Where your data goes, and where it doesn’t.
Where your data lives
Guardella runs entirely on Cloudflare: the app on Workers, data in a D1 database, thumbnails and exports in private R2 storage that is served only after a workspace check. No other hosting provider holds your data.
Access tokens are encrypted
The tokens Instagram and Facebook give us are encrypted with AES-GCM before they are stored, decrypted only in the one part of the code that talks to Meta, and never sent to a browser or written to a log.
AI that keeps nothing
Comments are judged by decision models on Cloudflare Workers AI with zero data retention. The model stores nothing, no other AI provider sees the text, and it is never used for training.
What we never log
Comment text and usernames never go into logs, metrics or product analytics. Those record ids and outcomes only.
Your settings decide every action
The model only judges; code maps its answer to the action you chose. Every request is limited to your own workspace. Delete is off until you turn it on, waits 24 hours, and checks the comment again before it runs.
Payments
Card details go straight to Stripe. We never see or store a full card number.
Report a weakness
Draft — legal reviewEmail hello@guardella.com with the steps to reproduce it. Please don’t access other people’s data, slow the service down, or make it public before it is fixed.
We reply within [3 working days — confirm] and will not take legal action over good-faith research that follows these rules.