Privacy Policy

Last Updated: August 5, 2026

1. Who We Are

Guesterra is a B2B software platform for personalized podcast guest outreach, operated by GORAN GRMUSA PR KANCELARIJSKO ADMINISTRATIVNE USLUGE MR.GUD IN INDJIJA (“Guesterra,” “we,” “us,” or “our”).

Registered address: Zeleznicka 1, Indjija, Serbia

Registration number: 65834103

Tax ID / PIB: 112044436

Contact: support@guesterra.co

This Privacy Policy explains how we collect, use, share, retain, and protect personal data when you visit guesterra.co, apply for access, create an account, connect an email account, or use our related services (together, the “Platform”).

Our data protection role

We act as a data controller for website, account, billing, support, security, and product usage data.

When a customer or Agency Account determines how Client, Campaign, or outreach data is used, we act as a data processor for that processing.

We may act as a data controller for podcast directory and professional contact data obtained from licensed providers or publicly available business sources.

2. Personal Data We Collect

We collect personal data reasonably necessary to operate, secure, support, and improve the Platform.

2.1 Application and Account Data

When you apply for Founding Access, create an account, or otherwise interact with Guesterra, we may collect:

your name;
work email address;
company, agency, or brand;
website URL;
intended use of Guesterra;
application responses and approval status;
submission date and time;
account role and Agency Account membership;
login and authentication information;
subscription and account status;
communications relating to your application or account.

Founding Access applications are submitted through our website and stored in a restricted-access internal record available only to authorized Guesterra personnel.

2.2 Client, Campaign, and User Content

When you use the Platform, we may process:

Client names, bios, expertise, companies, websites, positioning, talking points, target audiences, and related profile information;
Campaign names, topics, pitch angles, goals, and questionnaire responses;
podcast selections, recommendations, lists, and Campaign statuses;
pitch drafts, subject lines, Follow-Ups, edits, and reply drafts;

If you provide personal data about another person, you are responsible for ensuring that you have the necessary authority, permissions, and lawful basis to provide and use that information.

2.3 Connected Email Account Data

When you connect an email account, we may process:

the connected email address and sender identity;
authorization tokens and connection metadata;
messages sent through Guesterra;
Guesterra-created or Guesterra-managed email threads;
sender and recipient information;
subject lines and message content;
replies, thread identifiers, timestamps, bounce information, and related delivery metadata;
reply classifications and suggested response drafts.

Further information about connected email accounts is provided in Section 3.

2.4 Payment and Subscription Data

Purchases may be handled by a third-party checkout provider acting as Merchant of Record.

We may receive:

customer name and email address;
selected plan and billing period;
subscription and payment status;
invoice, receipt, and transaction references;
refund, dispute, and chargeback information;
tax and billing metadata.

We do not receive or store full payment card numbers.

2.5 Technical and Usage Data

When you visit or use the Platform, we or our service providers may receive:

IP address;
browser and device type;
operating system;
referring page;
access dates and timestamps;
pages or features used;
product activity and workflow progress;
server, security, and error logs.

We use this information to operate the Platform, understand feature use, resolve technical problems, protect security, and prevent misuse.

Product analytics services are not used as the primary storage location for Campaign content, email content, or replies.

2.6 Communications

We process information you provide when contacting us about:

support;
account access;
Founding Access applications;
billing or refunds;
privacy requests;
security concerns;
feedback and bug reports;
other questions or requests.

2.7 Podcast Contact and Directory Data

We obtain podcast-related information from licensed data providers, podcast directories, public websites, and other publicly available or business-oriented sources.

This may include:

podcast and host names;
podcast descriptions and categories;
professional or business contact information;
websites and social links;
recent episode information;
publishing activity;
audience estimates and popularity indicators;
other podcast-related metadata.

We do not intentionally collect personal data from children or unnecessary sensitive personal data.

3. Gmail and Google User Data

Guesterra allows users to connect Gmail through Google authorization and an email integration service.

3.1 How We Use Gmail Data

With your authorization, Guesterra may:

send Initial Outreach that you have reviewed and approved;
schedule and send Follow-Ups that you have approved;
access Guesterra-created or Guesterra-managed email threads;
detect replies and bounces where available;
display relevant sent and received messages in the Platform;
classify replies;
generate suggested response drafts;
update Campaign statuses and related activity records;
maintain necessary operational, security, and audit information.

Guesterra does not pre-fetch or retain your existing Gmail history when you connect an account.

After the account is connected, our email integration may receive incoming email messages or events so that replies can be matched to outreach managed through Guesterra.

