Effective September 4, 2026
Privacy Notice
Gondola is built around a simple boundary: workflow execution belongs in your AWS account. This notice explains the narrower set of personal information used to operate the website, provide support, and manage software subscriptions.
1. Who is responsible
Gondola is an independent software service operated from Ontario, Canada. It is responsible for the personal information described in this notice. Privacy questions and requests can be sent to greg.gordon.tucker@gmail.com.
2. Product data boundary
A Gondola controller runs in an AWS account you control. It is designed without Gondola product analytics and does not send repository source, workflow payloads, runner logs, AWS credentials, or secrets to a Gondola-operated service. GitHub and AWS process that information under your arrangements with them.
If you voluntarily include logs or configuration in a support request, we process that material to investigate the request. You should remove secrets, tokens, repository content, personal information, and anything else that is not needed for diagnosis.
3. Information we collect
- Contact and support information: your name, email address, organization, correspondence, and diagnostic details you choose to provide.
- Order and licensing information: selected plan, GitHub organization identifier, subscription status, entitlement records, invoices, and transaction identifiers.
- Payment information: Stripe collects payment-card and billing details directly. Gondola receives limited status and account information needed to manage the subscription, not full card numbers.
- Basic website records: hosting and security systems may process IP address, device and browser information, requested URL, time, referrer, and similar request logs needed to deliver and protect the site.
4. How and why we use information
We use the information above to:
- deliver software access and maintain subscription entitlements;
- process orders, renewals, cancellations, and refunds;
- answer support, privacy, billing, and security requests;
- secure, debug, and improve the website and product;
- prevent abuse and enforce plan limits; and
- comply with tax, accounting, legal, and regulatory obligations.
Where a legal basis is required, these activities rely on performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, or consent where the law requires it.
5. Cookies and analytics
Gondola does not currently use advertising pixels, cross-site tracking, or product analytics on this website. Essential hosting, security, or checkout systems may use short-lived storage required to provide their service. If optional analytics or marketing tools are introduced, this notice and any required consent controls will be updated first.
6. Service providers and disclosure
We share information only as needed with providers that help run the service, such as website hosting and security providers, Stripe for payments, and communication or support providers. They may process the information only for the relevant service and under their own legal and security obligations.
We may also disclose information if required by law, to protect rights and safety, to investigate fraud or abuse, or as part of a business reorganization or sale. We do not sell personal information or share it for cross-context behavioural advertising.
7. Retention
We keep contact, subscription, and support records only as long as reasonably needed for the relationship, legitimate operational needs, dispute resolution, and legal obligations. Transaction and tax records may be kept for the period required by applicable law. Security logs are kept for a shorter operational period unless an incident requires longer preservation. When information is no longer needed, it is deleted, anonymized, or securely isolated from routine use.
8. International processing
Service providers may process information in Canada, the United States, and other locations where they operate. Those locations may have different privacy laws. We use appropriate contractual and technical measures where required for cross-border transfers.
9. Security
We use administrative, technical, and organizational safeguards appropriate to the information we process. No internet service can guarantee absolute security. If you believe Gondola information or software is at risk, use the private reporting route on the security page instead of opening a public issue.
10. Your choices and rights
Depending on where you live, you may ask to access, correct, delete, or obtain a copy of personal information; object to or restrict certain processing; withdraw consent; or appeal a decision. You may also lodge a complaint with your local privacy authority. We may need to verify your identity and may retain information where the law permits or requires.
11. Children
Gondola is a developer infrastructure product for adults and organizations. It is not directed to children under 16, and we do not knowingly collect their personal information.
12. Changes and contact
We may update this notice as the service changes. The current version and effective date will remain on this page. For privacy requests, contact greg.gordon.tucker@gmail.com.