Privacy Policy

At Pando, we believe great software should be transparent about how it works - and that includes how we handle your information. This Privacy Policy explains what data we collect, why we collect it, and how we keep it safe. We've written this in plain language because legal jargon isn't a superpower anyone asked for.

We keep our data collection minimal and purposeful. When you reach out to us through our contact form, we collect:

• Name - So we know who we're talking to
• Email address - So we can respond to your inquiry
• Company name (optional) - To understand your business context
• Message content - The details of your inquiry or project needs
• AI policy generator answers (only if you download a policy) - Your organization's size, industry, regions, the other choices you made, and anything you typed in the "anything else" box, so we understand who uses the tool

We don't collect sensitive personal information, and we don't purchase data from third parties.

Your information is used exclusively for:

• Responding to your inquiries and providing requested information
• Communicating about projects and services you've expressed interest in
• Sending follow-up communications related to your inquiry (we won't add you to marketing lists without your consent)
• If you download a policy from our AI policy generator, a person at Pando may send you one personal email about your rollout. We never add you to newsletters or mailing lists
• Improving our services based on aggregated, anonymized feedback patterns

Security is in our DNA — it's what we do for our clients, and it's how we handle your data:

• All data is encrypted in transit (TLS/SSL) and at rest
• We use AWS infrastructure with enterprise-grade security controls, and Supabase (hosted on AWS in the US) for lead records
• Access to personal data is restricted to team members who need it to respond to your inquiry
• We regularly review and update our security practices

We use a minimal set of trusted third-party services:

• AWS (Cloud Infrastructure) - For hosting and data storage, with data centers in the United States
• Analytics - If we use analytics, we configure them to respect your privacy and minimize data collection
• Email Service - For sending responses to your inquiries

We do not sell, rent, or share your personal information with third parties for marketing purposes.

We keep cookies minimal:

• Essential cookies for basic website functionality
• Analytics cookies (if applicable) configured with privacy-preserving settings
• No third-party advertising or tracking cookies
• No cross-site tracking

You have the right to:

• Access - Request a copy of any personal data we hold about you
• Correction - Ask us to update or correct inaccurate information
• Deletion - Request that we delete your personal data
• Portability - Request your data in a common, machine-readable format
• Objection - Object to our processing of your personal data

To exercise any of these rights, email us at hello@pando.codes. We'll respond within 30 days.

We may update this Privacy Policy from time to time. When we do, we'll update the "Last Updated" date at the top of this page. For significant changes, we'll make reasonable efforts to notify affected users directly.

Questions about our privacy practices? We're happy to explain anything in more detail. Reach us at hello@pando.codes.