Privacy policy
Last updated October 23, 2026
Who we are
GID Labs ("GID", "we", "us") is a small business in South Florida that builds websites, booking systems, software and AI agents, and coordinates business projects. This policy covers https://gidlabs.com, our forms and tools, the messages we send and receive, and the automated assistants we run for ourselves and for our clients.
Questions or requests: email Jhop100k@gmail.com or text 754-326-1980.
What we collect
Information you give us: your name, business name, email, phone number, website and what you need when you fill in a form, request a quote, email, text or message us. If you become a client, we also keep the project details, files and content you send us (logo, photos, service lists, hours).
Website audit: the web address you enter. Our tool reads that site’s public pages to run the audit.
Instagram messages: when someone messages an Instagram account that uses our automated assistant (GID Instagram Auto-Replies), Meta sends us the message and a sender ID that only works for that account. We use the message to pick a reply. We do not store the text of the message. Our logs keep the sender ID, the topic (for example "booking") and whether a reply was sent.
Public business information: to find businesses we might help, we look up publicly available business details such as the business name, address, website, public phone number and public business email, from sources like Google and the business’s own website.
Payments: payments are handled by Stripe. We receive the payer’s name, email, amount and payment status. We never receive or store full card numbers.
Google accounts: if a client chooses to connect a Google account (for example Google Ads or Google Business Profile), we receive the access that client grants and the account data needed for the work they asked for.
Technical data: our hosting providers record standard server logs, such as IP address, browser type and the pages requested, to keep the site running and secure. We do not use advertising cookies or third-party ad trackers on this site.
How we use it
To answer your request, prepare quotes, do the work you approve, send invoices and receipts, and support you afterwards.
To run automated replies and reminders that a business has turned on, such as an Instagram auto-reply pointing customers to its booking page.
To contact businesses about services that may help them. Every marketing email includes a way to opt out, and we honor opt-outs right away.
To keep our services secure, prevent abuse and meet legal obligations.
We use AI tools to research, draft and organize work. Anything we send to you or your customers is either reviewed by a person first or is an automated reply that says it is automated.
Texts and calls
We only text people who have agreed to receive texts from us. Message and data rates may apply. Reply STOP to stop texts at any time, or HELP for help.
We do not share or sell mobile numbers or text-messaging consent with anyone for their own marketing. Mobile information is shared only with the provider that delivers our texts (Twilio), to deliver them.
Automated assistants
Our automated assistants say that they are automated. They only reply to people who message first, and only within the time Meta allows. Message "stop" and the assistant will not send you an automated reply.
A person can always take over a conversation. If you want to talk to a person, say so in your message.
Who helps us run GID
We share information only with service providers that help us run our business, and only what each one needs for its job: Vercel (website hosting), Supabase (database), DigitalOcean (servers), GitHub (code and demo pages), Anthropic and OpenAI (AI tools), Google (search, maps, email, Ads and Business Profile when a client connects them), Meta (Instagram messaging), Twilio (texts and calls), Stripe (payments), ElevenLabs (text-to-speech), and Telegram (internal notifications to our team).
When a client project needs an outside provider (for example a manufacturer or a rental company), we share only what that provider needs, and only after the client approves the quote.
We may also share information if the law requires it, to protect our rights or safety, or as part of a sale or merger of our business, in which case this policy keeps applying to it.
What we never do
We don’t sell personal information, and we don’t share it for cross-context behavioral advertising.
We don’t ask for card numbers or bank details in forms, emails, texts or Instagram messages.
We don’t use information from Instagram or Google for anything other than the service the account owner asked for.
Google user data
Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We use Google account data only to provide the features the account owner asked for, we don’t use it for advertising, and we don’t let people read it unless the owner agrees, it is needed for security, or the law requires it.
How long we keep it
We keep information only as long as we need it for the reason we collected it: for clients, for the length of the work and as long as tax, accounting and legal records require; for inquiries and leads, until it is no longer useful or you ask us to delete it. Instagram message text is not stored at all. Server logs are kept for a short time by our hosting providers.
Your choices and rights
You can ask us to tell you what we hold about you, correct it, or delete it. Email Jhop100k@gmail.com or text 754-326-1980. We answer within 30 days, and we may need to confirm it’s really you first. See our data deletion page (https://gidlabs.com/data-deletion) for step-by-step instructions.
You can opt out of marketing emails with the link or reply in any email, and stop texts by replying STOP. Depending on where you live (for example California), you may have more rights under your state’s law. We will honor them and won’t treat you differently for using them.
Security
We protect information with access controls, encrypted connections and by keeping secrets out of our code. No system is perfectly secure, so we can’t promise that information will never be accessed without permission. If a breach affects you, we will tell you as the law requires.
Children
Our services are for businesses and adults. We don’t knowingly collect information from children under 13. If you think a child has sent us information, contact us and we will delete it.
Changes
We may update this policy. The date at the top shows the latest version. If a change is significant, we will say so on this site or tell clients directly.