Privacy Policy

This Privacy Policy explains how Gorilla POS(“Gorilla POS,” “we,” “us,” or “our”) collects, uses, and protects information when you use our website and laundromat management platform (the “Service”). By using the Service, you agree to the practices described here.

1. Information We Collect

We collect the following categories of information:

• Account & contact information — name, business name, email address, and phone number you provide when requesting a demo, creating an account, or contacting us.
• Operational data — information you enter into the platform, such as orders, customers, machines, staff, schedules, and delivery routes.
• Payment information — billing details processed securely by our payment provider. We do not store full card numbers on our servers.
• Usage & device data — log data, IP address, browser type, and pages viewed, collected automatically to operate and improve the Service.

2. How We Use Your Information

• To provide, maintain, and improve the Service.
• To process payments and manage your subscription.
• To communicate with you about your account, demos, support requests, and product updates.
• To power features such as delivery routing, reporting, and Gorilla AI insights.
• To detect, prevent, and address security or technical issues.
• To comply with legal obligations.

3. Cookies & Tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service, and understand how the Service is used. We use:

• Essential cookies — required for authentication, security, and core functionality. The Service will not work properly without them.
• Analytics cookies — help us measure usage and improve performance.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using parts of the Service. We do not use cookies to sell your personal information.

4. Third-Party Service Providers

We share information with trusted service providers only as needed to operate the Service. These include:

• Stripe — payment processing and subscription billing.
• Twilio — SMS and voice notifications related to orders, pickups, and deliveries.
• Supabase — database, authentication, and secure storage of your platform data.
• Google Maps — geocoding and route optimization for delivery features.
• Anthropic — AI features and Gorilla AI insights. Data sent to power AI features is not used to train third-party models.

These providers are bound by their own privacy and security obligations and may only use your information to perform services on our behalf.

5. Data Retention

We retain your information for as long as your account is active and for the periods described below:

• Account & operational data — retained while your account is active and for up to 90 days after account closure, after which it is deleted or anonymized.
• Billing & transaction records — retained for up to 7 years to meet legal, tax, and accounting obligations.
• Support communications — retained for up to 2 years.
• Server and usage logs — retained for up to 12 months.

6. How to Request Data Deletion

You may request deletion of your personal data at any time by emailing privacy@gorillapos.com. Once we verify your request, we will delete your personal data within 30 days, except where we are required to retain certain records (for example, billing records) by law. Some data may persist in backups for a limited time before being overwritten.

7. International Data Transfers

Gorilla POS is operated from the United States, and our service providers may process and store data in the United States and other countries. If you access the Service from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. Where required, we rely on appropriate safeguards for such transfers.

8. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@gorillapos.com. We will respond within a reasonable timeframe.

9. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request information about the personal data we collect, use, disclose, and sell.
• Right to Delete: You may request deletion of your personal data, subject to certain exceptions.
• Right to Opt-Out: We do not sell personal data to third parties.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your rights, contact us at privacy@gorillapos.com. We will respond to verifiable requests within 45 days.

10. Data Security

We use industry-standard safeguards — including encryption in transit and access controls — to protect your information. No method of transmission or storage is completely secure, but we work continuously to protect your data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by additional notice.

12. Contact Us

Questions about this Privacy Policy? Email us at privacy@gorillapos.com.