Your content, your clients, your data.

1. Overview

This Privacy Policy applies to the website and service available at https://gramgrid.pro/, including account pages, dashboards, uploaded media, project previews, admin tools and client approval links.

By using GramGrid, you understand that we may process certain personal data to provide the service, secure user accounts, store project content, operate client preview links and improve the platform.

This policy is written to explain our practices in a clear way and to support transparency requirements under data protection laws, including the EU General Data Protection Regulation, where applicable.

2. Who is responsible for your data

For the purposes of this Privacy Policy, the operator of GramGrid is the data controller for personal data processed through the website and service, unless a separate written agreement says otherwise.

3. Information we collect

The data we collect depends on how you use GramGrid. We try to collect only what is needed to provide, secure and improve the service.

4. How we use information

We may use personal data for the following purposes:

• to create, operate and maintain user accounts;
• to provide the GramGrid dashboard, project workspace and Instagram-style preview tools;
• to store uploaded content and generate optimized previews or thumbnails;
• to create and manage read-only client approval links;
• to authenticate users and protect accounts from unauthorized access;
• to detect, prevent and investigate spam, fraud, abuse, security incidents or technical issues;
• to respond to support requests and service-related messages;
• to analyze performance, fix bugs and improve the platform;
• to comply with legal obligations and enforce our terms or policies.

5. GDPR legal bases for processing

If the GDPR applies to your use of GramGrid, we rely on one or more legal bases depending on the type of processing. These may include:

Performance of a contract

We process account, project and media data when it is necessary to provide the GramGrid service you requested, including login, workspace access, profile previews and approval links.

Legitimate interests

We may process technical data, logs, security information and limited usage data to keep the service secure, prevent abuse, maintain performance and improve the product, as long as those interests are not overridden by your data protection rights.

Consent

Where required, we ask for consent before using non-essential cookies, optional analytics tools or optional marketing communications. You may withdraw consent at any time.

Legal obligation

We may process and retain certain information when required to comply with applicable laws, accounting duties, legal requests or regulatory obligations.

6. Cookies and similar technologies

GramGrid may use cookies, local storage and similar technologies to keep the platform functional and secure. Some cookies are essential for the service to work, while others may be optional.

Essential cookies

These are required for login sessions, account security, CSRF protection, language settings or remembering basic interface preferences. Without them, parts of the service may not work properly.

Analytics cookies

If analytics tools are enabled, they may help us understand how visitors use the website, which pages are useful and where improvements are needed. Where required by law, we will ask for consent before setting non-essential analytics cookies.

Managing cookies

You can control cookies through your browser settings. Blocking some cookies may affect login, dashboard access or preview functionality.

7. When we share information

We do not sell personal data. We may share limited information only when it is necessary to operate the service, comply with law or protect our rights.

We may share information with:

• hosting providers and server infrastructure providers;
• email or communication providers used for account or support messages;
• analytics or monitoring providers, if enabled;
• professional advisers, legal authorities or regulators where required;
• another party if the service is involved in a business transfer, merger, acquisition or restructuring.

Client approval links are designed as view-only previews. Anyone with the link may be able to view the shared project preview unless the link is disabled or access settings are changed. Only share approval links with people who are intended to view the project.

8. International data transfers

Depending on the hosting, infrastructure, support or analytics providers used, personal data may be processed in countries outside your own country. If GDPR applies and personal data is transferred outside the European Economic Area, we aim to use appropriate safeguards such as contractual protections or other lawful transfer mechanisms.

9. How long we keep data

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Account data is usually kept while the account remains active.
• Project data and uploaded media are usually kept until the user deletes the project, removes the media or closes the account.
• Client preview links may remain available until disabled, deleted or expired, depending on project settings.
• Server logs and security records may be kept for a limited period to protect the service and investigate issues.
• Support messages may be kept as needed to resolve requests and maintain business records.

When data is no longer needed, we will delete, anonymize or securely archive it where appropriate.

10. Your privacy rights

Depending on your location and applicable law, you may have rights over your personal data. Under the GDPR, these rights may include:

• the right to access the personal data we hold about you;
• the right to correct inaccurate or incomplete data;
• the right to request deletion of your personal data;
• the right to restrict or object to certain processing;
• the right to data portability, where applicable;
• the right to withdraw consent where processing is based on consent;
• the right to complain to a data protection authority.

To exercise your rights, contact us using the details in the Contact section. We may need to verify your identity before responding to certain requests.

11. Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration or disclosure. These measures may include account authentication, access controls, hashed passwords, HTTPS, server-side protections, storage controls and monitoring for suspicious activity.

No online service can guarantee absolute security. Users are responsible for keeping login credentials safe, choosing strong passwords and sharing client preview links carefully.

12. User content and client materials

GramGrid is designed for planning visual content. You should only upload media, client details and profile information that you have the right to use and share. Do not upload sensitive personal data, confidential client information or third-party content unless you have permission and a lawful basis to do so.

If you use GramGrid on behalf of clients, you are responsible for ensuring that your client work, uploads, profile previews and shared approval links comply with your own legal and contractual obligations.

13. Children’s privacy

GramGrid is intended for professional, business and creator use. It is not directed to children. We do not knowingly collect personal data from children under the age required by applicable law. If you believe a child has provided personal data to us, contact us and we will take appropriate steps.

14. Third-party websites and services

The GramGrid website or dashboard may contain links to third-party websites or services. We are not responsible for the privacy practices, content or security of third-party services. Review their privacy policies before providing personal data to them.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify users by posting a new version on this page or by using other appropriate communication methods. The “Effective date” at the top of this page shows when this policy was last updated.

16. Contact us

If you have questions about this Privacy Policy, your personal data or your privacy rights, contact us: