Legal.
The agreements and policies behind GONATURELLE, written to be read. Each opens with a plain summary.
Most recent change: 20 Oct 2026
Agreements
- Terms of Serviceupdated 15 Oct 2026The contract between GONATURELLE PRIVATE LIMITED and the organisation that uses GONATURELLE. It covers accounts and trials, fees and overage, your data and ours, synthetic test data, what GONATURELLE is not (a certification body or a runtime safety control), warranties, liability limits, termination and Delaware governing law. A signed order form or master agreement takes precedence over these terms where they conflict.
- Business Associate Agreement Summaryupdated 1 Sept 2026GONATURELLE signs a HIPAA Business Associate Agreement with any customer on any plan, Developer included, before protected health information is uploaded. This page summarises the obligations the BAA places on GONATURELLE as a business associate and on the customer as a covered entity or business associate, so your privacy office can review it before requesting the signed copy.
- Data Processing Addendumupdated 1 Sept 2026The terms under which GONATURELLE processes personal data contained in Customer Data on your behalf: instructions, confidentiality, security, subprocessors, international transfers, assistance with data subject requests, breach notice, audits and deletion. The DPA is built for GDPR Article 28, UK GDPR, India's DPDP Act 2023 and US state privacy laws, and is incorporated into the Terms of Service automatically.
Data protection
- Privacy Policyupdated 15 Oct 2026What personal data GONATURELLE collects about website visitors, prospects and account users, why, how long we keep it, who processes it for us, and the rights you have under India's DPDP Act 2023, the GDPR and US state privacy laws. Customer test data that you upload to the platform is covered by your agreement with us and the Data Processing Addendum, not by this policy.
- Subprocessorsupdated 1 Oct 2026The third parties GONATURELLE uses to deliver the Services that may process Customer Data or customer personal data, what each one does, and where. Which ones touch your data depends on your deployment: in a dedicated VPC or air-gapped install, Customer Data stays in your own cloud account and most of this list does not apply to it.
- Cookie Policyupdated 15 Oct 2026GONATURELLE uses only strictly necessary cookies: to keep you signed in to the application, to protect forms against cross-site request forgery, and to remember a small number of interface choices. We use no advertising cookies, no cross-site tracking, no session replay and no third-party analytics cookies, so there is no consent banner to click through.
Policies
- Accessibility Statementupdated 20 Oct 2026GONATURELLE targets conformance with the Web Content Accessibility Guidelines (WCAG) 2.2 at Level AA for the website and the web application. This statement explains how we test, where we know we fall short today, how to request an accessible alternative, and how quickly we respond.
- Acceptable Use Policyupdated 15 Oct 2026The rules for using GONATURELLE, including the red-team and synthetic stress features. In short: test systems you own or are authorised to test, keep PHI out unless a BAA is signed, do not treat synthetic cases as real records, do not attack or overload the platform, and do not use adversarial generation to harm anyone outside your own evaluation.
Questions about these terms?
- Contracts and notices: legal@gonaturelle.si
- Privacy and Grievance Officer (Ishita Banerjee): privacy@gonaturelle.si
- GONATURELLE PRIVATE LIMITED, CIN U47912TN2026PTC190616. No. 14/11, Sunkurama Street, Mannady, Tondiarpet Fort St George, Chennai, Tamil Nadu 600001, India