service secure and working.

3. How we use information

• To provide, operate, and improve the features you use.
• To act on your instructions, including reading data from connected services and making changes you approve.
• To keep accounts and the service secure, detect abuse, and meet legal obligations.
• To send service messages, such as security notices.

We do not use customer or business data to train AI models unless the business opts in.

4. Sharing

We share information only:

• With service providers that run parts of gpodz for us (hosting, sign-in, email delivery, AI model providers), under contracts that limit their use to providing their service to us.
• When you direct us to, such as sending a message or connecting a service.
• When required by law, or to protect people's safety and rights.
• In a merger or sale of the business, with notice to you.

We do not sell, rent, or trade business or customer data.

5. Connected services (Google, QuickBooks, Square)

Use of data received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. QuickBooks and Square data is used only to provide the features you enable, under those services' terms.

You can disconnect any service at any time in gpodz settings. Disconnecting stops new access and deletes the stored tokens. You can also revoke access from the provider's account settings.

6. Retention and deletion

We keep information needed to provide the service while your account is active. Some records may need to remain for legal obligations, security, dispute resolution or to prevent erased information from being restored. We restrict access to those records.

Account deletion pauses the workspace and opens a tracked erasure request. It does not immediately erase every store. Some deletion steps are automatic; others require an operator to follow our erasure runbook and verify each affected store, connected service and retained copy. Individual customer deletion requests also require operator review and store-by-store work. A request stays pending while required steps remain unverified. We do not promise that all active-system deletion finishes within a fixed period.

Recovery copies, logs and service-provider records can remain after active data is removed. Backup schedules and expiry controls still require operator setup and verification; we do not currently promise a single backup expiry period or complete backup coverage. Operators must check current erasure records before restoring data. We track retained copies separately rather than treating active-system deletion as proof that every copy is gone.

7. Security

We encrypt data in transit and store connected-account tokens encrypted at rest. We limit staff access to what they need. No system is perfectly secure, so we cannot promise absolute security.

8. Your choices and requests

• Ask for access to or correction of your personal information, or request deletion.
• Request an account export where available. The current account export covers selected workspace records, the requester's own conversations, contacts, library records and approved memory. It is not a complete copy of every store: email, commerce and billing records, and original Drive file binaries are not included. Missing categories require a separate operator-assisted request.
• Withdraw consent for optional features, and disconnect connected services.

To make a privacy request, email privacy@gpodz.com. We verify the requester's identity and authority before disclosing or deleting information. Do not send passwords or access tokens. If your information belongs to a business using gpodz, contact that business too; we assist it in handling requests about its customer information.

We handle requests within the time required by applicable law and explain any permitted extension, retained records or incomplete steps. Operator-run work and technical limitations do not remove your legal rights or extend a legal deadline.

9. Children

gpodz is for businesses and adults. We do not knowingly collect information from children under 13.

10. International transfers

Our service providers may process data in the United States and other countries. Where required, we use appropriate safeguards.

11. Changes

We will post changes here and update the effective date. For material changes, we will notify account holders by email.

12. Contact

Toolkit-CLI LLC 28392 Millwood Rd, Trabuco Canyon, CA 92679 privacy@gpodz.com