Incoming messages are matched against thread identifiers associated with Guesterra. Messages that are not related to a Guesterra-created or Guesterra-managed thread may be held temporarily for up to approximately two minutes to prevent processing errors or race conditions. They are then deleted and are not persistently stored by Guesterra.

Only emails sent or received within Guesterra-created or Guesterra-managed threads are persistently stored by Guesterra.

3.2 User Control and Approval

Guesterra does not independently choose recipients or send Initial Outreach without user approval.

AI-assisted pitches and reply drafts must be reviewed, edited where appropriate, and approved by the user before they are sent.

When a user approves an outreach sequence, the approved Follow-Ups may be sent automatically according to that sequence.

Users remain responsible for:

selecting recipients;
reviewing email content;
approving messages and sequences;
ensuring the accuracy of claims;
complying with applicable privacy and electronic communications laws;
respecting objections, opt-outs, and do-not-contact requests.

3.3 AI Processing of Gmail Data

Content from a relevant Guesterra-managed email thread may be sent to an AI service provider where necessary to:

classify an incoming reply;
prepare a suggested response;
provide another user-facing AI-assisted feature requested through the Platform.

Only the thread content reasonably necessary for the relevant feature is processed for that purpose.

Guesterra uses business-facing AI services under settings and controls designed to prevent customer content and Google user data from being used to train general-purpose AI models.

AI-generated replies are suggestions only and cannot be sent without user review and approval.

3.4 What We Do Not Do With Google User Data

We do not:

sell Google user data;
use Google user data for advertising, remarketing, or audience targeting;
use Google user data to train general-purpose artificial intelligence models;
access Google Contacts, Calendar, Drive, or other Google services without separate authorization;
delete messages from your Gmail account;
use unrelated inbox content for product analytics.

Human access to Google user data is limited to situations where:

you request support involving specific data;
access is reasonably necessary to investigate a technical, security, or abuse issue;
access is required by applicable law.

Any such access is limited to the information reasonably necessary for that purpose.

Guesterra’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3.5 Revoking Access

You may revoke Guesterra’s access to your Gmail account through:

your Google Account security settings;
Platform controls, where available; or
a request sent to support@guesterra.co.

Revoking access may disable email sending, Follow-Ups, reply tracking, inbox display, classifications, suggested replies, and other email-related functionality.

4. How and Why We Use Personal Data

We use personal data to:

review Founding Access and other applications;
create, authenticate, and manage accounts;
provide podcast discovery and recommendations;
create and manage Clients and Campaigns;
provide AI-assisted drafting and recommendations;
connect email accounts;
send user-approved outreach and Follow-Ups;
detect, classify, and display replies;
manage subscriptions, payments, refunds, and account access;
provide support and respond to requests;
maintain security and prevent fraud, spam, and abuse;
understand Platform use and improve functionality;
send essential account, billing, security, access, and service-related communications;
comply with legal obligations;
establish, exercise, or defend legal claims.

Where applicable, we rely on one or more of the following legal bases:

Performance of a contract, where processing is necessary to provide the Platform or take steps requested before entering into a subscription.
Legitimate interests, including operating and improving the Platform, maintaining security, preventing abuse, providing support, and enabling appropriate B2B podcast outreach.
Consent, where processing depends on an optional authorization, integration, or technology requiring consent.
Legal obligations, including accounting, tax, regulatory, and lawful disclosure requirements.
Legal claims, where processing is necessary to establish, exercise, or defend our rights.

Guesterra does not use solely automated decision-making that produces legal or similarly significant effects for users.

AI scores, classifications, recommendations, and drafts are assistive and remain subject to user review.

5. AI Features and Podcast Data

5.1 AI-Assisted Features

AI service providers may process information necessary to provide a requested feature, including:

Client profile information;
Campaign answers and positioning;
podcast metadata;
pitch content;
Follow-Up content;
replies and relevant thread context;
user instructions and edits.

We use business-facing AI services under settings and controls designed to prevent customer content from being used to train general-purpose models.

AI-generated content may be inaccurate, incomplete, or unsuitable. Users remain responsible for reviewing and approving all content before it is sent or otherwise used.

5.2 Podcast Contact and Directory Data

Podcast information may come from licensed data providers, public websites, podcast directories, and other publicly available or business-oriented sources.

Podcast hosts, producers, and other individuals whose information appears in Guesterra may contact us to:

ask whether we process their information;
request access or correction;
object to particular processing;
request removal or restriction where applicable;
request that they not be contacted through Guesterra;
ask about the source of their information.

Requests may be sent to support@guesterra.co.

We may verify the requester’s identity and may refer or forward a request to the original data provider where appropriate.

