ANDER_CO // LEGAL
Privacy Policy
Last updated: June 27, 2026
This Privacy Notice for Andercompany (doing business as Ander) describes how and why we might access, collect, store, use, and/or share your personal information when you use our services, including when you visit andercompany.com or any website of ours that links to this notice, or engage with us in other related ways.
Questions or concerns? Contact us at Hello@andercompany.com.
Contents
1. What information do we collect?
Personal information you disclose to us
We collect personal information that you voluntarily provide when you register on the Services, express interest in our products, participate in activities, or contact us.
The personal information we collect may include:
- Names
- Phone numbers
- Email addresses
- Usernames and passwords
- Contact or authentication data
- Billing addresses
- Debit/credit card numbers
Sensitive information. When necessary and with your consent, we may process financial data. All payment data is handled by PayPal — see their privacy notice at paypal.com/us/legalhub/paypal/useragreement-full.
All personal information you provide must be true, complete, and accurate.
Information automatically collected
When you visit our Services, we automatically collect certain technical information — such as your IP address, browser type, device characteristics, operating system, language preferences, and usage data. This information is used for security and internal analytics.
We also collect information through cookies and similar technologies. See our Cookie Policy for details.
2. How do we process your information?
We process your information to provide, improve, and administer our Services. Specific purposes include:
- Facilitating account creation and authentication
- Delivering and managing the services you requested
- Responding to your inquiries and support requests
- Sending administrative information and policy updates
- Fulfilling and managing your orders and payments
- Requesting feedback on our Services
- Sending marketing communications (with your consent; opt-out anytime)
- Delivering targeted advertising
- Protecting our Services and preventing fraud
- Identifying usage trends to improve the product
- Protecting vital interests when necessary
3. What legal bases do we rely on?
We only process your personal information when we have a valid legal reason. If you are in the EU or UK, we rely on the following bases under GDPR / UK GDPR:
- Consent — where you have given explicit permission. You can withdraw consent at any time.
- Performance of a contract — to fulfil our contractual obligations to you.
- Legitimate interests — for purposes such as fraud prevention, analytics, and personalized advertising, where these interests do not override your rights.
- Legal obligations — where required to comply with law.
- Vital interests — to protect safety when necessary.
If you believe we are unlawfully processing your information and are located in the EEA or UK, you have the right to complain to your Member State data protection authority or the UK ICO.
6. Do we offer AI-based products?
As part of our Services, we offer features powered by artificial intelligence. We provide these through third-party AI service providers including Anthropic and OpenAI. Your input, output, and relevant personal information may be shared with these providers to enable the AI features.
Current AI functions: AI insights.
To opt out of AI processing, log in to your account settings or contact us.
7. How long do we keep your information?
We retain personal information only as long as necessary for the purposes set out in this notice, or as required by law. We keep information no longer than the period during which you have an account with us.
When we no longer have a legitimate need to process your information, we delete or anonymise it. If deletion is not immediately possible (e.g. backup archives), we isolate the data from further processing until deletion is feasible.
8. How do we keep your information safe?
We have implemented appropriate technical and organisational security measures to protect your personal information. However, no electronic transmission over the internet or storage technology can be guaranteed 100% secure.
You should only access the Services within a secure environment. Transmission of personal information is at your own risk.
9. Do we collect information from minors?
We do not knowingly collect data from or market to anyone under 18 years of age. By using the Services, you represent that you are at least 18. If we learn that data from a minor has been collected, we will deactivate the account and delete the data promptly. To report such a case, contact us at Hello@andercompany.com.
10. What are your privacy rights?
Depending on your location, you may have rights including access, correction, deletion, portability, and the right to object to processing. To exercise these rights, visit andercompany.com/contact or email Hello@andercompany.com.
Withdrawing consent: You may withdraw consent at any time by contacting us. This does not affect the lawfulness of processing before withdrawal.
Opting out of marketing: Click the unsubscribe link in any email, or contact us. You will be removed from marketing lists but may still receive essential service communications.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with third parties.
Account information: Log in to your account settings to review or update your information, or contact us. Upon account termination, we deactivate and delete your data, though we may retain some for fraud prevention, legal compliance, or investigations.
11. Controls for Do-Not-Track features
Most browsers include a Do-Not-Track (DNT) setting. Because no uniform standard for implementing DNT signals has been finalised, we do not currently respond to DNT browser signals.
California law requires us to disclose this: we do not respond to DNT signals at this time. If an industry standard is adopted, we will update this notice accordingly.
12. Do United States residents have specific privacy rights?
Residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia may have additional rights, including:
- Right to know whether we process your personal data
- Right to access your personal data
- Right to correct inaccuracies
- Right to request deletion
- Right to obtain a copy of data you previously shared
- Right to non-discrimination for exercising your rights
- Right to opt out of targeted advertising, sale of data, or profiling
To exercise these rights, visit andercompany.com/contact or email hello@andercompany.com.
Appeals: If we decline your request, you may appeal by emailing Hello@andercompany.com. If your appeal is denied, you may contact your state attorney general.
You may designate an authorised agent to make requests on your behalf. We may require written proof of authorisation before processing such requests.
13. Do we make updates to this notice?
We may update this Privacy Notice from time to time. The updated version will be indicated by the revised date at the top. Material changes will be communicated by prominent notice or direct notification. We encourage you to review this notice regularly.
14. How can you contact us about this notice?
Questions or comments about this notice? Contact our Data Protection Officer:
15. How can you review, update, or delete your data?
Based on applicable laws, you may request access to, correction of, or deletion of your personal information. Submit a request at andercompany.com/contact.