GONDENA™

Privacy Policy

Effective date: April 25, 2026

This Privacy Policy explains how Gondena™ ("Gondena," "we," "us") collects, uses, shares, and protects your personal information when you use our website, platform, or related services (the "Services").

1. What We Collect

Account information

Name, email address, phone number, password (hashed)
For Pros: legal first/last name, date of birth, residential address, business name

Application information (Pros only)

Service categories you offer
State license numbers and licensing state
Insurance carrier and policy number (if provided)
Years of experience, business description
Background-check consent timestamp

Service-use information

Bookings, quotes, schedule, ratings, and reviews
Messages sent through the platform (when in-platform messaging is available)
IP address, browser, device information, login times

Background-check information (Pros only)

When you apply as a Pro, we may use third-party consumer-reporting services or public-records databases to verify your identity, criminal history, and license status. We retain only the conclusion of that review (approved/rejected and basic notes) — we do not store full consumer reports.

2. How We Use Information

To provide, operate, and improve the Services
To verify Pro identity, qualifications, and trustworthiness
To match Customers with appropriate Pros
To send transactional emails (application updates, booking confirmations, password resets)
To detect, prevent, and respond to fraud, abuse, or violations of these Terms
To comply with legal obligations

3. Who We Share Information With

We share data only with the third-party processors required to operate the platform:

Processor	Purpose	Data shared
Supabase	Database + authentication	Account info, application data, profiles
Resend	Transactional email delivery	Email address, name, message content
Stripe (when active)	Subscription billing	Name, email, billing address, last-4 of card
BeenVerified or equivalent	Background-check lookups (manual review only)	Legal name, state, city (Pros only)

We do not sell your personal information. We do not share your data with advertisers.

We may disclose information if legally required (e.g., subpoena, court order) or to protect our rights, your safety, or the safety of others.

4. Your Rights

Depending on your jurisdiction, you may have the right to:

Access — request a copy of the personal data we hold about you
Correct — fix inaccurate or incomplete information
Delete — request deletion of your account and associated data, subject to legal retention requirements
Opt out — decline marketing communications (transactional emails are required for service operation)
Portability — receive your data in a machine-readable format

Residents of California, Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws have additional rights under those laws (e.g., the California Consumer Privacy Act / CPRA). To exercise any of these rights, email privacy@gondena.com.

5. Data Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), encrypted-at-rest databases (Supabase), bcrypt-hashed passwords, and least-privilege access controls. No system is perfectly secure — we do our best to keep your data safe but cannot guarantee absolute security.

6. Data Retention

Active accounts: data is retained as long as your account is active
Closed accounts: we retain core account records for up to 7 years for tax, fraud-prevention, and legal-compliance reasons; non-essential data is deleted on request
Application records (Pros): retained for at least 5 years from the application date for compliance purposes
Background-check conclusions: retained for 5 years

7. Cookies

Gondena uses essential cookies only, primarily for authentication and session management. We do not use advertising cookies or third-party tracking pixels.

8. Children's Privacy

The Services are not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we've collected data from a minor, contact us and we'll delete it promptly.

9. International Users

Gondena operates from the United States. If you use the Services from outside the U.S., your data will be transferred to and processed in the U.S. By using the Services, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced via email and posted here with a new effective date.

11. Contact Us

Questions or requests about your privacy? Email privacy@gondena.com. For all other inquiries: support@gondena.com.

Notice for California residents: You have additional rights under the California Consumer Privacy Act / CPRA, including the right to know what personal information we collect, the right to delete it, and the right to opt out of any "sale" or "sharing" of personal information. Gondena does not sell or share personal information for cross-context behavioral advertising.