Privacy policy
Effective November 8, 2026 ยท Last updated November 8, 2026
1. Who we are
Ganbo is software for small trades and service businesses. It's offered by Jordan Craft, a sole proprietor based in Illinois, USA ("Ganbo", "we", "us"). Questions about privacy go to hello@ganbo.app.
This policy explains what information we collect, how we use it, who we share it with, and the choices you have. It replaces the earlier policy that covered only the ganbo.app website and waitlist.
2. Two kinds of information, two roles
Ganbo holds two different kinds of information, and our role is different for each.
- Information about our customers. When a business signs up (a "Ganbo Customer"), we collect information about that business and the people on its team so we can run their account. For this information, we decide how it's used, and this policy applies in full.
- Information our customers put into Ganbo about their own customers. Ganbo Customers store details about the people they work for, such as names, addresses, phone numbers, job notes, photos, estimates and invoices ("Customer Data"). That information belongs to the Ganbo Customer. We store and process it only on their behalf and on their instructions, as their service provider. If you're one of their customers and have a question about your information, please contact the business you work with. If you contact us, we'll pass your request to them.
3. What we collect
From Ganbo Customers and their team members
- Account details: name, email address, phone number, business name, business address, and your password (stored only as a one-way scrambled hash, never in readable form).
- Sign-in and security information: two-step sign-in settings, sign-in times, and the cookies that keep you signed in.
- Billing information: your plan, billing history and billing contact. Card details are collected and stored by Stripe, not by us. We see only things like the card brand, last four digits and expiry.
- Payment setup (if you take card payments): if you connect a Stripe account to take payments from your customers, Stripe collects the business and identity details it needs to verify you. We receive your Stripe account ID, its status, and records of payments made through Ganbo.
- Texting setup (if you use texting): your business texting number and the information needed to register it with carriers.
- Messages you send us: support and waitlist emails, and anything you include in them.
- Usage and technical information: IP address, browser and device type, pages visited, and error reports when something breaks, used to keep Ganbo working and secure.
Customer Data that Ganbo Customers put in
- Contact details of their customers (names, addresses, phone numbers, emails).
- Service sites and property details, job notes, checklists, photos and files.
- Estimates, invoices, payments received, appointments and schedules.
- Text messages and emails sent to and received from their customers through Ganbo, and opt-out (STOP) status.
- Booking and quote requests submitted through the business's customer portal.
- Data imported from other apps (for example, CSV or Excel files).
When someone opens an estimate or uses a customer portal
When a Ganbo Customer's customer opens an estimate link, Ganbo records the time, the device type (phone, tablet or computer), and a short scrambled code made from their IP address and browser. That code lets the business see that an estimate was opened and roughly how often. We don't store the IP address itself in that record. People using a customer portal to book or request a quote provide the details they type in.
4. How we use information
- To provide Ganbo: run accounts and workspaces, store and display data, send the estimates, invoices, texts and emails the business asks us to send, and process payments.
- To keep Ganbo secure: verify sign-ins, prevent fraud and abuse, and investigate problems.
- To support you and tell you about your account, such as receipts, billing notices, security alerts and changes to our terms.
- To improve Ganbo, using information about how features are used, in a form that doesn't identify you or your customers.
- To meet legal obligations, such as tax records, and to respond to lawful requests.
We don't sell personal information. We don't use Customer Data to advertise to anyone, and we don't use it to train AI models. We may send Ganbo Customers occasional product news by email, and you can unsubscribe at any time.
5. Text messaging
When a Ganbo Customer texts their customers through Ganbo, the messages go through Twilio. Ganbo honors STOP and similar replies automatically, and a number that has opted out gets no more texts from that business until it replies START. Message and data rates may apply. Each Ganbo Customer is responsible for getting the consent the law requires before texting their customers.
No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Phone numbers and texting consent are shared only with the service providers that deliver the messages.
6. Who we share information with
We share information only with the service providers ("subprocessors") that help us run Ganbo, only as needed for them to do that work, and under their own privacy and security commitments. Today they are:
| Provider | What it does for Ganbo | Data involved |
|---|---|---|
| Vercel | Hosts the Ganbo app and website, and stores uploaded files (photos, PDFs) | All app data passes through it; uploaded files; server logs |
| Neon | Database hosting | Account data and Customer Data |
| Stripe | Subscription billing, and card payments for Ganbo Customers who turn them on | Billing contact and card details; payment and payout details |
| Twilio | Sending and receiving text messages | Phone numbers and message content |
| Mapbox | Maps, route planning and map measurements | Addresses and locations being mapped |
| Sentry | Error monitoring | Technical details of errors, which can include IP address, browser and the page where it happened |
| Email delivery service (named here once chosen) | Sending emails such as estimates, invoices, alerts and sign-in messages | Recipient email addresses and email content |
| ImprovMX | Forwarding mail sent to hello@ganbo.app | Support emails |
We'll update this list before adding a new subprocessor that handles Customer Data. We'll also email account owners when the list changes.
We may also share information:
- when the law requires it, or to respond to a valid legal request;
- to protect the rights, safety or property of Ganbo, our customers or others;
- with a company that takes over Ganbo, including a company Jordan Craft forms to run it. This policy would continue to apply to information collected under it.
7. Cookies
The Ganbo app uses only the cookies it needs to work: keeping you signed in, remembering which workspace you're in, and completing two-step sign-in. We don't use advertising cookies, cross-site trackers or marketing pixels. The ganbo.app website loads fonts from Google Fonts, which means your browser sends Google a request that includes your IP address.
8. How long we keep information
- Account and Customer Data: for as long as the account is active.
- After an account closes: the business has 30 days to request an export. After that, we delete Customer Data from the live system within 30 days, and it rolls out of our backups within 30 days.
- Billing and tax records: for 7 years, as tax law requires.
- Error reports and server logs: for as long as the provider keeps them under its own settings, generally up to 90 days.
- Opt-out records: we keep a record that a phone number opted out of texts so it isn't texted again, even after other data is deleted.
9. How we protect information
We use reasonable safeguards for a business of our size, including encrypted connections (HTTPS), passwords stored only as hashes, optional two-step sign-in, private file storage, and separation between workspaces so one business can't see another's data. No system is perfectly secure. If a breach affects your personal information, we'll notify you as Illinois law and other applicable laws require, without unreasonable delay.
10. Your choices and rights
Ganbo Customers and their team members can:
- see and update most account information in Ganbo's settings;
- export their workspace data;
- ask us for a copy of their personal information, or ask us to correct or delete it;
- unsubscribe from product news (account and security emails will still be sent).
Email hello@ganbo.app to make a request. We'll respond within 30 days and may need to confirm your identity first. We won't treat you differently for using these rights. Depending on where you live, you may have additional rights under your state's privacy law, and we'll honor them where they apply.
If you're a customer of a business that uses Ganbo, please contact that business about your information. They control it, and they can view, correct, export or delete it in Ganbo. If you write to us, we'll forward your request to them.
11. Children
Ganbo is a business tool for adults. It isn't directed to children under 13, and Ganbo accounts are for people 18 and older. We don't knowingly collect personal information from children under 13. If you think a child has given us information, email hello@ganbo.app and we'll delete it.
12. Where information is stored
Ganbo is run from the United States, and information is stored with our providers in the United States. Ganbo is intended for businesses in the United States.
13. Changes to this policy
If we make a significant change, we'll email Ganbo account owners at least 30 days before it takes effect and update the date at the top. Smaller changes take effect when they're posted.
14. Contact
Jordan Craft (Ganbo)
PMB 105, 1117 N Carbon St
Marion, IL 62959
hello@ganbo.app