Privacy policy
Last updated: November 2026
Your privacy matters. This policy explains what data is collected and how it is used.
Data collected
- Name and email — when signing in with Google or making a purchase, to manage your account and bookings.
- Payment data — managed exclusively by Stripe. Card details are never stored.
- Credits and bookings — your class balance is stored in a secure database linked to your email.
- Device identifiers — the integrated services (Stripe, Zoom, Google) generate technical device identifiers to prevent payment fraud, manage video sessions and deliver app updates. They are not used for advertising or tracking purposes.
How data is used
- To manage your access, bookings and class balance.
- To send you booking confirmations and class reminders by email.
- Data is never sold to third parties or used for advertising purposes.
Third-party services
- Google OAuth — sign-in. Google Privacy Policy.
- Anthropic (Claude) — AI model that writes the site assistant's replies. Anthropic Privacy Policy.
- Stripe — payment processing. Stripe Privacy Policy.
- Zoom — virtual classroom technology integrated into the platform for conducting sessions. Zoom Privacy Policy.
- Supabase — database where bookings, credit balances and account data are stored securely.
AI assistant
The site's assistant answers questions about the classes, the courses and the blog, and can suggest times for the free 15-minute intro call. This is how it works:
- What is sent: the messages you type are sent to Anthropic, which writes the reply with its Claude model. The only other things sent with them are your date, time and time zone, the page language and whether you are signed in. Your name and email are not sent to the model.
- How long it is kept: the conversation is held in temporary server memory so the assistant remembers what you have discussed, and it is deleted automatically one hour after your last message. It is not saved in the database or linked to your account. Your browser keeps the latest messages while the tab is open.
- Usage limits: to prevent abuse, the number of messages sent from each IP address or, if you are signed in, from each account is counted temporarily.
- Voice dictation: if you tap the microphone, your voice is transcribed by your own browser's speech recognition service (for example Google's in Chrome or Apple's in Safari), under that service's terms. gustavoai.dev only receives the text you then send, just as if you had typed it. We do not record or store your voice.
- Read-aloud: if you dictate a message, the reply is read aloud by your browser's speech synthesis. Whenever one is available, a voice installed on your device is used; some voices (for example Chrome's "Google" voices) run on their provider's servers, which then receive the text of the reply in order to read it. You can turn read-aloud off with the speaker button in the chat.
- Bookings: the assistant cannot book anything by itself. If it suggests a time, the booking is only made when you tap "Confirm" while signed in.
Anthropic processes these messages as a service provider under its commercial terms, which do not allow it to use them to train its models. Please don't type sensitive information (health or bank details, passwords) in the chat.
Your Google Calendar (optional)
The site's AI assistant can suggest times for the free 15-minute intro call. If you are signed in, you can tap "Compare with my calendar" to hide the times that clash with something in your schedule. Only then does Google ask for your permission to see your availability (the read-only calendar.freebusy permission).
- What is read: only the intervals in which your primary calendar shows you as busy, and only on the days of the suggested times. The title, description, attendees and every other detail of your events are never requested or read.
- When: only when you tap the button and grant the permission. Access to your calendar is never requested at sign-in.
- Where it is used: the request to Google is made from your browser, which filters the list of times itself. Your calendar data is not sent to gustavoai.dev's servers or to the AI assistant, and is not shared with anyone.
- How long it is kept: it is not kept. The busy intervals and the temporary access code Google issues (valid for one hour at most) exist only in the page's memory and are discarded when you close or reload it.
- How to withdraw the permission: the permission you grant in Google stays in place so that your next comparison takes a single click. You can revoke it at any time at myaccount.google.com/permissions.
gustavoai.dev's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Your rights
You can delete your account and all of your data yourself from your personal area, under "Delete account". Deletion is immediate and cannot be undone: your account and personal details, your bookings and entire class history, your credit balance, your course progress and your payment records are permanently erased. No copy is kept and there is no grace period in which to recover them.
To protect classes you have already paid for, that option is not available while you hold unused credits in an active pack or booked classes you can still cancel yourself. In those cases the page tells you what to do: cancel those classes, or write to contacto@gustavoai.dev to arrange a refund before closing the account.
Stripe keeps its own records of transactions to meet its legal and tax obligations, even though the local copy is deleted. For any other request about your data — access, rectification or erasure — write to contacto@gustavoai.dev.
Cookies
Only strictly necessary cookies are used for authentication (NextAuth). No tracking or advertising cookies.
Changes to this policy
Any significant changes will be communicated by email to users with an active account.
gustavoai.dev · contacto@gustavoai.dev