Privacy Policy

1. Scope and responsible company

This Privacy Policy explains how Gamirax LLC ("Gamirax," "we," "us," or "our") handles personal information when you create an account, sign in, use a Gamirax workspace, collaborate with others, purchase or manage a subscription, contact us, or use features made available through a Gamirax deployment. Organization-specific agreements may provide additional terms.

2. Information we collect

Depending on the features you use, Gamirax may process account information such as your email address, profile information, organization or role information, and account status; workspace content such as projects, datasets, dashboards, reports, comments, saved insights, and configuration you provide; and service information such as request identifiers, timestamps, authentication events, device or network-derived security signals, and diagnostic logs.

Passwords are used for authentication and are stored only in protected hashed form by the authentication system. Verification codes, password-reset tokens, session cookies, and authentication secrets are not intended to appear in application logs.

3. Billing and payment information

When payment and subscription features are enabled, payments and subscription billing are processed by Stripe. Stripe collects and processes payment-card, bank-account, and other payment-method details through its hosted services. Gamirax does not receive or store full payment-card or bank-account credentials.

Gamirax may receive and retain limited billing information needed to operate the subscription, such as billing contact information, Stripe customer and subscription identifiers, selected plan and billing interval, subscription and invoice status, amounts and currency, transaction timestamps, and fraud, dispute, refund, or payment-failure information. Stripe's handling of information is governed by its Privacy Policy.

4. How we use information

We use information to provide and secure the service, authenticate users, enforce permissions and subscription entitlements, process and reconcile billing events, operate collaboration and analytics features, maintain data durability and backups, detect fraud or abuse, troubleshoot failures, provide support, communicate service, billing, or security notices, and satisfy accounting, tax, contractual, and legal obligations.

5. Workspace and organization data

Information in a workspace may be visible to other authorized members according to the permissions configured for that project or organization. Access depends on project membership and the permissions enforced by the service; being registered with Gamirax does not by itself grant access to another project. Your organization may separately determine how it uses and retains information it places in the service.

6. AI and third-party integrations

If an administrator enables an AI, database, email, storage, mapping, billing, or other third-party integration, Gamirax may transmit the information necessary to perform the requested feature to the configured provider. The provider, data-access mode, and amount of information shared depend on the deployment and feature settings. Do not enable an integration for data you are not authorized to send to that provider.

For Ask Gamirax, the selected AI data-access mode and the source's saved sharing limit control whether result data may be sent to the configured AI provider. Metadata-only mode can still share the selected schema and your question; connected-source features may also include relationships, dates, and prior context. Aggregated-results mode may share summary results. Raw-rows mode may share a limited number of verified returned rows. Aggregate results can still reveal individual values, especially in small groups. Questions, column names, and prior context may themselves contain personal or confidential information. An authorized workspace owner or administrator can change a source's sharing limit. These Ask Gamirax controls should not be assumed to govern every other AI-enabled feature.

Mapping features may send selected location information, such as cities, regions, countries, or postal codes, to the configured geocoding provider. Loading map tiles or other externally hosted resources may disclose your IP address and request information to that provider. Report delivery and collaboration emails use the configured email provider and may include recipient addresses and the report or message content requested for delivery. Only select locations, recipients, and content you are authorized to share.

7. Cookies and browser storage

Gamirax uses an authentication cookie and browser local storage for the purposes described below. Local storage is separate from cookies and is not automatically sent with each web request.

You can remove cookies and local storage through your browser's site-data settings. Removing or blocking the authentication cookie can sign you out or prevent sign-in. Removing local storage resets the preferences above. Clearing browser storage does not delete your account or server-held workspace content.

The preferences above are used to remember interface choices, not for advertising. Third-party pages and services you open, including enabled payment services, may use their own cookies or storage under their policies.

8. Sharing

Gamirax may share information with service providers that help operate, secure, support, or bill for the service; with authorized users in your organization or workspace; when required to comply with law or protect rights, safety, and security; or as part of a merger, financing, acquisition, reorganization, or sale of assets subject to appropriate safeguards. Gamirax does not sell account or workspace data for money.

9. Retention and deletion

Information may be retained while an account, workspace, or subscription is active and for a reasonable period afterward for security, backup, recovery, contractual, accounting, tax, fraud-prevention, dispute, and legal purposes. Billing records and security or audit records may be retained after account deletion when reasonably necessary for those purposes. Deleted information may remain in backup archives until those archives are removed under the applicable retention arrangements; account deletion does not immediately erase every backup copy. Organization-controlled accounts may be subject to the organization's retention requirements.

To enforce one trial per verified email and prevent repeated trial abuse, Gamirax retains a keyed, pseudonymous digest derived from the normalized email address after account deletion. The retained value is not the readable email address and is designed only to recognize whether the same normalized address previously claimed a trial. It is protected with a dedicated server-held secret and may be retained for as long as necessary to enforce trial eligibility, prevent fraud, and protect the service.

10. Security

Gamirax uses technical and organizational safeguards designed to protect information, including authentication controls, permission checks, secure-session practices, production configuration checks, provider-verified billing events, data durability controls, and operational logging. No system can guarantee absolute security.

11. Your choices and rights

Depending on your location and relationship with Gamirax, you may have rights to request access, correction, deletion, restriction, portability, or other actions concerning personal information. For an organization-managed account, your organization may be the appropriate first point of contact. Some information may be retained where permitted or required for security, financial recordkeeping, dispute resolution, or legal compliance.

12. Children

Gamirax is intended for professional and organizational use and is not directed to children under 13. Children under 13 should not create an account or submit personal information through the service. Contact us if you believe a child has provided personal information.

13. International processing

Service providers and infrastructure may process information in countries other than the country where you live. Where required, appropriate contractual or legal safeguards should be used for cross-border transfers.

14. Changes to this policy

We may update this policy as Gamirax changes. Material updates will be reflected by changing the date above and, when appropriate, providing additional notice.

15. Contact

Questions about this policy, privacy requests, or security concerns can be directed through the Gamirax Contact page.