At GIBS, we prioritize the security and confidentiality of your personal information. Our approach is grounded in:
Empowering Users: We put you in control of your data, providing clear options for managing and deleting it.
Data Efficiency: We only collect the data necessary to deliver and improve our services.
Clear Communication: Transparency is key—we explain how your information is handled without legal jargon.
Built-In Security: Our technology is designed with data protection as a core principle, not an afterthought.
Effective Date: March 1, 2025
Welcome to GIBS, a product of Fixer Network Inc. (“we,” “us,” or “our”). Fixer Network Inc. is the Data Controller responsible for determining the purposes and means of processing personal data collected through GIBS. We work with trusted Data Processors, who handle data based on our instructions and in compliance with data protection laws. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use GIBS.
1. Information We Collect
We collect the following types of information:
Screenshots: Users manually upload screenshots to be analyzed by GIBS. Uploaded screenshots may contain text, images, or other visible information that the user chooses to share.
Usage and Event Data: We collect data on how you interact with GIBS, such as page visits, feature usage, and actions taken within the service. This helps us analyze product performance, improve our services, and enhance your experience. Some of this data may be linked to your account but is primarily used in an aggregated or anonymized form.
Automatically Collected Data: We collect cookies for login functionality and analytics through Google Analytics.
2. How We Collect Your Information
Manual Upload: Users upload screenshots directly into the platform.
Cookies: Used for login functionality and performance analytics.
3. How We Use Your Information
We use the information to:
Provide summaries, insights, and other extracted information from screenshots.
Improve our services.
Analyze performance and usage patterns (via Google Analytics).
We may use anonymized or aggregated data for analytical purposes in the future.
Legal Basis for Processing (GDPR & LGPD)
We process your personal data under the following legal bases:
Performance of a Contract: To provide the GIBS service.
Legitimate Interests: To improve our services and ensure their security.
Consent: Where required, such as for cookies and uploading screenshots.
4. Automated Decision-making and Profiling
GIBS uses automated processing to generate summaries, categorization, and insights based on screenshots. This processing does not involve decisions that have legal or similarly significant effects on users.
5. Data Sharing and Disclosure
We work with trusted third-party service providers, including but not limited to cloud hosting partners (e.g., AWS, Supabase), data processing services (e.g., OpenAI), and operational tools (e.g., Sentry, Datadog, Gemini, Claude). These partners help us securely deliver our services and improve performance. We may also disclose information if required by law or in response to valid legal requests.
Where Your Data Lives: Data is securely stored on Supabase (hosted on AWS in Canada Central) and AWS servers (USA, N. Virginia), with robust security measures in place.
Data Retention: We keep your data only as long as necessary to provide our services or until you request deletion.
Retention Guidelines: Uploaded screenshots and associated data will be retained indefinitely unless you request deletion. If you request deletion, we will ensure your data is removed from our active systems (Supabase and AWS). Data in backups will not be immediately deleted but will be overwritten in the normal backup cycle and will not be restored into active systems.
Protective Measures: We safeguard your data with encryption, secure servers, and multi-factor authentication (MFA).
Data Breaches: We have procedures in place to identify, assess, and respond to data breaches. Where legally required, we will notify affected users and data protection authorities.
6. Your Rights and Choices
How you control and share your data
GIBS empowers you to manage your data responsibly. While we provide insights and summaries based on your uploaded screenshots, you’re in control of how this information is shared beyond our platform.
Consider who you share data with, especially when it includes sensitive content. We encourage thoughtful sharing practices to protect your privacy.
While GIBS provides tools to summarize and analyze your screenshots, you are responsible for how you choose to share any summaries, reports, or extracted data. We recommend exercising caution when sharing sensitive data externally.
You have the following rights regarding your personal data:
Access: Request a copy of the data we hold about you.
Correction: Request corrections to inaccurate information.
Deletion: Request deletion of your data (right to be forgotten).
Data Portability: Request your data in a portable format.
Opt-Out: Users may terminate data collection and request the deletion of their data by submitting a formal request through the designated opt-out process accessible in the App. Upon receipt of the request, the data subject’s information will be processed and removed in accordance with applicable data protection regulations.
Sensitive Personal Data
While we do not actively seek to collect sensitive personal information, screenshots uploaded by users may incidentally include such information (e.g., health information, political opinions). We process this data solely to provide our service and do not use it for any other purposes.
7. International Data Transfers
Data may be transferred outside of Quebec, Canada, including to AWS servers in the United States. When transferring data internationally, we implement appropriate safeguards, such as Standard Contractual Clauses (SCCs), to comply with GDPR and other data protection regulations. Our key service providers, including Supabase, OpenAI, and AWS, have SCCs in place to ensure lawful data transfers outside the EU/EEA.
8. Cookies and Tracking Technologies
We use:
Functional Cookies: For login and basic site functionality.
Analytics Cookies: Through Google Analytics to monitor site performance.
For more details, please refer to our separate Cookie Policy.
9. Children’s Privacy
GIBS is designed for individuals aged 16 and older. We do not knowingly collect data from minors. If we discover that data from a child under 16 has been provided, we will promptly delete it. Parents or guardians can contact us directly if they believe their child’s data has been unintentionally collected.
10. Data Protections Supervisory Authority
We comply with global privacy regulations, including the GDPR (EU/EEA), UK GDPR (United Kingdom), CCPA/CPRA (California), LGPD (Brazil), and PIPEDA (Canada).
Regional Compliance
We comply with privacy laws across multiple jurisdictions, including:
GDPR (EU/EEA) and UK GDPR (United Kingdom)
We comply with GDPR in the European Economic Area (EEA) and the UK GDPR in the United Kingdom.
Users in these jurisdictions have the right to access, correct, delete, or transfer their data, as outlined in the Your Rights and Choices section above.
Supervisory Authority: Fixer Network Inc. has not yet formally designated a lead supervisory authority within the EEA but intends to do so. Until then, you may contact your local data protection authority in the country where you reside.
CCPA/CPRA and US State Privacy Laws (California, USA, and Others)
We do not sell or share personal data as defined under the CCPA/CPRA and applicable US state privacy laws.
Any sensitive personal information collected is used solely to provide the GIBS service and is not shared or used for other purposes.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights under CCPA/CPRA or other applicable US state privacy laws.
Residents of California and other states with applicable privacy laws can exercise their rights by contacting us at support@gibs.it.com.
LGPD (Brazil)
We process personal data under LGPD based on user consent and legitimate interests, specifically to provide and improve the GIBS service.
Our Data Protection Officer (DPO) can be contacted at support@grouphug.xyz.
PIPEDA (Canada)
Fixer Network Inc. is responsible for personal data under our control, including data processed by third-party service providers.
We ensure our service providers maintain comparable privacy standards.
Our Privacy Officer can be contacted at support@grouphug.xyz.
11. Updates to this Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on our website. Continued use of GIBS after changes constitutes acceptance of the updated policy.
12. Contact Us
For privacy-related inquiries or to exercise your data rights, please contact us at: support@thefixercorporation.com