Privacy Policy
Last updated: October 16, 2026
1. Scope
This Privacy Policy describes how Gutschow LLC (“Gutschow,” “we,” “us,” or “our”) handles information when you:
- Visit gutschow.xyz and related marketing pages (including Webflow-hosted forms);
- Use docs.gutschow.xyz, sandbox.gutschow.xyz, api.gutschow.xyz, or dashboard.gutschow.xyz;
- Subscribe to updates, request sandbox or production access, or otherwise communicate with us; or
- Access our B2B clearing, settlement, and treasury automation software (collectively, the “Services”).
2. Who we are
Gutschow LLC
Princeton, New Jersey, United States
Privacy inquiries: info@gutschow.xyz
3. Information we collect
Depending on how you interact with us, we may collect:
| Category | Examples | Typical source |
|---|---|---|
| Business contact data | Name, email, company, message content (contact form); job function where collected | Contact form, sandbox signup, email |
| Account & authentication data | API key identifiers (gsk_sandbox_… / gsk_live_…), organization IDs, operator email (via Cloudflare Access), configuration metadata | Onboarding, dashboard sign-in |
| Transaction & compliance metadata | Settlement payloads, wallet IDs, corridor, counterparty fields, Travel Rule / KYB attributes, sanctions screening inputs, status transitions, webhook delivery logs | API ingest, compliance gates |
| Technical telemetry | IP address, user agent, timestamps, request IDs, rate-limit counters, error diagnostics | Edge proxy, API gateway, ops monitoring |
We do not intentionally collect sensitive categories (e.g., government ID images) through the public marketing site. KYB documentation for production onboarding may include additional materials submitted through secure channels agreed during onboarding.
Blind Ingress Privacy: Where enabled, sensitive ingress fields may be redacted or processed in short-lived memory enclaves before persistence. This is operational privacy engineering — not zero-knowledge cryptography.
4. How we use information
We use information to:
- Provide, operate, secure, and improve the Services;
- Authenticate API and operator access and enforce tenant isolation;
- Run compliance screening (sanctions, velocity limits, Travel Rule metadata validation) and fraud prevention;
- Reconcile ledgers, investigate incidents, and maintain immutable audit trails;
- Respond to sales, support, and onboarding requests;
- Send product updates you have opted into;
- Comply with law, regulatory requests, and contractual obligations.
5. Legal bases (EEA / UK visitors and Customers)
Where GDPR or UK GDPR applies, we rely on: contract performance (providing the Services); legal obligation (financial-crime and sanctions compliance); legitimate interests (securing infrastructure, preventing abuse, improving B2B products); and consent where required (e.g., optional marketing cookies or newsletters).
7. International transfers
Gutschow operates from the United States. Information may be processed in the U.S. and other countries where our providers operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.
8. Retention
- Transaction and audit records: retained for periods required by Customer contracts, internal security policy, and applicable recordkeeping laws (often multi-year for financial-crime auditability).
- Marketing contacts: until you unsubscribe or we purge inactive records.
- Sandbox data: may be deleted or reset on shorter cycles.
- Website logs: retained for security and troubleshooting, then rotated per policy.
9. Security
We apply administrative, technical, and organizational measures including TLS in transit, scoped credentials, HMAC-signed API ingress, rate limiting, and immutable audit logs. No method of transmission or storage is perfectly secure. Customers must protect their own API keys, HMAC secrets, and operator accounts.
10. Your choices and rights
- Marketing email: unsubscribe via link in any message or email info@gutschow.xyz.
- Privacy rights: depending on jurisdiction, you may request access, correction, deletion, restriction, portability, or objection. Institutional users should typically route requests through their employer (our Customer). We will not discriminate for exercising privacy rights.
- California residents: we do not sell or “share” personal information for cross-context behavioral advertising as defined under CCPA/CPRA.
To exercise privacy rights, email info@gutschow.xyz with sufficient detail to verify your request. We will respond within timeframes required by applicable law.
12. Children
The Services are not directed to individuals under 18. We do not knowingly collect children’s personal information.
13. Changes
We may update this Policy by posting a revised version with an updated “Last updated” date. Material changes affecting production Customers will be communicated through reasonable commercial channels.
14. Contact
Gutschow LLCPrinceton, New Jersey, United States
Email: info@gutschow.xyz
Website: https://gutschow.xyz
Privacy inquiries: Direct correspondence regarding this Privacy Policy to info@gutschow.xyz at the address above.
Related documents: