Legal

The agreements that govern your use of Gheima, what we do with your data, and who processes it on our behalf.

These documents are a first published draft. They describe what the platform actually does today, but they have not yet been reviewed by a lawyer. We are publishing them because billing customers with no terms at all is worse; expect the wording to change once counsel has been through it.

Terms of service

The agreement between you and Gheima: what we provide, what you pay, and how either side can end it.

Privacy policy

What personal data we hold, why we hold it, where it sits, how long it stays and what you can ask us to do with it.

Data processing agreement

The processor terms that apply when we handle personal data on your behalf, including exactly where your data sits in each region.

Sub-processors

Every third party that may process personal data for Gheima, what it does and where it does it.

Legal notice

Who operates Gheima, how to reach us, and who hosts the platform.

Security overview

One page for vendor review: encryption, keys, two-factor authentication, the audit log, backups and the residency scope, each linked back to these documents.