Privacy policy
Gestivo is business management software provided by BustaSoft LLC ("we", "us"). Businesses ("customers") use it to run their clients, schedule, payments, staff and bank reconciliation. This policy explains what personal data Gestivo handles, why, and the choices people have.
1. Who is responsible
For the data a customer enters about its own clients, employees and operations, the customer is the controller and we process that data on its behalf. For the data of the people who sign in to Gestivo (account owners and their staff) and for bank data connected through Plaid, BustaSoft LLC is responsible as described here. Contact: [email protected].
2. What data we handle
- Users: name, email, phone, language, sign-in and two-factor authentication data, and a log of the actions taken in the application.
- The customer's clients and staff: what the customer chooses to record, such as names, contact details, addresses, visits, invoices, payments, notes, time entries and payroll details.
- Bank data (optional): when a customer connects a bank account through Plaid, we receive the account name, its last digits and its transactions (date, amount, description and counterparty). We never receive or store bank sign-in credentials, and Gestivo cannot move money from a connected account.
- Card payments (optional): card data is entered on the payment processor's own page (Stripe). We do not receive or store card numbers.
3. Why we use it
- To provide the service the customer signed up for: scheduling, billing, reminders, reports and reconciling bank transactions with the customer's own payments, expenses and payroll.
- To keep accounts secure: authentication, fraud prevention and activity logs.
- To bill the customer for its subscription and to support it when it asks.
We do not sell personal data, and we do not use bank data or clients' data for advertising or to build profiles. Bank data is only used inside the customer's own account.
4. Plaid
Bank connections are made through Plaid Inc. When connecting, the user signs in on their bank's screen inside Plaid Link and consents to share their data. Plaid's handling of that data is described in the Plaid End User Privacy Policy. A connection can be ended at any time from Gestivo (Bank > Accounts > Disconnect), which also revokes our access at Plaid.
5. Who we share it with
Only with the service providers that run Gestivo on our behalf, and only what each one needs: hosting (Bluehost), Plaid (bank connections), Stripe (card payments and subscriptions), email delivery (Amazon SES or Postmark), text and WhatsApp messages (Twilio), address lookup (OpenStreetMap) and, when the customer switches on the AI assistant, the AI provider it chooses (Anthropic or OpenAI). We may also disclose data when the law requires it.
6. How we protect it
- All traffic is encrypted with TLS (HTTPS).
- Bank data (the access token, amounts, descriptions, counterparties, account names and digits) and other sensitive fields are encrypted at rest in the database.
- Two-factor authentication is required for every user, accounts lock after repeated failed sign-ins, and sessions end after inactivity.
- Access inside an account is limited by roles and permissions, and each customer's data is kept apart from every other customer's.
7. How long we keep it
- Bank data: while the bank is connected. When it is disconnected, its transactions are deleted 90 days later, or immediately if the customer deletes them from Bank > Accounts. The payments, expenses and payroll the customer recorded from them stay in its books.
- Everything else: while the customer's account is active. When the account is closed, its data is deleted on request, except what the law requires us to keep (for example, billing records).
8. Your rights
People can ask to access, correct, export or delete their personal data, and to withdraw their consent to bank connections. Clients of a business should first contact that business, which controls their data; we will help it answer. Requests to us: [email protected]. We answer within the time the applicable law sets (in the United States, including the CCPA/CPRA where it applies).
9. Children
Gestivo is a tool for businesses and is not directed to children under 13.
10. Changes
If we change this policy, we will update the date above and, when the change is significant, tell the account owners in the application.