Privacy

Last updated October 8, 2026

This policy covers gussa.com, the GUSSA brand site operated by GUSSA ("we"). It does not cover the GUSSA India online store, which runs on Shopify and has its own policies, or Amazon, where purchases in the United States and Canada take place.

What we collect

gussa.com sells nothing directly, so it collects very little:

• Email addresses you give us — when you join a "tell me when" list (Extra Hot First Taste, UK or other regional availability, recipes), request GUSSA at a store, or send a retailer or food-service inquiry. Trade inquiries also include the business details you type into the form.
• Campus Rep applications — if you apply at /campus: your school email, the name, school, graduation term and major you give us, any social handles and links you share, the groups and food spots you name, how you heard about the program, and your answers. To confirm your school email we store the 6-digit code we send only in scrambled (hashed) form, and to stop abuse we count code requests per network using a scrambled form of your IP address. Until you send the application, your answers are kept only in your own browser (local storage) so a lost tab doesn't lose your work. If you become a rep, we also record the address you give us for your starter kit and its tracking number, the sample packs you ask for, the commission you earn and the payments we make to you. Your rep page lives at a private link only you and the GUSSA team have; anyone holding that link can open the page, so keep it to yourself. The IRS Form W-9 we ask for before your first payment is collected by the GUSSA team directly and is never entered on or stored by gussa.com.
• Food spots reps bring in — the spot's name and business address, the name, phone number or email of the person there a rep talked to, and the orders the spot pays GUSSA for. We use them to ship the spot a sample and to work with it directly.
• Student organizations we contact — to find Campus Reps we write to student organizations, such as South Asian and Indian student associations. For each one we keep its name, school and public pages, the contact emails it lists publicly (on its school's student-organization directory or its own site) or that it gives us, the emails we send it and the replies it sends back, and whether our emails were delivered. We don't collect officers' names or personal details from those directories. Every email we send names why you got it and carries a one-click link to stop them; if you use it, reply asking us to stop, or mark one as spam, we keep only a scrambled (hashed) form of the address so we never email it again.
• Region — a cookie (gussa_region) remembering which country's buy links to show you, set from your approximate location (country level, from our hosting provider) or from your own choice in the region menu (gussa_region_manual).
• Where you arrived from — if you reach us through a tracked link (our Instagram bio, the QR code on a bottle, a link in an email), a cookie (gussa_src) records that placement for 30 days so we can tell which of them work. It contains a placement name, not anything about you. A Campus Rep's link or QR code works the same way: it records that you arrived through that rep's link, so visits, Buy clicks and signups that follow can be counted toward the rep. The rep sees none of it, only totals the GUSSA team shares. A student organization's link works the same way and also sets a cookie (gussa_org) for 30 days holding only which organization's link you opened, so the Campus Rep form can suggest it under "how you heard" and an application can be counted toward that organization.
• Aggregate clicks — when you follow a Buy button we record the product, your region and the placement of the button. No account, no identifier, no personal data.
• Anonymous quiz results — the "Which GUSSA are you?" quiz records only a count per result.

Analytics

We use Vercel Web Analytics, which is cookieless and does not track you across sites. We do not use Google Analytics, Meta Pixel or any advertising tracker on gussa.com.

How we use it

• To send you the one email you asked for (a launch, an availability change, a reply to your inquiry). You can reply STOP to any of them.
• To show retailers real, aggregated demand: counts of store requests per store and city. Never names or emails.
• To understand which placements and regions lead people to buy, so we spend effort where it works.
• To review Campus Rep applications and reply to you, to see which schools and food spots applicants name, and, if you become a rep, to send your starter kit, credit you with the spots you bring in, count what your link brings in, and pay your commission.
• To tell student organizations about the Campus Rep program, with one follow-up at most if we don't hear back, and to answer them when they write back.

Who else sees it

• Google Firebase stores form submissions and counters.
• The GUSSA team reads Campus Rep applications, including your school email and handles, to decide on them. They are not published.
• SendGrid (Twilio) delivers our emails.
• Vercel hosts the site and provides country-level location and analytics.
• Amazon: when you click through to buy, you are on Amazon, under Amazon's privacy policy. Amazon reports aggregate sales attributed to our links back to us; it never tells us who bought.
• Hustlin, the growth tooling we use, receives aggregate counts and de-identified conversion events (for example "a First Taste signup happened" or "a Campus Rep application came in from a school in Ohio"), never your email.
• Instagram: the feed on our homepage is loaded by our server from Meta's API. No Instagram script runs in your browser.

We do not sell personal information, and we do not share it with anyone else for their marketing.

Retention and your choices

We keep list emails until the thing you asked about has happened and the email has been sent, or until you ask us to remove you. Inquiry details are kept as long as we are talking to your business. Campus Rep applications are kept while the program runs, so we know who has applied (one application per school email) and can reach our reps, until you ask us to delete yours; deleting it also switches off any rep link. Records of commission earned and paid are kept as long as tax law requires, even after an application is deleted. A student organization's record and our emails with it are kept while the program runs, until the organization asks us to delete it; an opted-out address is kept only in scrambled form, and only so it stays off our list. Records used to confirm a school email, and the scrambled network counters, are deleted automatically within two days. Write to support@gussa.com to access, correct or delete anything we hold about you; we'll do it and confirm. Cookies can be cleared in your browser at any time; the site keeps working, it just forgets your region.

Children

gussa.com is not directed at children under 16 and we do not knowingly collect information from them.

Changes

If this policy changes materially we'll update the date at the top and, where we have your email for a list, tell you.