Podcast contact information is provided as part of a broader podcast outreach workflow. It is not intended to be resold or used as a standalone contact database.

6. How We Share Personal Data

We do not sell or rent personal data.

We may share limited personal data with service providers that help us operate the Platform, including providers of:

website hosting and infrastructure;
authentication;
email integration and delivery;
artificial intelligence features;
podcast data;
database and workflow processing;
application forms and cloud storage;
product analytics;
security and error monitoring;
payment processing and Merchant of Record services;
professional legal, accounting, or technical support.

These providers receive only the information reasonably necessary to perform their services and process it subject to applicable contractual, confidentiality, and data protection requirements.

Within an Agency Account, the Agency Owner and authorized Agency Members may access Clients, Campaigns, outreach records, replies, usage information, and related workspace data according to their permissions.

We may also disclose personal data:

where required by law, court order, or lawful government request;
to enforce our Terms of Service;
to investigate suspected fraud, abuse, security incidents, or unlawful activity;
to protect Guesterra, users, email recipients, service providers, or the public;
as part of a merger, acquisition, restructuring, financing, or transfer of the Guesterra business, subject to appropriate protections.

7. Data Retention and Deletion

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

7.1 Founding Access Applications

Founding Access application data is generally retained for up to three months after the relevant application process ends, unless:

the applicant becomes a Guesterra customer; or
longer retention is reasonably necessary to comply with legal obligations, prevent abuse, or resolve a dispute.

7.2 Active Accounts

Account, Client, Campaign, outreach, and email data is retained while the account is active.

After a paid subscription ends, users may receive limited read-only access for up to 30 days. During that period, previously approved Follow-Ups may continue to be sent and existing Campaign information may remain visible.

Users cannot begin new searches, create or schedule new outreach, or use other paid actions during read-only access.

Cancellation of a subscription does not automatically delete the account or its data.

7.3 Account Deletion

Account deletion must currently be requested by contacting support@guesterra.co.

After a verified deletion request, we delete or anonymize account, Client, Campaign, and email content from active systems within 90 days.

We may retain limited records where required for:

accounting or tax obligations;
payment, refund, or chargeback records;
fraud or abuse prevention;
security investigations;
compliance with legal obligations;
establishing, exercising, or defending legal claims.

Information may remain temporarily in standard system backups until those backups are overwritten or expire through normal retention cycles.

7.4 Agency Accounts

When an Agency Member is removed, their access ends, but Clients, Campaigns, outreach records, and related data created within the Agency Account may remain under the control of the Agency Owner.

8. Cookies and Similar Technologies

Guesterra uses cookies, local storage, and similar technologies to operate and secure the website and Platform, remember essential settings, understand website usage, and measure the effectiveness of our marketing.

We may use services such as Google Analytics and Google Ads for analytics and conversion measurement. Where required by applicable law, non-essential analytics and advertising technologies are used according to your cookie consent choices.

You can accept or reject optional cookies through the cookie banner. Strictly necessary technologies required for the website or Platform to function may remain active regardless of your choice.

We do not use connected email content, Campaign content, replies, or other private customer content for advertising or audience targeting.

9. International Transfers and Security

Guesterra is operated from Serbia.

Some service providers may process personal data in the European Union, the United States, or other countries where they operate.

Where required by applicable law, we use appropriate contractual or legal safeguards for international data transfers.

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, or misuse.

These measures may include:

secure transmission;
authentication and access controls;
protections for credentials and authorization tokens;
restricted internal access;
logging and monitoring;
safeguards provided by our hosting and infrastructure providers.

No Internet transmission or electronic storage system can be guaranteed to be completely secure.

Users are responsible for protecting their login credentials, devices, and connected email accounts.

10. Your Rights

Depending on your location and applicable law, you may have the right to:

access personal data we hold about you;
correct inaccurate or incomplete information;
request deletion;
restrict certain processing;
object to processing based on legitimate interests;
receive certain data in a portable format;
withdraw consent where processing relies on consent;
submit a complaint to a competent data protection authority.

To exercise a privacy right, contact support@guesterra.co.

We may request information reasonably necessary to verify your identity and authority to make the request.

We will respond to verified requests within the timeframe required by applicable law, generally within one month where the GDPR applies.

These rights are not absolute. A request may be limited where processing or retention is required by law, necessary to protect another person’s rights, or otherwise permitted under applicable law.

11. Children’s Privacy

Guesterra is intended for professional users who are at least 18 years old.

We do not knowingly collect personal data from children.

If you believe that a child has provided personal data to Guesterra, contact us so that we can investigate and, where appropriate, delete the information.