Privacy policy

1. What we collect

When you reach out to Gezora, browse our site, or work with us as a customer, we collect the information needed to respond to you and deliver the service you have asked for.

• ›Contact details you give us directly, such as your name, email address, phone number, and company.
• ›Business data processed through the agents we deploy for you, scoped strictly to the workflow you have asked us to automate.
• ›Technical and usage information needed to operate, secure, and support the service, such as log and diagnostic data.

2. How we use your data

We use the information we collect to deliver and support the services you have engaged us for, to communicate with you about your deployment, and to keep our systems secure and reliable.

Your data is not used to train models without your explicit written approval. If a project ever calls for that, we ask first.

3. How we protect your data

Gezora encrypts data at every stage, in transit and at rest, and keeps every secret out of the codebase. Administrative access requires multi factor authentication, follows least privilege, and is logged and reviewed periodically.

• ›Transit encryption uses TLS 1.2 or higher for every connection.
• ›Data at rest is encrypted with industry standard algorithms.
• ›Secrets such as API keys and credentials are kept in managed secret stores, never in source code.
• ›Our systems run on reputable cloud providers with network isolation, hardened configuration, automated patching, and continuous monitoring.

4. Data processing agreements and sub processors

Our controls align with the SOC 2 Trust Services Criteria and support GDPR and HIPAA requirements. A data processing addendum is available on request for customers who need one, and we will share our current sub processor list on request as well.

Teams with strict data residency needs can request a private hosting environment they control directly. Customers operating in the European Union or the United Kingdom can read more about how this applies to them on our GDPR page.

5. Your choices

You can ask what information we hold about you, request corrections, or ask us to delete it, subject to what we need to keep to deliver an active engagement or meet a legal obligation.

For a security question, or to report a vulnerability under responsible disclosure, you can also reach us directly.