PRIVACY POLICY

Last Updated: 11/27/2025 Effective Date: 11/27/2025

1. Introduction

Gantry LLC ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you:

Visit our website at https://trygantry.com (the "Site")
Use our gantry software-as-a-service platform (the "Service")
Interact with us through email, social media, or other channels

Please read this Privacy Policy carefully. By accessing or using our Site or Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, do not use our Site or Service.

This Privacy Policy applies to information we collect:

On this Site
Through the Service
In email, text, and other electronic messages between you and the Site or Service
When you interact with our advertising and applications on third-party websites and services

It does not apply to information collected by third parties, including through any application or content that may link to or be accessible from the Site or Service.

2. Information We Collect

We collect several types of information from and about users of our Site and Service, including:

2.1 Personal Information You Provide

When you register for, access, or use our Service, we may collect:

Account Information:

Full name
Email address
Company name
Job title
Phone number
Billing address
Payment information (processed by Stripe)

Profile Information:

Username and password
Profile photo (optional)
Professional information
Preferences and settings

Communications:

Support requests and correspondence
Survey responses
Feedback and testimonials

2.2 Information Collected Automatically

When you access or use our Site or Service, we automatically collect:

Device and Usage Information:

IP address
Browser type and version
Operating system
Device identifiers
Pages visited and features used
Time and date of visits
Referring/exit pages
Clickstream data

Location Information:

General geographic location (country, state/province, city) based on IP address

Cookies and Similar Technologies: We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activities. See Section 8 (Cookies and Tracking Technologies) for details.

2.3 Information from Third Parties

We may receive information about you from third parties, including:

Service Providers:

Stripe for payment processing
Google Analytics for usage analytics
Kit for email communications

Social Media: If you connect your social media account (e.g., LinkedIn, Google), we may receive:

Profile information (name, email, profile picture)
Public profile data
Friend/connection lists (with your permission)

2.4 Sensitive Personal Information

We do not collect sensitive personal information. Please keep in mind, however, that tasks, reminders, and appointments may indirectly include personal or sensitive information.

Your Rights: You have the right to limit our use and disclosure of your sensitive personal information. See Section 6 (Your Privacy Rights).

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 To Provide and Maintain the Service

Create and manage your account
Process transactions and send transaction notifications
Provide customer support and respond to inquiries
Perform technical operations (hosting, security, backups)
Troubleshoot and fix technical issues

3.2 To Improve and Develop the Service

Analyze usage patterns and trends
Test new features and functionality
Conduct research and development
Improve user experience and interface design

3.3 To Communicate With You

Send service-related announcements and updates
Respond to your comments, questions, and requests
Send marketing communications (with your consent)
Notify you about changes to our policies or terms
Conduct surveys and collect feedback

3.4 For Security and Fraud Prevention

Detect, investigate, and prevent fraudulent transactions
Protect against security threats and abuse
Monitor and analyze security incidents
Enforce our Terms of Service

3.5 For Legal Compliance

Comply with applicable laws and regulations
Respond to legal requests (subpoenas, court orders)
Protect our rights, privacy, safety, or property
Resolve disputes and enforce agreements

3.6 With Your Consent

For any other purpose disclosed to you at the time we collect your information
With your explicit consent for specific uses

3.7 Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), UK, or Switzerland, our legal basis for collecting and using your personal information depends on the specific context:

Contractual Necessity: Processing is necessary to perform our contract with you (e.g., providing the Service)
Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, improving the Service, marketing to existing customers)
Legal Obligation: Processing is necessary to comply with applicable laws
Consent: You have given explicit consent for specific processing activities

You have the right to withdraw consent at any time. See Section 6 (Your Privacy Rights).

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes without your explicit consent. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party vendors who perform services on our behalf:

Service Provider	Purpose	Data Shared
DigitalOcean	Infrastructure and hosting	Account data, usage data, device data
Stripe	Payment processing	Billing information, transaction data
Kit	Transactional and marketing emails	Email address, name, communication preferences
Google Analytics	Usage analytics	Device data, usage data, IP address

These service providers are contractually obligated to:

Use your information only for the specified purpose
Implement appropriate security measures
Comply with applicable data protection laws

4.2 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Site before your information is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

Court orders or subpoenas
Legal process or government requests
Requests from law enforcement or regulatory authorities
Legal claims or disputes

We may also disclose information when we believe, in good faith, that disclosure is necessary to:

Protect our rights, property, or safety, or that of our users or the public
Detect, prevent, or address fraud, security, or technical issues
Enforce our Terms of Service

4.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

4.5 Aggregated and De-identified Information

We may share aggregated or de-identified information that cannot reasonably be used to identify you. For example, we may share statistics about Service usage with business partners or the public.

