Privacy Policy – Gaiasuite

At Gaiasuite, we are committed to protecting your personal data with the transparency and compliance standards expected from a global SaaS platform. This Privacy Policy is designed to be clear, transparent, and aligned with best‑practice standards for modern SaaS platforms, while being fully tailored to Gaiasuite.It explains how we collect, use, share, and safeguard personal information, and outlines your rights under the main international privacy regulations.Gaiasuite is fully GDPR compliant and follows all GDPR principles across our data processing activities.

1. Who We Are
The data controller responsible for processing your personal data is: Gaiasuite
Depending on your location, Gaiasuite may appoint local representatives or subprocessors to support compliance obligations.

2. Personal Data We Collect
We collect personal data in the following categories:

2.1 Data You Provide
Name and contact detailsCompany information and roleAccount registration informationCommunication preferencesInformation sent via forms (support, demos, integrations)

2.2 Data Collected Automatically
IP address and approximate locationDevice and browser informationUsage logs and interaction dataCookies and similar tracking technologies

2.3 Third‑Party Integration Data
When connecting Gaiasuite to third-party platforms (APIs, ERPs, marketplaces, etc.), we only process the data required to enable the integration.

3. How We Use Your Data
We process personal data to:Provide, maintain, and improve the Gaiasuite SaaS platformAuthenticate accounts and manage user access rightsDeliver technical and customer supportEnsure platform reliability, monitoring, and securityProvide analytics and performance insightsFulfill legal, regulatory, and contractual obligationsWe do not sell your personal data.We do not use your data for automated decision‑making without human involvement.

4. Legal Bases for Processing
We rely on the following legal grounds, depending on jurisdiction:Contractual necessity (to provide access to Gaiasuite)Legitimate interest (platform security, service improvement)Consent (e.g., newsletters)Legal obligation (compliance, audits)

5. Sharing and Disclosure
We only share your data with:Trusted subprocessors providing hosting, analytics, security, or infrastructure servicesThird‑party platforms you choose to integrate with Regulatory or governmental authorities, only when required by lawAll partners are bound by strict contractual data protection obligations.

6. International Data Transfers
Because Gaiasuite operates globally, your data may be processed outside your region.We ensure that transfers comply with international standards using:Standard Contractual Clauses (SCCs)Adequacy decisionsAdditional technical and organizational safeguardsData Transfer Impact Assessments when required

7. Data Retention
We retain personal data only for as long as necessary to:Provide our serviceComply with legal requirementsResolve disputesMaintain platform integritySpecific retention periods may vary depending on data type and local regulations.

8. Security
We implement strong security measures, including:Encrypted storage and secure transmissionMulti-factor authentication and access controlsContinuous infrastructure monitoringRegular audits and vulnerability assessments

9. Your Rights
Depending on your jurisdiction, you may have the right to:Access your dataCorrect inaccurate informationDelete your dataRestrict or object to processingRequest data portabilityWithdraw consentOpt out of marketingFile a complaint with a supervisory authorityTo exercise your rights: dpo@gaiasuite.com

10. Cookies
Gaiasuite uses cookies to:Enable essential platform functionsImprove performance and user experiencePerform analyticsA full Cookie Policy can be provided separately.

11. Changes to This Policy
We may update this Privacy Policy when needed. Any change will be published here, and the "Last Updated" date will be modified accordingly.

12. Contact If you have questions about this Privacy Policy or data processing: dpo@gaiasuite.com