GANO Connector — Processing and Privacy Information

Technical information updated: 20 September 2026

This replaces outdated technical statements in the earlier owner-only notice. A complete legal privacy notice and customer processing terms remain under review. This page does not claim that review is complete.

Information processed and stored

GANO processes submitted instructions, source material, project information and tool results. Governed project, evidence, lifecycle, decision, revision and audit records may be stored in Supabase. Account, membership, entitlement and OAuth records support access to the service. Provider infrastructure may process request and network metadata.

Service boundaries

The owner-private and customer interfaces have separate authorization and persistence controls. Supported deterministic calculations use the existing GANO calculation engine. Some configured tools communicate with the protected SIOS service. Your selected AI client may separately store conversations under its own settings and terms.

Hosting and access

The connector uses Vercel compute and Supabase persistence. Current deployment evidence identifies Vercel compute in iad1 and the Supabase database in eu-west-1. This is not an EEA-only processing guarantee. Service traffic uses HTTPS; authorized service operators and providers may have privileged access under their respective controls.

Retention, deletion and recovery

GANO's approved retention schedule and complete deletion procedure are not yet finalized. Removing the connector, revoking access or deleting a conversation in your AI client does not by itself delete persisted GANO records. Backup recovery capability has not yet been verified. Submit only information needed for the task and which you are authorized to share.

Privacy requests and remaining notice information

Use your existing verified GANO relationship contact to raise a privacy or security request. Operator legal identity, a dedicated rights contact, applicable legal bases, approved retention periods, processing roles, subprocessor terms and international-transfer safeguards remain to be confirmed in the completed notice. Do not interpret this page as confirmation of legal compliance or independent assurance.