4.6 Data Sales

We do not sell your personal information to third parties.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods

Data Category	Retention Period	Reason
Account information	Duration of account + 5 years	Provide Service, legal compliance
Transaction records	7 years after transaction	Financial record-keeping, tax compliance
Support communications	5 years after closure	Customer service improvement
Marketing data	Until you opt out + 6 months	Marketing communications, compliance
Usage logs	2 years	Security, analytics, legal compliance

Deletion and Anonymization

When we no longer need your personal information, we will:

Securely delete it from our systems
Anonymize it so it can no longer identify you
Archive it in a secure, restricted environment (if required by law)

You can request deletion of your personal information at any time. See Section 6.4 (Right to Delete).

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information.

6.1 Rights for EEA, UK, and Swiss Residents (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights:

Right to Access:

Request a copy of the personal information we hold about you
Receive information about how we process your data

Right to Rectification:

Request correction of inaccurate or incomplete personal information

Right to Erasure ("Right to Be Forgotten"):

Request deletion of your personal information in certain circumstances

Right to Restrict Processing:

Request that we limit how we use your personal information

Right to Data Portability:

Request a copy of your personal information in a structured, machine-readable format
Request that we transfer your information to another service provider

Right to Object:

Object to processing based on legitimate interests
Object to direct marketing (including profiling)

Right to Withdraw Consent:

Withdraw consent for processing activities at any time (does not affect lawfulness of prior processing)

Right to Lodge a Complaint:

File a complaint with your local data protection authority

To exercise these rights, contact us at privacy@trygantry.com.

6.2 Rights for California Residents (CCPA)

If you are a California resident, you have the following rights:

Right to Know:

Request disclosure of the categories and specific pieces of personal information we have collected
Request information about the categories of sources, business purposes, and third parties with whom we share information

Right to Delete:

Request deletion of your personal information (subject to certain exceptions)

Right to Opt-Out of Sales:

Opt out of the sale of your personal information (if we sell data)

Right to Non-Discrimination:

We will not discriminate against you for exercising your CCPA rights

CCPA Request Process:

Submit a request via privacy@trygantry.com
We will verify your identity (may request additional information)
We will respond within 45 days (may extend by 45 days if necessary)

Authorized Agent: You may designate an authorized agent to submit requests on your behalf. The agent must provide:

Written authorization signed by you
Proof of their identity
Verification of your identity

6.3 Rights for Texas Residents (TDPSA)

If you are a Texas resident, you have the following rights:

Right to Know:

Confirm whether we are processing your personal data
Access your personal data

Right to Correct:

Correct inaccuracies in your personal data

Right to Delete:

Delete personal data you provided to us

Right to Data Portability:

Obtain a copy of your personal data in a portable format

Right to Opt-Out:

Opt out of:

Targeted advertising
Sale of personal data
Profiling in furtherance of automated decisions with legal or significant effects

Universal Opt-Out Mechanism: We honor Global Privacy Control (GPC) browser signals. Enable GPC in your browser to automatically opt out.

TDPSA Request Process:

Submit a request via privacy@trygantry.com
We will respond within 45 days (may extend by 15 days if necessary)
If we deny your request, you may appeal within 10 days

Appeal Process:

Submit an appeal via privacy@trygantry.com
We will respond within 60 days
If we deny your appeal, you may contact the Texas Attorney General

6.4 Rights for Residents of Other U.S. States

Residents of Virginia, Colorado, Connecticut, and Utah have similar rights under their respective state privacy laws. Contact us at privacy@trygantry.com to exercise your rights.

7. International Data Transfers

Gantry LLC is based in the United States. If you access our Service from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where we or our service providers operate.

7.1 For EEA, UK, and Swiss Residents

If you are located in the European Economic Area, United Kingdom, or Switzerland, we transfer your personal information to countries outside the EEA/UK/Switzerland only when:

Adequate Protections Are in Place:

The destination country has been deemed to provide an adequate level of protection by the European Commission or UK government
We have implemented Standard Contractual Clauses (SCCs) approved by the European Commission
We rely on other approved transfer mechanisms (e.g., Binding Corporate Rules, certifications)

Your Rights: You may request a copy of the safeguards we have implemented for international transfers by contacting privacy@trygantry.com.

