Privacy Policy

We process data provided by users, organizations and end customers, including identification, contact details, credentials, organization links, services, appointments, forms, documents, commercial history and communication preferences.

We may also process technical usage data, authentication records, logs, security events, integration tokens and information required to operate notifications, support and connected resources.

We use data to authenticate users, provide online scheduling, CRM, forms, documents, notifications, support, billing, security, auditing, product improvement and legal compliance.

When an organization uses Gendaize to serve its customers, that organization may define part of the processing purposes. In those cases, Gendaize acts as a technology provider according to the applicable agreement.

We share data only when necessary to deliver the service, such as with hosting, database, messaging, storage, email, maps, AI, payment, technical support providers or when required by law.

We do not sell personal data. Restricted parameters, integration secrets and credentials are treated as protected technical information and must not be exposed in public interfaces.

We apply access controls, authentication, organization segregation and infrastructure practices to reduce unauthorized access risks.

We keep data for as long as needed to provide the service, comply with legal obligations, resolve disputes, prevent fraud and keep operational records, subject to valid deletion requests when applicable.

Data subjects may request confirmation, access, correction, portability, review, sharing information or deletion according to applicable law.

Requests may require identity verification and, when data is controlled by a customer organization, we may direct the request to that organization.