Privacy Policy
Scope
This policy explains how Guarani LLC ("Guarani", "we", "us") handles personal data on guarani-llc.com and in the Guarani AI service (Verify, Mesh and Mobile CI).
For content that customers submit to the service, such as repository content, test artifacts and model inputs and outputs, Guarani acts as a service provider and processor on behalf of the customer, which remains the controller of that data. Our agreement with the customer governs that processing, and this policy describes how we carry it out.
Who we are
Guarani LLC is a limited liability company organized in New Mexico and based in Albuquerque, New Mexico, USA. You can reach us at sylvain@guarani-llc.com.
What we collect
- Contact and account data: name, work email, company, team size, workspace members and settings.
- Trial requests: the details you enter in our trial form (name, work email, company, team size, plan, modules of interest, Git provider, the language of the page and your consent). The form sends them to our server, which stores them and forwards them to us by email. Your IP address is not stored with the request; it is only held in memory, for at most a day, to limit repeated submissions. If sending fails, the form prepares an email with the same details instead, and we receive only the email you choose to send.
- Contact messages: the details you enter in our contact form (name, work email, company if you give one, topic, your message, the language of the page and your consent). The form sends them to our server, which stores them and forwards them to us by email. Your IP address is not stored with the message; it is only held in memory, for at most a day, to limit repeated submissions. If sending fails, the form prepares an email with the same details instead, and we receive only the email you choose to send.
- Service data: repository content and metadata, pull request metadata, build and test results, mobile test artifacts (video, device logs, network traces), and model inputs and outputs routed through Guarani Mesh.
- Usage telemetry: run counts and durations, errors, model latency, token usage and cost, per workspace and team.
- Billing data: once paid plans open, payments are handled by a payment processor. We receive billing contacts and payment status, not full card numbers.
- Website request logs: our hosting and CDN providers keep standard request logs (IP address, user agent, requested URL, time) to operate and secure the site.
How we use data
- To provide, operate and support the service, including running the verifications, routing and test suites you request.
- To review trial requests, provision workspaces and answer your messages.
- To secure the service, investigate incidents and fix defects.
- To bill paid plans and keep business records.
- To send service notices, such as changes to these terms or to our subprocessors.
- To comply with legal obligations.
We do not sell personal data and we do not use it for advertising.
AI processing
We do not use customer code, prompts or outputs to train models, whether ours or a third party's. The model providers that Guarani Mesh routes to process this data under terms that prohibit training on it. Routing respects the providers and regions set in your workspace policy.
Subprocessors
We rely on the following categories of subprocessors to run the service:
- Cloud infrastructure: Microsoft Azure, Amazon Web Services, Google Cloud.
- AI model providers: Azure OpenAI, Amazon Bedrock, Google Gemini Enterprise Agent Platform.
- GPU compute: Modal.
- Content delivery network and website analytics: Cloudflare.
- Email: Google Workspace.
The current list of subprocessors is available on request.
International transfers
Guarani is based in the United States. Service data is processed in the US or EU region selected for your workspace. Where personal data is transferred from the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission's Standard Contractual Clauses and the UK addendum, or another valid transfer mechanism.
Retention
- Repository content and test artifacts: retention configured by each workspace, 30 days by default.
- Account data: for the life of the account, then as long as needed for legal and accounting obligations.
- Trial requests: 12 months.
- Contact messages: 12 months.
- Website request logs: according to the retention periods of our hosting and CDN providers.
Security
We protect data with encryption in transit and at rest, tenant isolation, least-privilege access, access logging and regular backups. No system is perfectly secure; if an incident affects your data, we will notify you without undue delay and as required by law.
Your rights
You can ask to access, correct, delete or export your personal data, and object to or restrict its processing. We answer within 30 days.
EEA and UK (GDPR and UK GDPR): we process personal data to perform our contract with you, for our legitimate interests in operating and securing the service, to comply with the law, or with your consent where required. You may lodge a complaint with your supervisory authority.
California: we do not sell or share personal information for cross-context behavioral advertising. You have the right to know, delete and correct your personal information, and we will not discriminate against you for exercising these rights.
For service data that your organization submitted, contact your organization first; we will assist it in answering your request.
Children
Guarani AI is a business service and is not directed to children under 16. We do not knowingly collect their personal data.
Changes
We will post any update on this page with a new effective date. If a change is material, we will notify customers by email before it takes effect.
Contact
Guarani LLC, Albuquerque, New Mexico, USA. Email: sylvain@guarani-llc.com.