Giano CareGiano Care
Legal

Privacy policy

Last updated October 15, 2026

Giano Care privacy@giano.care

This policy explains what personal data Giano Care handles and why. It covers two groups of people, who have different relationships with us.

1. People with an account (owners, managers, professionals)

Giano Care is the controller of account data.

  • What: name, email address, password (stored only as a one-way hash), role and organisation, and, if you add them, phone number, profile picture and a short bio; your notification settings; messages you write in the app; billing details handled by Stripe.
  • Why: to provide the service you or your organisation signed up for (contract), to keep it secure and to meet tax and accounting obligations (legal obligation).
  • How long: while your organisation uses the service; it is deleted with the organisation, 45 days after its plan or trial ends. Invoices are kept as long as tax law requires.

2. People who fill in an organisation's form

When you ask an organisation for support through its Giano Care form, that organisation is the controller of your data: it decides how it is used, and you should contact it to exercise your rights. We process your data only on its behalf and on its instructions, under a data processing agreement.

  • What: your name, phone number, optional email, your answers to the organisation's questions, the calls booked with you and notes about them, and messages the team writes about your request.
  • Protection: your phone number, email, answers, call notes and the team's messages are encrypted in our database; only members of that organisation can see them, and professionals only see the people assigned to them. Notification emails and WhatsApp messages never contain your answers.
  • How long: once all your requests are closed, the organisation's retention setting applies (24 months by default): your name, contact details, written answers, notes and discussions are then removed for good, keeping only anonymous statistics. The organisation can erase your data sooner at any time.

3. Who else processes data

We use a small number of providers, each bound by a data processing agreement: netcup GmbH (servers in Germany), Backblaze (encrypted backups and uploaded pictures, stored in the EU), Resend (email delivery), Stripe Payments Europe (payments, for account holders only) and, only for organisations that enable the WhatsApp add-on, Meta Platforms Ireland (WhatsApp messages to team members). Where a provider transfers data outside the EU, it relies on the EU Standard Contractual Clauses or an adequacy decision. We never sell data or use it for advertising.

4. Cookies

We only use cookies needed for the service to work: your login session, your language choice and how you left the sidebar. There are no analytics or advertising cookies, so no cookie banner is needed.

5. Security

All traffic is encrypted (HTTPS). Data is kept on servers in the EU, sensitive fields are encrypted at rest, access is limited by role, and platform administrators need a second factor to log in.

6. Your rights

You can ask for access to your data, correction, erasure, restriction, portability, or object to processing. Account holders can write to privacy@giano.care; people who filled in a form should contact the organisation, and we will help it answer. You can also complain to your data protection authority (in Italy, the Garante per la protezione dei dati personali).