Privacy and your data

Requests for support often contain health information, which the GDPR treats with special care. Giano Care is built to keep that data minimal, protected and under your control. Your organization is the data controller; Giano Care processes the data on your behalf under the data processing agreement.

How data is protected

• Encrypted at rest: names, phone numbers, emails, intake answers and call notes are encrypted in the database.
• EU hosting: the service runs on servers in the European Union. The privacy page lists every provider involved and where it operates.
• Only who needs it: professionals see only the people assigned to them, and request discussions are visible only to managers and the assigned professional. You can also hide names in the lists; see How customers are shown.
• Nothing sensitive in notifications: emails, phone notifications and WhatsApp messages carry a first name and a link, never the answers or message texts.
• Consent: the form always asks people to agree that your organization stores their details, and records when they did.
• Two-factor sign-in is available to every member; see Two-factor sign-in.

Export your data

In Settings, Download CSV gives you every request, at any time. Each export is recorded in the Data log.

Erase a customer

When someone asks to be forgotten, open one of their requests. Under Privacy, choose Erase customer and confirm. The person and everything recorded about them (all their requests, calls, notes and discussions) are permanently deleted. Only owners can do this, and it is recorded in the Data log.

Erasing can’t be undone. Download what you are legally required to keep first.

Automatic anonymization

Set Anonymize closed cases after in Settings. Once all of a customer’s requests have been closed for that long, their name, contact details, written answers, call notes and discussions are removed for good. The numbers in the statistics stay.

If you stop using Giano Care

If your trial ends without a plan, data becomes read-only and you can still export it. Organizations that stay without a plan are deleted, with all their data, after a few weeks; we email the owner before that happens.