Privacy Policy

GERBER.ai (“GERBER.ai”, “we”, “us”) runs the GERBER.ai market intelligence service at gerber.floot.app, the GERBER.ai mobile app, and the reports, maps and AI tools inside them (together, the “Service”).

This policy explains what personal information we collect when you use the Service, why, who we share it with, and the choices you have. The demographic, income and housing data you see in the Service is about places — states, counties, cities, ZIP codes and census tracts — not about you or any other individual person.

Information you give us

• Account details: your name, email address and password when you sign up with email. We store your password only as a one-way hash, never in readable form.
• Google sign-in: if you choose “Continue with Google”, Google shares your name, email address and profile picture with us. We do not receive your Google password.
• Profile: a display name and a profile photo, if you add one.
• What you create: saved collections and folders, PDF reports you save, and your Ask GERBER®.ai chats.
• Messages to us: anything you include when you email us.

Payment information

Pro subscriptions are paid through Stripe. Your card number and security code go directly to Stripe and never reach our servers. We keep the plan you chose, your subscription status and renewal dates, and the customer and subscription reference numbers Stripe gives us.

Sign-in and security

• Login codes: when we email you a 6-digit code, we keep only a one-way hash of it, plus when it was sent and how many tries were used.
• Trusted browsers: a random token saved in a cookie on that browser. We store a hashed copy, a label such as “Chrome on Mac”, and when it was last used and expires.
• Signed-in devices: for each signed-in session, the browser and device type your browser reports, when it started and when it was last active. You can see this list in Account › Security.
• Email confirmed: the date you first confirmed your email address with a code.
• Rate limits: when you use AI or Google Trends features, we log your IP address with the time, to limit heavy use from one connection.

Credits and referrals

• Credits: the packs you buy, your balance, and a record of each paid action: what it was, its credit cost and when. Card details still go only to Stripe.
• Referrals: your referral code, which accounts signed up through it, and whether each earned a reward. On your Refer and earn page, each friend appears only as a masked email address with its status.
• Referral link visits: if you open someone’s referral link, we save their code in a cookie on your browser for 90 days.

Information collected automatically

• Sign-in session: a cookie that keeps you signed in (see section 6).
• Technical logs: like most websites, our hosting provider records basic request information such as IP address, browser type, pages requested, time and error messages. We use it to keep the Service running and secure.
• Display preferences: your light or dark mode and colour palette, stored in your own browser.

What we do not collect

We do not use advertising trackers or third-party analytics, we do not ask for your precise location, and we do not ask for sensitive information such as health, financial account or government ID numbers. Please do not put that kind of information into AI questions or notes.

• To create and run your account, sign you in and keep it secure.
• To provide the Service: show data, build reports and PDFs, save your collections and answer AI questions.
• To process payments, manage your plan and send receipts and billing notices.
• To reply to your messages and give support.
• To fix problems, prevent abuse and fraud, and improve how the Service works.
• To email you login codes and check that only you use your account.
• To run credits, apply spending and purchase limits, and spot refund, chargeback or referral abuse.
• To track referrals and pay referral rewards.
• To meet legal, tax and accounting obligations and enforce our Terms of Use.

We send service emails, for example login codes, password resets, billing notices and low-credit warnings. We do not send marketing email without your consent.

When you ask Ask GERBER®.ai a question, the text of your question, the earlier messages in that chat, the public place data needed to answer it and — when you ask from the chat button on a page — a short summary of that page are sent to an AI model provider, through our hosting platform’s AI service, to generate the answer.

Chats save to your account automatically after each answer (the newest 60 messages of each chat), and you can delete them from your chat list at any time. We do not use your chats to train AI models. Answers are generated automatically and can be wrong; see our Data Disclaimer.

We do not sell your personal information, and we do not share it for targeted (cross-context behavioural) advertising. We share it only as follows:

These providers may use the information only to provide their service to us. We may also share information if the law requires it, to protect the rights, safety or property of our users, the public or GERBER.ai, or as part of a merger, sale or transfer of our business, in which case this policy will continue to apply to your information.

We use only cookies the Service needs to work, so there is no cookie banner. We do not use advertising cookies or cross-site tracking.

Your browser also keeps your display preferences (light or dark mode and palette) on your device. Clearing your cookies signs you out, forgets trusted browsers and resets those preferences. Stripe may set its own cookies on its payment pages to prevent fraud, under Stripe’s privacy policy.

• Account, profile and saved work: while your account is open. When you close it in Account › Close account, we delete right away your name, email, password, Google link, sessions, trusted browsers, login codes, saved reports, watched places, Target analyses, Ask GERBER®.ai chats and referral link.
• Payment, credit and usage records: kept after closing, without your name or email, for as long as tax and accounting law requires (usually up to 7 years) and to handle payment disputes.
• Sign-in records: login codes expire after 10 minutes and trusted browsers after 30 days.
• Technical logs: for a short period, as set by our hosting provider, unless needed to investigate a security problem.
• Emails with us: for as long as needed to help you and keep a record of the request.

You can update your name, photo and password on your account page at any time. You can also:

• see your signed-in devices and trusted browsers, and sign out every other device, in Account › Security;
• close your account yourself in Account › Close account, or ask us to do it. Closing is permanent and unused credits are lost.

Depending on where you live, you may also have the right to:

• know what personal information we hold about you and get a copy of it;
• correct information that is wrong;
• ask us to delete your information and close your account;
• opt out of sale, targeted advertising or profiling (we do none of these);
• appeal if we decline your request.

These rights come from laws such as the California Consumer Privacy Act and the Colorado Privacy Act and similar state laws, and from the GDPR for people in Europe and the UK. We honour these requests for every user, wherever you live.

To make a request, email mark@gerber.ai from the email address on your account. We may ask you to confirm your identity before acting. We respond within 45 days. You can use an authorised agent; we will ask for proof that they act for you. We will not treat you differently for using your rights. If we decline a request, reply to our answer to appeal and we will review it again.

We use encrypted connections (HTTPS), hashed passwords, access controls on administrative tools and private storage for saved reports. No system is perfectly secure, so we cannot guarantee that information will never be accessed without permission. If a breach affects your personal information, we will tell you as the law requires.

The Service is a business tool for adults and is not meant for anyone under 18. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, email mark@gerber.ai and we will delete it.

GERBER.ai is based in the United States, and our providers store and process information in the United States. If you use the Service from outside the US, your information will be transferred to and handled in the US.

We may update this policy as the Service changes. We will change the “Last updated” date at the top and, for important changes, tell you by email or in the app before they take effect.

Questions or requests about privacy: mark@gerber.ai. You can also see all ways to reach us on the Contact Us page.