GONDENA™

Privacy Policy

Effective date: October 4, 2026

This Privacy Policy explains how Gondena™ ("Gondena," "we," "us") collects, uses, shares, and protects your personal information when you use our website, platform, or related services (the "Services").

1. What We Collect

Account information

Name, email address, phone number, password (hashed)
For Pros: legal first/last name, date of birth, residential address, business name

Application information (Pros only)

Service categories you offer
State license numbers and licensing state
Insurance carrier and policy number (if provided)
Years of experience, business description
Background-check consent timestamp

Service-use information

Bookings, quotes, schedule, ratings, and reviews
Messages and photos you send to a Pro (or, if you are a Pro, to a Customer) through Gondena's in-app Messages feature. We store these so both of you can see the conversation history, and so we can review it if one of you reports a problem.
Whether you chose to share your phone number with a Pro for a given booking. Sharing is optional and off unless you tick the box.
IP address, browser, device information, login times

Text messages (SMS)

If you give us your mobile number and tick the box agreeing to text updates, Gondena sends you messages about your own bookings — confirmations, changes, cancellations and reminders. Agreeing is optional and is never required to book or to apply. We never send marketing texts. Message frequency varies. Message and data rates may apply. Reply STOP at any time to stop, or HELP for help, or turn texts off in your account settings.

We never sell your mobile number, and we never share it, or your agreement to receive texts, with anyone for their own marketing. Texts are delivered for us by Twilio, listed in Section 3.

If you choose to share your phone number with a Pro, any calls or texts between you and that Pro happen directly on your own phones and do not pass through Gondena.

Background-check information (Pros only)

When you apply as a Pro, we may use third-party consumer-reporting services or public-records databases to verify your identity, criminal history, and license status. We retain only the conclusion of that review (approved/rejected and basic notes) — we do not store full consumer reports.

2. How We Use Information

To provide, operate, and improve the Services
To verify Pro identity, qualifications, and trustworthiness
To match Customers with appropriate Pros
To send transactional emails (application updates, booking confirmations, password resets)
To detect, prevent, and respond to fraud, abuse, or violations of these Terms
To comply with legal obligations

3. Who We Share Information With

We share data only with the third-party processors required to operate the platform:

Processor	Purpose	Data shared
Supabase	Database + authentication	Account info, application data, profiles
Resend	Transactional email delivery	Email address, name, message content
Twilio	Text message (SMS) delivery, only if you agree to texts	Mobile number, message content
Stripe (when active)	Subscription billing	Name, email, billing address, last-4 of card
GoodHire	Background-check screening (Pro applications)	Legal name and email to initiate the check; the Pro enters SSN, date of birth, and address history directly into GoodHire's secure portal — Gondena does not collect or store that information (Pros only)

We do not sell your personal information. We do not share your data with advertisers.

We may disclose information if legally required (e.g., subpoena, court order) or to protect our rights, your safety, or the safety of others.

4. Your Rights

Depending on your jurisdiction, you may have the right to:

Access — request a copy of the personal data we hold about you
Correct — fix inaccurate or incomplete information
Delete — request deletion of your account and associated data, subject to legal retention requirements
Opt out — decline marketing communications (transactional emails are required for service operation)
Portability — receive your data in a machine-readable format

Residents of California, Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws have additional rights under those laws (e.g., the California Consumer Privacy Act / CPRA). To exercise any of these rights, email privacy@gondena.com.

5. Data Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), encrypted-at-rest databases (Supabase), bcrypt-hashed passwords, and least-privilege access controls. No system is perfectly secure — we do our best to keep your data safe but cannot guarantee absolute security.

6. Data Retention

Active accounts: data is retained as long as your account is active
Closed accounts: we retain core account records for up to 7 years for tax, fraud-prevention, and legal-compliance reasons; non-essential data is deleted on request
Application records (Pros): retained for at least 5 years from the application date for compliance purposes
Background-check conclusions: retained for 5 years

7. Cookies

Gondena uses essential cookies only, primarily for authentication and session management. We do not use advertising cookies or third-party tracking pixels.

8. Children's Privacy

The Services are not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we've collected data from a minor, contact us and we'll delete it promptly.

9. International Users

Gondena operates from the United States. If you use the Services from outside the U.S., your data will be transferred to and processed in the U.S. By using the Services, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced via email and posted here with a new effective date.

11. Contact Us

Questions or requests about your privacy? Email privacy@gondena.com. For all other inquiries: support@gondena.com.

Notice for California residents: You have additional rights under the California Consumer Privacy Act / CPRA, including the right to know what personal information we collect, the right to delete it, and the right to opt out of any "sale" or "sharing" of personal information. Gondena does not sell or share personal information for cross-context behavioral advertising.