Privacy Policy

Welcome to Thegandyplan.com. This website is owned and operated by The Gandy Plan LLC, a Georgia USA limited liability company (The "Gandy Plan").

The Gandy Plan™ ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your choices regarding your information when you use The Gandy Plan mobile application and website.

By using The Gandy Plan™, you agree to the practices described in this Privacy Policy.

Information You Provide

When you create an account or use The Gandy Plan™, you may provide:

• Name
• Email address
• Password (encrypted and managed through our authentication provider)
• Quilt shop information
• Collection planning information
• Vendor information
• Budgets
• Notes
• Uploaded documents
• Uploaded images

Automatically Collected Information

We may automatically collect:

• Device type
• Operating system
• App version
• Error logs
• Diagnostic information
• Anonymous usage of analytics

This information helps us improve app performance and reliability.

We use your information to:

• Provide and maintain The Gandy Plan™
• Synchronize your data across your devices
• Save your collections and planning information
• Improve the app
• Respond to support requests
• Process subscriptions
• Protect against fraud or abuse

We do not sell your personal information.

Subscriptions are processed through:

• Apple App Store
• Google Play

We do not receive or store your credit card information.

Payment processing is handled by Apple or Google according to their privacy policies.

Information you create in The Gandy Plan™ is securely stored in cloud databases so your information is available across your devices.

Uploaded files, including PDFs, spreadsheets, CSV files, and images, are stored securely and associated with your account.

We do not sell or rent your personal information.

We may share information only with trusted service providers that help us operate The Gandy Plan™, including:

• Cloud hosting providers
• Authentication providers
• File storage providers
• Analytics providers
• Payment processors

These providers are required to protect your information.

We use commercially reasonable safeguards designed to protect your information from unauthorized access, alteration, disclosure, or destruction.

While we strive to protect your information, no internet transmission or electronic storage method is completely secure.

We retain your information as long as your account remains active or as needed to provide the Services.

If you delete your account, we will delete or anonymize your personal information within a reasonable period unless we are required by law to retain certain information.

You may delete your account at any time.

When your account is deleted:

• Your personal information will be permanently deleted.
• Your collections, uploaded documents, images, and associated planning data will be removed from our systems, except where retention is required by law.

Depending on where you live, you may have rights to:

• Access your information
• Correct inaccurate information
• Delete your information
• Request a copy of your data
• Object to certain processing

To exercise these rights, contact us using the information below.

The Gandy Plan™ is intended for adults operating quilting businesses. The Service is not intended for individuals under the age of 18.

The Gandy Plan™ does not knowingly collect any Personal Identifiable Information from children under the age of 13. If we learn at any time that we have been providing services to or have collected the information of a child under the age of 13 then we will immediately destroy this personal information unless we are legally obligated to retain such data. Please email us at support@thegandyplan.com if you believe that we have unintentionally provided services to or collected the information of a child under the age of 13.

We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best to promptly remove such information from our records.

Children between the ages of 13 and 18 years of age must receive permission from a parent or legal guardian to access this website.

The Gandy Plan™ may use third-party services including:

• Apple
• Google
• Cloud hosting providers
• Authentication providers

These services have their own privacy policies governing their use of information.

We may update this Privacy Policy from time to time.

When changes are made, the Effective Date above will be updated.

Continued use of The Gandy Plan™ after changes become effective constitutes acceptance of the updated Privacy Policy.

If you are a California resident and the California Consumer Privacy Act, as amended (CCPA), applies to The Gandy Plan's processing of your personal information, you may have the right to request that we disclose the categories and specific pieces of personal information we have collected about you; the categories of sources, business or commercial purposes, and categories of recipients associated with that information; and other information required by applicable law.

Subject to applicable exceptions, you may also have the right to request correction or deletion of personal information; to opt out of the sale or sharing of personal information; to limit certain uses or disclosures of sensitive personal information; and to receive equal service and pricing without unlawful discrimination for exercising your privacy rights. The Gandy Plan™ does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined by the CCPA.

Sections 2, 3, and 6 describe the personal information we collect, the sources from which it is obtained, the purposes for which it is used, and the service providers or other recipients to which it may be disclosed. To submit a California privacy request, email support@thegandyplan.com. We may verify your identity and authority before completing a request, and an authorized agent may submit a request as permitted by law.

If European Union or European Economic Area data-protection law applies, The Gandy Plan™ processes personal data as necessary to perform our agreement with you and provide the Services; to comply with legal obligations; for legitimate interests such as securing, maintaining, and improving the Services, preventing fraud, and responding to support requests, where those interests are not overridden by your rights; and with your consent where consent is the appropriate legal basis. You may withdraw consent at any time without affecting processing that occurred before withdrawal.

Subject to applicable conditions and exceptions, you may have rights to access, correct, erase, restrict, or receive a portable copy of your personal data; object to certain processing; and lodge a complaint with the data-protection authority where you live, work, or believe a violation occurred. You may exercise these rights by emailing support@thegandyplan.com.

Your personal data may be processed in the United States and other countries where The Gandy Plan™ or its service providers operate. Where required, we will use legally recognized safeguards for transfers of personal data outside the European Economic Area. The Gandy Plan™ is the controller of personal data processed for the purposes described in this Privacy Policy unless otherwise stated.

If Canadian privacy law applies, The Gandy Plan™ will collect, use, and disclose personal information for the purposes identified in this Privacy Policy and with meaningful consent where consent is required. We limit collection to information reasonably needed for those purposes and retain personal information only as long as reasonably necessary or legally required.

Subject to applicable exceptions, you may request access to personal information we hold about you, ask how it has been used or disclosed, request correction of inaccurate or incomplete information, or withdraw consent to future processing where processing is based on consent. Withdrawal may affect our ability to provide features that require the information.

Direct Canadian privacy questions, requests, or complaints to our privacy contact at support@thegandyplan.com. We will investigate and respond as required by applicable law. You may also have the right to complain to the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator. Personal information may be processed outside Canada and may be subject to the laws of the jurisdiction where it is processed.

These Terms are governed by the laws of the State of Georgia, United States, without regard to conflict of law principles.

Any dispute arising from these Terms or your use of this website shall first be attempted to be resolved through good-faith negotiation. If negotiation fails, disputes shall be resolved through binding arbitration administered by the American Arbitration Association in accordance with its Consumer Arbitration Rules. The venue of arbitration shall be Columbia County, Georgia. The arbitrator's decision shall be final and binding.

Class Action Waiver. You agree that any dispute resolution proceedings will be conducted on an individual basis only, and not in a class, consolidated, or representative action.

Small Claims Exception. Notwithstanding the above, either party may bring an individual action in small claims court in Columbia County, Georgia.

If you have questions about this Privacy Policy, contact us at:

The Gandy Plan™

Email: support@thegandyplan.com

Website: https://thegandyplan.co