Privacy

Last updated October 5, 2026

This policy covers gussa.com, the GUSSA brand site operated by GUSSA ("we"). It does not cover the GUSSA India online store, which runs on Shopify and has its own policies, or Amazon, where purchases in the United States and Canada take place.

What we collect

gussa.com sells nothing directly, so it collects very little:

• Email addresses you give us — when you join a "tell me when" list (Extra Hot First Taste, UK or other regional availability, recipes), request GUSSA at a store, or send a retailer or food-service inquiry. Trade inquiries also include the business details you type into the form.
• Campus Rep applications — if you apply at /campus: your school email, the name, school, graduation term and major you give us, any social handles and links you share, the groups and food spots you name, and your answers. To confirm your school email we store the 6-digit code we send only in scrambled (hashed) form, and to stop abuse we count code requests per network using a scrambled form of your IP address. Until you send the application, your answers are kept only in your own browser (local storage) so a lost tab doesn't lose your work. If you become a rep, we also record the commission you earn and the payments we make to you. The IRS Form W-9 we ask for before your first payment is collected by the GUSSA team directly and is never entered on or stored by gussa.com.
• Food spots reps bring in — the spot's name and business address, the name, phone number or email of the person there a rep talked to, and the orders the spot pays GUSSA for. We use them to ship the spot a sample and to work with it directly.
• Region — a cookie (gussa_region) remembering which country's buy links to show you, set from your approximate location (country level, from our hosting provider) or from your own choice in the region menu (gussa_region_manual).
• Where you arrived from — if you reach us through a tracked link (our Instagram bio, the QR code on a bottle, a link in an email), a cookie (gussa_src) records that placement for 30 days so we can tell which of them work. It contains a placement name, not anything about you. A Campus Rep's link or QR code works the same way: it records that you arrived through that rep's link, so visits, Buy clicks and signups that follow can be counted toward the rep. The rep sees none of it, only totals the GUSSA team shares.
• Aggregate clicks — when you follow a Buy button we record the product, your region and the placement of the button. No account, no identifier, no personal data.
• Anonymous quiz results — the "Which GUSSA are you?" quiz records only a count per result.

Analytics

We use Vercel Web Analytics, which is cookieless and does not track you across sites. We do not use Google Analytics, Meta Pixel or any advertising tracker on gussa.com.

How we use it

• To send you the one email you asked for (a launch, an availability change, a reply to your inquiry). You can reply STOP to any of them.
• To show retailers real, aggregated demand: counts of store requests per store and city. Never names or emails.
• To understand which placements and regions lead people to buy, so we spend effort where it works.
• To review Campus Rep applications and reply to you, to see which schools and food spots applicants name, and, if you become a rep, to send your starter kit, credit you with the spots you bring in, count what your link brings in, and pay your commission.

Who else sees it

• Google Firebase stores form submissions and counters.
• The GUSSA team reads Campus Rep applications, including your school email and handles, to decide on them. They are not published.
• SendGrid (Twilio) delivers our emails.
• Vercel hosts the site and provides country-level location and analytics.
• Amazon: when you click through to buy, you are on Amazon, under Amazon's privacy policy. Amazon reports aggregate sales attributed to our links back to us; it never tells us who bought.
• Hustlin, the growth tooling we use, receives aggregate counts and de-identified conversion events (for example "a First Taste signup happened" or "a Campus Rep application came in from a school in Ohio"), never your email.
• Instagram: the feed on our homepage is loaded by our server from Meta's API. No Instagram script runs in your browser.

We do not sell personal information, and we do not share it with anyone else for their marketing.

Retention and your choices

We keep list emails until the thing you asked about has happened and the email has been sent, or until you ask us to remove you. Inquiry details are kept as long as we are talking to your business. Campus Rep applications are kept while the program runs, so we know who has applied (one application per school email) and can reach our reps, until you ask us to delete yours; deleting it also switches off any rep link. Records of commission earned and paid are kept as long as tax law requires, even after an application is deleted. Records used to confirm a school email, and the scrambled network counters, are deleted automatically within two days. Write to support@gussa.com to access, correct or delete anything we hold about you; we'll do it and confirm. Cookies can be cleared in your browser at any time; the site keeps working, it just forgets your region.

Children

gussa.com is not directed at children under 16 and we do not knowingly collect information from them.

Changes

If this policy changes materially we'll update the date at the top and, where we have your email for a list, tell you.