Privacy policy

Updated 11 November 2026

Gerdook helps customers choose and design packaging and coordinates work with suppliers and service providers. For questions about your information, contact support@gerdook.com.

Account and Google sign-in information

When you sign in with Google, Google shares your account identifier, name, email address and profile picture with our authentication service, Supabase. We use this information to create and authenticate your Gerdook account. Google sign-in does not give Gerdook access to your Gmail messages, contacts or Google Drive files. With email and password sign-in, Supabase handles your authentication credentials.

Information you provide

Depending on the features you use, Gerdook processes company and contact details, worksite and delivery locations, packaging requirements, designs, uploaded images, messages and order records. Partner applications may include service categories, capacity, evidence of work and payment details. We use these details to review applications, handle requests, coordinate jobs and manage payments.

AI assistance and photographs

When you use AI assistance, your question, a short recent conversation history and relevant design settings may be sent to OpenAI to answer your request. Images submitted for box recognition may also be sent to OpenAI. Avoid including unnecessary personal or confidential information in messages or photographs. Camera access is requested only when you choose to use it.

Who processes the information

Gerdook management uses submitted information to operate the service. Partners receive information needed for their assigned work; delivery work may require a recipient’s name and address. Our service providers support website hosting and storage, authentication (Supabase), transactional email (Resend) and AI assistance (OpenAI). Google processes Google sign-in under its own privacy policy. These services may process information in countries other than your own.

Storage and your choices

Authentication cookies keep you signed in, and browser storage supports features such as saved work. Account and submitted work records can remain stored after you sign out. Contact support@gerdook.com to request access, correction or deletion of your information. We may need to verify that the account belongs to you and retain records needed for existing orders, disputes or legal obligations.

You can disconnect Google sign-in through your Google Account’s third-party connections settings. Disconnecting Google does not itself delete records already held by Gerdook; contact us to request deletion.