GANA's legal terms, clear and all in one place

With a single account you access the GANA products your company has active. You are responsible for keeping your account details accurate and your credentials secure; we recommend turning on two-step verification. Anything done from your account is deemed done by you or your organization. If you detect unauthorized use:

• If you still have access, change your password in your GANA account → Security and sign out of your other sessions.
• If you lost access, use "Forgot your password?" on the sign-in screen.
• If you still can't regain control, write to us at soporte@gana.cloud.

• Where and in which currency: plans and add-ons are paid from your GANA account, in Billing, monthly or yearly, in US dollars (USD) or quetzales (GTQ). Before any charge you will see the plan, the period and the price you accept.
• Free trial: some plans include one. Nothing is charged during the trial. When it ends, unless you canceled, the chosen plan is charged.
• Renewal: the subscription renews at the start of each period until you cancel it.
• Invoice and processor: you receive an invoice for each successful payment. Payments are processed by a payment gateway; GANA does not receive your card details.

• Data controller: GANA Cloud (hereinafter "GANA").
• Scope: this policy covers the GANA account (cuenta.gana.cloud), GANA CRM (crm.gana.cloud), its add-ons and the website www.gana.cloud.

• In your GANA account:
  • first name, last name and email;
  • if you choose to add them: middle name, country, phone, profile photo, job title, language and time zone;
  • your account's security activity (sign-ins and sign-outs, password and two-step verification changes, use of recovery codes), with the browser and part of the IP address, to show it to you and protect your access.
• In GANA CRM:
  • the initial setup (type of business and profession);
  • the content your organization uploads: contacts, companies, opportunities, tasks, notes, quotes and activity;
  • how many active minutes each person spends in the CRM per day. Only that total, without which screens they open or what they type; it is kept for up to 13 months and your organization does not see it.
• On the website www.gana.cloud:
  • what you send us through a form;
  • only if you accept analytics, usage metrics with Google Analytics and Microsoft Clarity;
  • Cloudflare Web Analytics measures without cookies and without identifying you;
  • Google Search Console and Bing Webmaster Tools, to know how the website appears in search engines.
• When you pay: the plan, the amount and the billing details you provide. The card is received by the payment gateway, not by GANA.

If you connect your Google account, GANA CRM accesses your Google Calendar (and Google Meet when you create a meeting) for the sole purpose of showing, creating and syncing your events inside the CRM.

• The use of that information complies with the Google API Services User Data Policy, including its Limited Use requirements.
• We do not sell it or use it for advertising.
• We do not let people read it unless you authorize it or the law requires it.
• We do not transfer it except as needed for this feature.
• You can revoke access from GANA CRM or from your Google account.

• Off by default: GANI is optional and comes turned off. Each company decides whether to turn it on.
• What is sent: with GANI on, when someone asks it something we send an AI provider the question, what was said earlier in that conversation, the text of attached files and the CRM data needed to answer.
• Who processes it: AI model providers from a closed list; if one is not available, the question moves to the next one on that list and no other.
• Three limits:
  • we ask the provider not to train on your information or retain it;
  • we never send your contacts' behavioral profile notes;
  • GANI can create and change records, but not delete them.
• Conversations: only the person who had them can read them. If you mark an answer as not helpful, the GANA team may read that answer and the question that prompted it to correct GANI.
• Online store: the store's writing assistant sends the same provider the text you ask it to write or improve and your business description; it works even if GANI is off.
• The GANA account: sends nothing to artificial intelligence.

We work with infrastructure and service providers (hosting, database, email, payments and artificial intelligence) that process data on our behalf, only to provide the service to you and under security and confidentiality obligations.

The third-party tools that affect you directly are these:

• Google Calendar and Google Meet, if you connect your Google account;
• Google Analytics and Microsoft Clarity, on the website and only if you accept analytics;
• Cloudflare Web Analytics, on the website, without cookies;
• Google Search Console and Bing Webmaster Tools, for indexing the website in search engines.

• Everything travels encrypted (HTTPS/TLS).
• Permissions are checked on the server and each role sees what corresponds to it.
• Each product's sessions are independent and the account never shares your session with the public website.
• Google access tokens are stored encrypted (AES-256-GCM) with the key outside the database.
• Two-step verification is available for your account and mandatory for platform administration.
• The company's audit log and your account's security activity cannot be edited or deleted from the application.

• General rule: we keep the data while your account and your company's account are active and for the period the applicable law requires.
• Closing a company: its data is deleted 30 days after the request.
• Profile photos: they are deleted when you remove them or close your account.

Depending on your country, the law may grant you rights of access, rectification, erasure, portability, objection or restriction of processing. If you are in the European Union or the EEA, the GDPR applies; if you are in California, the CCPA/CPRA (including the right to opt out of the sale of your information, which we do not do in any case); and in other cases, the applicable law of your country.

• You exercise many of them yourself: your profile and sessions from your GANA account; downloading the company's data (whoever manages it) and closing your account from GANA CRM.
• For anything else, write to us at soporte@gana.cloud and we will handle each request within a reasonable time.

• sb-…-auth-token: keeps you signed in, in the GANA account and in each product separately. Lasts until you sign out.
• gana_sesion: tells the website you have an open session, so it shows your name instead of "Log in". It contains no data. Lasts as long as your session.
• gana_sso: protects the step between the account and the product when you sign in. 5 minutes.
• g_cal_oauth: protects the connection to Google Calendar while you authorize it. A few minutes.
• gana_consent: stores your choice about the website's analytics. 12 months.

Language (NEXT_LOCALE), light or dark theme (gana_theme) and how you want to see the CRM (gana_density, gana_nav_collapsed, gana_panel_cols, gana_reportes_modo). They last 12 months.

Other CRM preferences are stored in your browser's local storage instead of a cookie; they do not leave your device either.

On www.gana.cloud we use Google Analytics (_ga, _ga_…, up to 14 months) and Microsoft Clarity (_clck, up to 12 months; _clsk, one day) to understand in aggregate how the website is used. They are only turned on if you accept them.

The GANA account and GANA CRM do not use analytics cookies. Cloudflare Web Analytics is not a cookie: it stores nothing in your browser and does not identify you, so there is nothing to accept or reject.