Privacy Policy

1. Who we are

Garde provides a multi-agent simulation platform for retail and consumer-product businesses. For the personal information described in this Policy, Garde acts as the data controller. You can reach us about privacy at alejandro@garde.market.

2. Information we collect

We collect the following categories of information:

• Account and identity information — such as your email address, and where you provide it, your name, company, role, and phone number, used to grant and manage invite-only access.
• Communications — messages you send us (for example, access or demo requests) and our correspondence with you.
• Usage and device information — such as IP address, browser and device type, pages viewed, actions taken, and timestamps, collected automatically when you use the Service.
• Cookies and similar technologies — including the authentication and session cookies needed to keep you signed in, and limited analytics where applicable (see Section 5).
• Customer Data — the inputs, configurations, and materials you submit to run simulations. This is generally business and market data and is not intended to contain personal information.
• Market data — aggregated and de-identified transaction and listing data drawn from public and licensed sources, used to ground and calibrate our models. We do not seek to use this data to identify individual consumers.

3. How we use information

We use personal information to:

• provide, operate, secure, and maintain the Service;
• authenticate you and manage invite-only access;
• respond to your requests and provide support;
• monitor, debug, and improve the Service, including its performance and accuracy;
• send service and administrative messages, and (where permitted) relevant updates you can opt out of;
• detect, prevent, and address fraud, abuse, and security incidents; and
• comply with legal obligations and enforce our terms.

We do not use Customer Data to train models for the benefit of other customers without your consent.

4. Legal bases for processing (EEA/UK)

Where the GDPR applies, we rely on the following legal bases: performance of a contract (to provide the Service you request); our legitimate interests (to secure, operate, and improve the Service, and to communicate with business users), balanced against your rights; your consent (where required, such as for certain cookies or marketing); and compliance with legal obligations.

5. Cookies and analytics

We use strictly necessary cookies to authenticate you and keep your session active; these are required for the Service to function. Where we use analytics or other non-essential cookies, we do so consistent with applicable law and, where required, with your consent. You can control cookies through your browser settings, though disabling necessary cookies will prevent you from signing in.

6. How we share information

We do not sell your personal information. We share it only as follows:

• Service providers — vendors who process data on our behalf under contract, such as cloud hosting and infrastructure, authentication and database providers, email delivery, and analytics.
• Your organization — where you access the Service as part of a team or organization, administrators of that organization may access account and usage information.
• Legal and safety — where required by law, legal process, or to protect the rights, property, or safety of Garde, our users, or others.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

7. Data retention

We retain personal information for as long as needed to provide the Service, maintain your account, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it. Retention periods vary based on the type of data and the purpose for which it is processed.

8. Security

We implement technical and organizational measures designed to protect personal information, including encrypted connections, access controls, and passwordless authentication. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

9. International data transfers

We may process and store information in the United States and other countries that may have different data-protection laws than your own. Where we transfer personal information out of the EEA or UK, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

10. Your rights

Depending on where you live, you may have rights regarding your personal information, including the right to:

• access a copy of the personal information we hold about you;
• correct inaccurate or incomplete information;
• delete your personal information;
• restrict or object to certain processing, and withdraw consent where processing is based on consent;
• receive your information in a portable format (data portability); and
• for California residents, to know, delete, and correct personal information, and to opt out of any “sale” or “sharing” — note that we do not sell or share personal information as those terms are defined under the CCPA/CPRA.

To exercise any of these rights, contact us at alejandro@garde.market. We will respond consistent with applicable law and will not discriminate against you for exercising your rights. EEA/UK users also have the right to lodge a complaint with their local data-protection authority.

11. Children’s privacy

The Service is intended for business users and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

12. Third-party links

The Service may link to third-party websites or services that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy notices.

13. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

14. Contact

For privacy questions or requests, email alejandro@garde.market.