7.2 Privacy Shield (No Longer Valid)

Note: The EU-U.S. and Swiss-U.S. Privacy Shield frameworks were invalidated by the European Court of Justice in July 2020. We no longer rely on Privacy Shield for data transfers.

8. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activities.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to recognize your device and remember information about your visit.

8.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for the Service to function (e.g., authentication, security)	Session or persistent
Analytics Cookies	Collect information about how you use the Service (e.g., Google Analytics)	Persistent (up to 2 years)
Functional Cookies	Remember your preferences and settings	Persistent (up to 1 year)

8.3 Third-Party Cookies

We allow third parties to place cookies on your device for analytics and advertising purposes:

Google Analytics: Tracks usage patterns (Learn more)

8.4 Your Cookie Choices

Browser Settings: Most browsers allow you to:

Block all cookies
Block third-party cookies
Delete cookies after each session

Note: Disabling cookies may affect the functionality of the Service.

Opt-Out Tools:

Google Analytics: Google Analytics Opt-Out Browser Add-on
Interest-Based Advertising: Digital Advertising Alliance (DAA) Opt-Out or Network Advertising Initiative (NAI) Opt-Out

Do Not Track (DNT): Some browsers offer a "Do Not Track" (DNT) signal. We do not currently respond to DNT signals, but we honor Global Privacy Control (GPC) signals for TDPSA and other state privacy law compliance.

Global Privacy Control (GPC): If you enable GPC in your browser, we will honor it as an opt-out of:

Sale of personal information
Targeted advertising
Profiling for automated decisions

9. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, alteration, and disclosure.

9.1 Security Measures

Technical Safeguards:

Encryption of data in transit (TLS/SSL)
Encryption of data at rest (AES-256)
Secure authentication (password hashing, multi-factor authentication)
Regular security assessments and penetration testing
Intrusion detection and prevention systems

Administrative Safeguards:

Access controls (least privilege principle)
Employee training on data security and privacy
Background checks for employees with access to sensitive data
Incident response plan

Physical Safeguards:

Secure data centers with restricted access
Environmental controls (fire suppression, power backup)

9.2 Limitations of Security

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for:

Keeping your account credentials confidential
Notifying us immediately of any unauthorized access
Using strong, unique passwords

9.3 Data Breach Notification

In the event of a data breach that compromises your personal information, we will:

Notify you within the timeframe required by applicable law (e.g., 72 hours under GDPR)
Describe the nature of the breach and the information affected
Provide steps you can take to protect yourself
Report the breach to relevant authorities as required by law

10. Children's Privacy

Our Service is not directed to children under the age of 18. We do not knowingly collect personal information from children under 18.

If you are under 18, do not:

Register for an account
Provide any personal information through the Service
Use any features that require personal information

If we learn that we have collected personal information from a child under without parental consent, we will delete that information as quickly as possible. If you believe we have collected information from a child under , contact us immediately at privacy@trygantry.com.

11. Third-Party Links and Services

Our Site and Service may contain links to third-party websites, applications, and services that are not operated by us. This Privacy Policy does not apply to third-party sites or services.

We are not responsible for:

The privacy practices of third-party sites
The content of third-party sites
How third parties collect, use, or share your information

Before providing personal information to third parties, review their privacy policies. We encourage you to be aware when you leave our Site or Service and to read the privacy policies of every website you visit.

When you connect third-party services to your account, those services may access certain information in accordance with their own privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

How We Notify You:

Material Changes: We will notify you via email (to the address associated with your account) and/or a prominent notice on our Site at least 30 days before the changes take effect
Non-Material Changes: We will update the "Last Updated" date at the top of this Privacy Policy

Your Continued Use: Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Privacy Policy, you must stop using the Service and close your account.

Review Regularly: We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, contact us:

Gantry LLC 790 N Milwaukee St Ste 302 #666218, Milwaukee, WI 53202, USA

Email: privacy@trygantry.com

Response Time: We will respond to your inquiry within 10 business days.

14. California "Shine the Light" Law

California Civil Code Section 1798.83 permits California residents to request certain information about our disclosure of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes without your consent.

15. Nevada Residents

Nevada law allows Nevada residents to opt out of the sale of certain types of personal information. We do not sell personal information as defined under Nevada law. If you are a Nevada resident and have questions, contact us at privacy@trygantry.com.