Privacy, in plain language.

Who is responsible

SANDR is an early-stage hospitality management product operated from Vilnius, Lithuania. SANDR is responsible for the personal data submitted through this website. Privacy requests can be sent to gm@sandr-ai.com.

What we collect

When you request a walkthrough or early access, we collect the details you choose to provide: your name, work email, organisation, venue type and count, the topic you want to discuss, and your message.

The server also receives ordinary technical information needed to deliver and protect the site, such as request time, requested path, browser information, and network address in hosting logs. We do not ask for payment, health, identity-document, or staff-sensitive information through this website.

Theme and colour preferences are stored in your own browser using local storage. The V2 measurement layer does not use advertising cookies or create a cross-site profile.

Why we use it

We use enquiry details to reply, prepare a relevant walkthrough, assess early-access fit, and take steps toward a pilot agreement. We use limited technical logs and first-party interaction events to operate, secure, diagnose, and improve the website. Form content is not included in interaction analytics.

Where European data-protection law applies, this processing is based on responding to your request, taking steps before a possible agreement, and SANDR’s legitimate interests in keeping the site secure and understanding whether its early-access journey works. We ask for consent before using submitted details to reply and would request separate consent for any unrelated marketing.

Who receives it

Data may be handled by service providers that host the website, deliver the enquiry, provide business email, or support a pilot. They are used only for those services. If a provider processes data outside the European Economic Area, SANDR will use an applicable transfer mechanism and describe the provider in the relevant pilot or service notice.

SANDR does not sell website enquiry data.

How long we keep it

Enquiries that do not become an active pilot are normally deleted or anonymised within 12 months after the last meaningful contact. Records connected to a pilot or legal obligation may be retained for the period described in the pilot agreement or required by law. Short-lived security and delivery logs are kept only as long as reasonably necessary to operate and protect the service.

Your rights

Depending on the law that applies, you may ask to access, correct, delete, restrict, or receive a copy of your personal data, and you may object to certain processing or withdraw consent. You may also complain to the Lithuanian State Data Protection Inspectorate or another competent supervisory authority.

Questions and requests

Email gm@sandr-ai.com with the subject “Privacy request”. We may need to verify that the request relates to you before disclosing or changing personal data.

This notice will be updated if the lead-delivery, measurement, or early-access data flow materially changes.