Compliance
Built with responsibility.
Messaging involves accounts, messages, and usage data. Here is how Gordion Pathway approaches that — without claiming certifications we do not hold.
- 01
Philosophy
Chat and messaging require accounts, message content or metadata, and usage data to function. We process what is necessary to provide the service. We do not treat user data as an unrelated business line.
- 02
Minimization
Collection is limited to what a product needs: authentication, delivery, safety, billing where applicable, and diagnostics. We do not collect extra fields to inflate a profile of the user.
- 03
Access controls
Access to production systems and personal data is limited to people who operate those systems. Credentials and administrative paths are not shared casually.
- 04
Retention
Data is kept for as long as needed to provide the product, meet contractual terms, or satisfy legal obligations — then deleted or anonymized according to the product’s practices. Exact periods vary by product and are described in notices where required.
- 05
Applicable law
We follow applicable privacy law for the people and products we serve. That includes U.S. requirements that apply to our operations and GDPR where GDPR applies to the processing.
- 06
GDPR
Where the GDPR applies, we process personal data on the bases described in our Privacy Policy: contract, legitimate interests, consent where required, and legal obligation. Data subject requests can be sent to our contact email.
- 07
Subprocessors
Hosting, email, and payment processing may involve subprocessors. We share that list in the course of a commercial relationship and in product privacy notices. We do not sell personal information.
- 08
Privacy notices
This page is an overview. Binding detail lives in the Privacy Policy, Terms of Service, and any product-specific notice. If those documents and this page ever differ, the legal documents control.
A question about data or privacy?
Write to us with the product, the constraint, and what you need operated. We reply during U.S. business hours.