Privacy Policy
This Privacy Policy explains how Gandar Technologies LLC (“Gandar,” “we,” “us,” or “our”) collects, uses, and discloses information when you visit our websites, contact us, or use any product or service we provide (collectively, the “Services”). By using the Services, you agree to this Policy.
Healthcare customers
Where we process Protected Health Information (PHI) on behalf of a covered entity, we do so as a HIPAA business associate under a written Business Associate Agreement. For HIPAA-related inquiries, contact legal@gandartech.com.
1. Information we collect
1.1 Information you provide
We collect information you submit to us, including:
- Account and contact details (name, business email, phone, organization).
- Billing and tax information (processed by a third-party payment processor; we do not store full card numbers).
- Content you upload, submit, or generate through the Services.
- Correspondence with us, including support tickets, feedback, and survey responses.
1.2 Information collected automatically
When you use the Services, we automatically collect technical and usage information, such as device identifiers, browser type, IP address, approximate location, pages and features accessed, click events, referring URLs, timestamps, and diagnostic data. We use cookies and similar technologies for session management, security, analytics, and product improvement.
1.3 Information from third parties
We may receive information about you from our service providers (for example, payment, identity verification, and analytics providers), from publicly available sources, and from accounts you link to the Services.
2. How we use information
We use information to:
- Provide, operate, maintain, and improve the Services.
- Process transactions and manage subscriptions and accounts.
- Develop new features, conduct research, and improve our models and product, including by using de-identified or aggregated data.
- Communicate with you about your account, security, updates, and (where permitted) marketing.
- Prevent fraud and abuse, enforce our agreements, and protect the rights, property, and safety of Gandar, our customers, and others.
- Comply with applicable laws, regulations, audits, court orders, and lawful requests.
3. How we share information
We do not sell personal information. We share information only as described below:
- Service providers and processors that perform functions on our behalf (such as cloud hosting, infrastructure, customer support, analytics, communications, and payments), under written contracts requiring appropriate confidentiality and security.
- Authorized users within your organization or account (for example, administrators may access content created in their tenant).
- Legal and safety disclosures: when required by law, subpoena, court order, or to investigate or protect against fraud, violations of our terms, or threats to safety.
- Corporate transactions: in connection with a financing, merger, acquisition, reorganization, sale of assets, or bankruptcy, subject to standard confidentiality protections.
- With your direction: where you instruct us to share information (for example, transmitting documents you author through the Services to a recipient you designate).
4. Aggregated and de-identified data
We may create aggregated, de-identified, or anonymized information that no longer reasonably identifies any individual. We may use and share this information for any lawful purpose, including benchmarking, research, analytics, model training, and product improvement, and we retain it without restriction.
5. Security
We maintain administrative, technical, and physical safeguards designed to protect information, including encryption in transit and at rest, role-based access controls, network and endpoint monitoring, periodic assessments, and personnel training. No system is impenetrable; we cannot guarantee absolute security and you use the Services at your own risk.
6. Data retention
We retain information for as long as needed to provide the Services, comply with legal obligations (including healthcare, tax, and recordkeeping rules), resolve disputes, and enforce our agreements. We may also retain de-identified or aggregated information indefinitely.
7. Your choices and rights
Depending on where you live, you may have the right to access, correct, delete, port, or restrict our processing of your personal information, or to object to certain processing. You can exercise these rights by emailing legal@gandartech.com from the address associated with your account. We will respond as required by applicable law and may need to verify your identity. Certain requests may be limited where we are permitted or required by law to retain information, or where doing so would adversely affect the rights and freedoms of others.
For PHI processed on behalf of a covered entity, please direct rights requests to that covered entity, which controls the underlying record.
8. Cookies and analytics
We and our service providers use cookies, pixels, local storage, and similar technologies to operate the Services, remember your preferences, analyze usage, and improve performance. You can control cookies through your browser settings; disabling cookies may affect functionality.
9. International users
The Services are operated in the United States. If you access the Services from outside the United States, you understand that your information may be transferred to, processed in, and stored in the United States and other jurisdictions where data protection laws may differ from those of your country. By using the Services you consent to those transfers.
10. Children
The Services are not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will take appropriate steps.
11. Changes to this Policy
We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, where required by law or material to your rights, provide additional notice (such as by email or in-product). Continued use of the Services after an update constitutes acceptance of the revised Policy.
12. Contact
Questions about this Policy or our privacy practices? Reach us at:
Gandar Technologies LLC
Privacy, HIPAA & compliance: legal@gandartech.com