Privacy Policy
Last updated: August 4, 2026
This policy explains what personal information Guavo Inc. (“Guavo,” “we,” “us”) collects when you visit guavo.com, how we use it, and the choices you have. We wrote this in plain English on purpose.
Who we are
Guavo Inc. is a small-business finance company based in Miami, Florida. If you have questions about this policy or want to exercise any of your rights below, email us at contact@guavo.com.
What information we collect
The site has two data-collection surfaces:
1. Analytics (Google Analytics 4) — only after you consent via the cookie banner. Once you accept, GA4 collects:
- The pages you visit on guavo.com and how long you spend on each
- The site or link that referred you (e.g., google.com, linkedin.com, an email link)
- Approximate geography derived from your IP address (city or region level, IP itself is truncated before storage)
- Device type, browser, screen size, and operating system
- Events you trigger, such as using the qualification calculator, moving between steps of the application form, attaching a document, and submitting the form. These record that an action happened, not the contents of what you entered or attached.
Before you consent, GA4 sends anonymous, cookieless signals that let us count aggregate visits without identifying you or storing anything on your device. If you reject, no cookies are set and no identifiers are stored.
2. Application form — if you fill out and submit the application form on the site, we collect what you provide. That includes:
- Business information — legal name, DBA, entity type, Employer Identification Number (EIN), years in business, a description of the business, business address, phone, and email.
- Owner information — name, date of birth, ownership percentage, Social Security number, home address, mobile phone, and email.
- Financing request — amount requested, intended use of funds, average monthly revenue, and any notes you add.
- Documents you upload — a photo of your government-issued identification, and up to four months of bank statements.
- Signature and consent records — your typed electronic signature, your soft credit pull authorization, and the date, time, and public IP address of your submission, which we retain as the audit trail for that signature.
We use this information to review and underwrite your financing application, to verify your identity and your business, and to communicate with you about it. On submission it is transmitted to us and held in our internal systems. Those systems run on established third-party infrastructure and service providers, described under Third parties we use below.
This is sensitive information and we treat it that way. We do not sell it, and we do not share it with marketers or data brokers. We share it with a funding partner only when your application is a better fit for that partner than for us, and only in order to pursue financing on your behalf.
What we deliberately do not collect
- No Meta / Facebook pixel, no LinkedIn Insight Tag, no TikTok pixel, no advertising cookies of any kind.
- No session recordings or heatmaps.
- No fingerprinting or “cookieless tracking” techniques designed to circumvent consent.
- No selling of your data. No sharing with data brokers.
Cookies used
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
klaro | Guavo (site itself) | Remembers your cookie-banner choice. | 180 days |
_ga | Google Analytics | Distinguishes unique visitors. Only set if you accept analytics. | 13 months |
_ga_<ID> | Google Analytics | Session state for the specific GA4 property. Only set if you accept analytics. | 13 months |
You can withdraw your consent at any time by clicking . Rejecting will remove the GA cookies from your device.
How long we keep the data
Analytics event data is retained in Google Analytics for 14 months, then deleted automatically. Aggregate, non-identifiable reports may be kept longer. Application form submissions are retained as long as needed to evaluate your financing request and to comply with our legal record-keeping obligations, then deleted on request.
Legal basis (GDPR)
If you are in the EU or UK, our legal basis for processing is your consent (GDPR Article 6(1)(a)) for analytics, and the necessity to take steps at your request prior to entering a contract (Article 6(1)(b)) for application-form submissions. You can withdraw consent at any time without affecting past processing.
Your rights
Regardless of where you live, you have the right to:
- Know what information we hold about you
- Correct or update it
- Have it deleted
- Receive a copy of it (portability)
- Withdraw your consent for analytics
- Opt out of any “sale” or “sharing” of personal information (see below)
To exercise any of these rights, email contact@guavo.com. We’ll respond within 30 days.
California residents (CCPA / CPRA)
We do not sell your personal information for money. We also do not “share” personal information for cross-context behavioral advertising as defined under the California Privacy Rights Act. In other words: we have nothing to opt out of on the “Do Not Sell or Share” front, because we don’t do it in the first place. If you still want to withdraw analytics consent, click . We also honor the Global Privacy Control (GPC) browser signal.
Residents of other US states
If you live in Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Tennessee, Delaware, New Hampshire, New Jersey, Iowa, Indiana, or any other state with a comprehensive consumer privacy law, the rights listed above apply to you as well. Email contact@guavo.com to exercise them.
Third parties we use
- Vercel — hosts this website and runs the function that receives your application. Vercel privacy policy.
- Email delivery and application storage providers — we use a small number of established third-party providers to deliver your application by email and to store it in our internal systems. Your application, and any identification or bank statements you upload, are handled by these providers. They act on our instructions only, under contract, and are not permitted to use your information for their own purposes. If you want to know which providers we use, email contact@guavo.com and we will tell you.
- Google (Google Analytics 4) — analytics processor. Data is anonymized and Google Signals is disabled. Analytics only runs if you consent. Google’s privacy policy.
- Google Fonts — loads the fonts you see. Note: this triggers a request to Google’s font servers on page load. If this concerns you, most browsers offer content-blocking extensions that can prevent it.
- Cloudflare (cdnjs) — serves the software library your browser uses to build your application PDF. Your browser’s IP address is visible to this service when the library loads. Cloudflare privacy policy.
- ipify — when you submit, we look up your public IP address so it can be recorded on your signed application as part of the electronic signature audit trail. ipify.
Changes to this policy
If we materially change how we handle your data, we’ll update this page and, when the change is significant, prompt you to review it. The “Last updated” date at the top always reflects the current version.
Contact
Questions, requests, or complaints: contact@guavo.com. If you’re in the EU and prefer to lodge a complaint with a supervisory authority, you can do so with the data protection authority of your country of residence.