Who we are
Guv Ltd (in formation) ("Guv", "we", "us") is the controller for the personal data described here. Our company number and registered office will appear here once the company is registered. We will register with the Information Commissioner's Office before we process any personal data beyond this website and the waitlist.
For anything about your data, email privacy@guv.dev. A person reads every message.
What this notice covers
This notice covers guv.dev, its documentation, and the waitlist. When sign-ups open, a fuller notice will cover Guv accounts, billing and support, and we will publish it here before then.
When you host an app on Guv, the personal data inside it (your own users' data) belongs to you. For that data we act as your processor, under a data processing agreement. See Trust and data location.
The waitlist
When you join the waitlist we store:
- your email address;
- your name and what you plan to run, only if you tell us;
- a record of your consent: the exact wording you agreed to, its version and when;
- a keyed, one-way hash of your IP address and your browser's user agent, to stop one connection from flooding the list. We cannot turn the hash back into your IP address.
We use it only to confirm your email address, keep your place in the queue and invite you when there is room. We do not send marketing. If you never confirm, we delete the unconfirmed entry within 30 days. To leave the waitlist and have your details deleted, email privacy@guv.dev. Our lawful basis is your consent, and you can withdraw it at any time without giving a reason.
To keep bots out without a third-party CAPTCHA, your browser solves a small puzzle from our server before it sends the form (it takes under a second), and the form has a hidden field that only bots fill in. Neither collects anything about you.
Everything we collect
| What | Why | Lawful basis | How long |
|---|---|---|---|
| Waitlist: your email address, and your name and what you plan to run if you give them. A record of your consent: the wording you agreed to, its version and the time. | To confirm your address, keep your place and invite you when there is room. | Consent | Until you create an account, ask us to remove you, or 12 months after public launch, whichever comes first. |
| Waitlist abuse checks: a keyed, one-way hash of your IP address and your browser's user agent, stored with your entry and with each attempt to join. | To limit how often one connection can join, and to spot automated sign-ups. | Legitimate interests | Attempts: 7 days. With your entry: as long as the entry. |
| Website requests: IP address, browser user agent, the page requested and the time. | To keep the site running and to spot and block attacks and abuse. | Legitimate interests | 14 days, then deleted. |
| Emails you send us, and our replies. | To answer you. | Legitimate interests | 2 years after the conversation ends. |
| Security reports you send us. | To investigate and fix the problem, and to credit you if you would like. | Legitimate interests | 3 years after the issue is closed. |
Where we rely on legitimate interests, our interest is running a secure, working website and answering the people who write to us. We have weighed it against your privacy and kept the data to the minimum. You can object at any time.
We do not make automated decisions about you that have legal or similarly significant effects.
Cookies and tracking
This site sets no cookies and runs no analytics, advertising or tracking scripts. Our fonts are served from our own server, so your browser makes no requests to anyone else while you read it.
If you choose light or dark mode, your browser remembers that choice in its own local storage. It never leaves your device and is not sent to us. As it only exists to provide a feature you asked for, it does not need consent under the Privacy and Electronic Communications Regulations.
Who else sees it
We never sell or rent personal data. We share it only with suppliers who process it for us, under contract:
- OVHcloud UK, which hosts this website and the waitlist in London.
- An email delivery provider, to send waitlist emails. We will name it here before we send the first invitation, and we prefer a UK or EU provider.
We may also disclose data if the law requires it, and we will tell you unless the law forbids us to.
Where it is stored
In the UK, in London. We do not transfer it outside the UK. If that ever changes, for example because of an email provider, we will update this notice first and use the safeguards UK law requires, such as the International Data Transfer Agreement.
Your rights
Under UK GDPR you have the right to:
- get a copy of the personal data we hold about you;
- have it corrected if it is wrong;
- have it deleted;
- restrict how we use it, or object to our using it;
- receive it in a portable format;
- withdraw your consent at any time, which does not affect anything we did before you withdrew it.
Email privacy@guv.dev. It is free, and we will reply within one month. We may ask you to confirm your identity first, usually by replying from the address we hold.
Complaints
Please tell us first and we will try to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
We will date every version at the top of this page. If we make a change that matters to people on the waitlist, we will email them before it takes effect. Last updated 23 October 2026.