# Azure Logic Apps Connectors — Account and Commerce Privacy Notice

Version: 2026-10-30

Published: October 30, 2026

Gurande Chameshi Inc., doing business as Lambogenius, administers the account,
commerce, license-delivery and support services described here. Contact
legal@lambogenius.com for privacy questions, access/correction/deletion requests or
complaints, and hello@lambogenius.com for billing and technical support.

Lambogenius's Privacy Officer, a member of Lambogenius management, is accountable
for privacy compliance, requests and incident response and can be reached at
legal@lambogenius.com. The legal/privacy and billing/support mailboxes above are
monitored. Management coordinates request handling, identity verification, retention decisions and incident
escalation, including obtaining appropriate technical and legal assistance.

## Information and purposes

We process account and sign-in information supplied by the selected identity
provider, organization and billing contact details, provider customer/subscription
references, purchased products, prices, consent/version records, payment status,
subscription terms, license/token-issuance metadata, authenticated download audit
records and support information you choose to provide. These records let us
identify your account, prevent abuse, collect payment, deliver/manage licenses,
provide downloads/support and retain required business and acceptance records.

Stripe hosts card collection. Full card numbers are not submitted to Lambogenius
through the hosted Checkout flow. Identity-provider and Stripe terms describe
those providers’ own processing. Do not send private keys, full license credentials,
purchase/access tokens, patient data or workflow/message payloads to support.

## Customer-hosted software

The connector runtime executes in your Azure environment and validates signed
license credentials offline. This commerce integration does not send your HL7
messages, workflow payloads, maps or templates to Lambogenius. Your own Azure
configuration and separately selected archiving or hosted services have their own
processing and security requirements. Do not assume this notice is a patient-data
processing agreement or a compliance certification.

## Providers, disclosures and transfers

The service uses hosting, database, cache, storage, identity, payment and
communications providers for the purposes above: DigitalOcean, Supabase, Upstash,
Cloudflare and Stripe. Identity providers depend on the sign-in option selected.
No Canada-only storage or processing promise is made.

Information can be processed outside your province or country and be subject to
applicable access laws there. We may disclose information to service providers
performing these functions, when legally required, or in a business transfer subject
to appropriate protections. This notice does not authorize sale of customer data.

## Retention, requests and safeguards

Account, billing, acceptance, license and audit records are kept for the purposes
for which they were collected and applicable contractual, accounting, security or
legal obligations. Retention differs by record category. A deletion request does
not necessarily remove records required for those obligations, disputes, security
or protected backup retention. Deletion requests are reviewed manually, with necessary records and protected
backups retained for applicable obligations. Information no longer needed for those
purposes is deleted or anonymized through the applicable operating process. No fixed
universal period or automatic account-deletion guarantee is made here.

Contact the privacy address above to request information about our processing,
access/correction/deletion or raise a concern. We may verify identity and explain
applicable limitations. If you are not satisfied with our response, you may complain
to the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) or another
privacy authority with jurisdiction. We use access controls, authentication and other safeguards
appropriate to the service; no system is represented as risk-free. Report a suspected
account or credential problem promptly without sending the credential itself.

## Changes

An approved notice is published with its version. Material changes are presented
through the service or appropriate contact mechanism. Existing accepted software
license terms and purchased rights are not silently amended by a privacy update.