Privacy Notice

Rosemarie Gail Norris, trading as Guardian Enterprise is the data controller for personal data described in this notice. You can reach us at hello@guardianenterprise.ai.

Account and contact details you give us (name, email address, organisation where you provide one, and anything you write in a form or story submission). Service content you or Guardian Daily create in the course of using the assistant, such as plans, reminders and approvals. Technical and usage information, including anonymous page-activity records that store the page visited, a random per-visit identifier, the referring website's domain and any campaign tag in the link you followed. We do not use advertising cookies or third-party trackers on this website.

To provide the service and fulfil our contract with you (account creation, running the assistant, support). For our legitimate interests in keeping the service secure, preventing fraud and abuse, understanding in aggregate which pages and channels are useful, and improving the product. Where you have given consent — for example when you submit a customer story for publication, which we publish only after you have explicitly agreed and only once we have approved it. To meet legal obligations, such as accounting and tax records.

Service providers who help us operate, including hosting, database and email infrastructure providers, acting on our instructions. Paddle.com, our reseller and Merchant of Record, for the sale of subscriptions, subscription management, payments, invoicing and tax compliance; Paddle handles payment data directly under its own privacy notice. AI model providers who process the text you submit to the assistant in order to generate a response. Professional advisers such as legal and accounting, where needed. Authorities where we are legally required to disclose. We do not sell personal data.

We are based in the United States and our providers may process data in the United States and elsewhere. Where data is transferred from the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Account and subscription records are kept while your account is active and for as long as we must retain them for legal, tax and accounting purposes. Sign-up enquiries are kept for up to 24 months unless you ask us to delete them sooner. Anonymous page-activity records are kept for up to 12 months. Story submissions are kept until you withdraw consent or we delete them. When data is no longer needed it is deleted or anonymised.

You can ask us to give you a copy of your personal data, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. Where we rely on consent you can withdraw it at any time, including asking us to unpublish a story you previously approved. If you are in the UK or EEA you also have the right to complain to your supervisory authority; we aim to respond to any request within one month. Write to us at the address above and we will not make the process difficult.

We use appropriate technical and organisational measures, including encryption in transit, access controls and restricting internal access to what is needed. No system is perfectly secure, and we do not claim otherwise.

This website uses only what is strictly necessary to work, plus a random identifier stored for the length of your visit so anonymous page activity is not double-counted. There are no advertising or third-party tracking cookies. Clearing your browser storage removes the identifier.

We will update this notice as the service changes and will show the revision date at the top of this page. Material changes will be communicated through the service or by email.