Privacy Policy — PartnerReady.AI Co-Sell Agent (Chrome Extension)

1. Overview

The Extension is a business productivity tool for AWS, Microsoft, and Google Cloud partner sellers. Its single purpose is to read a sales opportunity from the user's CRM, enrich it, and submit it as a co-sell opportunity to the applicable cloud provider's partner portal (each, a "Partner Portal") through the PartnerReady.AI platform.

This policy explains what the Extension handles, where that information goes, and how long it is kept. It applies to the Extension only. Use of the PartnerReady.AI web platform is additionally governed by the PartnerReady.AI terms of service, and customer engagements with g/d/n/a are governed by the applicable Master Services Agreement and Statement of Work.

2. Information the Extension handles

The Extension is installed and used by authenticated business users acting on behalf of their employer. It does not have consumer end users and does not knowingly handle information from anyone under 18.

a. Authentication and configuration data. A PartnerReady.AI API key or session credential, plus user-selected settings (such as the target partner center and default submission options). These are stored locally in the browser using the Chrome storage API and are transmitted only to PartnerReady.AI endpoints operated by GDNA LLC.

b. CRM opportunity data. When the user explicitly invokes the Extension on a supported CRM record, the Extension reads fields from that record in order to compose a co-sell opportunity. This may include: opportunity or deal name, value, stage, and expected close date; the end-customer company name, website, industry, and address; a business contact's name, business email address, business phone number, and job title; the opportunity owner's name and business email address; and free-text deal notes or descriptions the user has entered.

c. Partner posture data. Read-only partner-program information about the user's own organization (such as opportunity, solution, and engagement counts) retrieved from PartnerReady.AI to help the user complete a submission. This is used for reviewer context and is removed from the payload before submission to a Partner Portal.

d. Operational logs. Standard application and security logs — timestamps, request and submission identifiers, error codes, and the account that initiated a request — generated when the Extension calls PartnerReady.AI services.

The Extension does not collect: browsing history, page content from sites other than the supported CRM pages the user invokes it on, keystrokes, location data, health or financial account information, government identifiers, or personal communications. The Extension does not activate on pages outside the host permissions declared in its manifest.

3. Browser permissions and why they are needed

4. How information is used

Information handled by the Extension is used only to:

1. authenticate the user to the PartnerReady.AI platform;
2. assemble, enrich, and validate a co-sell opportunity payload;
3. submit that payload to the Partner Portal the user has selected, at the user's direction;
4. return submission status and history to the user;
5. maintain the security, reliability, and supportability of the service, including troubleshooting failed submissions.

Enrichment is performed using foundation models hosted in Amazon Bedrock, invoked from GDNA-controlled AWS accounts in United States regions. Opportunity data sent for enrichment is not transmitted to any external AI vendor, is not retained by the model service, and is not used to train or improve foundation models. Access to the model service is authorized by AWS Identity and Access Management roles held server-side; no model credential or API key is stored in the browser or in the Extension.

5. Chrome Web Store Limited Use disclosure

Use of information received from Google APIs, and all information handled by the Extension, adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically, GDNA LLC:

• does not sell user data, and does not share it with data brokers or information resellers;
• does not use or transfer user data for purposes unrelated to the Extension's single purpose of co-sell opportunity submission;
• does not use or transfer user data to determine creditworthiness or for lending purposes;
• does not use user data for advertising, retargeting, or personalized advertising;
• does not allow humans to read user data except with the user's affirmative consent for a specific support request, where necessary for security purposes or to comply with applicable law, or where the data has been aggregated and de-identified.

6. Disclosure to third parties

Information is disclosed only to:

• The Partner Portal selected by the user (for example, Amazon Web Services for an AWS co-sell submission). Submission is the purpose of the Extension and occurs at the user's explicit direction. Data submitted to a Partner Portal is thereafter governed by that provider's terms and privacy policy.
• The user's own organization, through the PartnerReady.AI platform, where administrators of that organization's tenant can view submission activity.
• Infrastructure subprocessors engaged by GDNA LLC under written agreements. The sole such subprocessor is Amazon Web Services, which provides both platform hosting and the Amazon Bedrock model inference described in Section 4, in United States regions. No separate AI vendor receives opportunity data.
• Legal and safety disclosures, where required by law, subpoena, or other legal process, or to protect the rights, property, or safety of GDNA LLC, our customers, or the public.

GDNA LLC does not sell personal information and has not sold personal information in the preceding twelve months.

7. Data retention and deletion

Credentials and settings stored in the browser persist until the user clears them in the Extension's settings, signs out, or uninstalls the Extension; uninstalling removes all locally stored data.

Submitted opportunity records and submission history are retained in the user's PartnerReady.AI tenant for as long as the account is active, and are deleted within ninety (90) days of account termination unless a longer period is required by law or by the applicable customer agreement. Operational logs are retained for up to twelve (12) months.

An account holder may request access to, correction of, or deletion of their data by contacting us at the address in Section 10. Where a customer organization is the controller of the data, requests are fulfilled in coordination with that organization.

8. Security

GDNA LLC maintains administrative, technical, and physical safeguards appropriate to the sensitivity of the information handled. These include encryption in transit (TLS) and at rest, scoped machine-to-machine authentication between the Extension's backend and platform services, tenant isolation, least-privilege access controls, and credential storage in managed secret stores rather than in the browser. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Depending on where you reside, you may have rights to access, correct, delete, or port your personal information, to restrict or object to certain processing, and to withdraw consent. Residents of California, Colorado, Connecticut, Utah, Virginia, and other U.S. states with comprehensive privacy laws, and individuals in the European Economic Area and United Kingdom, may exercise applicable rights by contacting us at the address below. We will not discriminate against you for exercising these rights.

Information handled by the Extension is processed and stored in the United States.

10. Contact

GDNA LLC (g/d/n/a)
Charleston, South Carolina, USA
Email: privacy@gdna.io
Support: support@gdna.io

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date above and, where appropriate, communicated through the PartnerReady.AI platform. Continued use of the Extension after an update constitutes acceptance of the revised policy.