Privacy Policy
This policy explains how [Gridly Ltd], London, United Kingdom ("we") handles personal data when you use Gridly. We act as a controller for account and billing data, and as a processor for the content you store in your workspaces. We comply with the UK GDPR and the Data Protection Act 2018.
1. Data we collect
- Account data — name, email address, hashed password (we never store plaintext passwords), and email-verification status.
- Workspace content — the tables, records, and files you create. This is yours; we process it to provide the Service.
- Billing data — handled by our payment processor (Stripe). We store your subscription status and a Stripe customer reference; we do not store your card details.
- Usage & technical data — IP address, request logs, and basic operational metrics used for security and reliability.
2. How we use it & legal bases
- To provide and operate the Service (performance of a contract).
- To secure the Service, prevent abuse, and enforce limits (legitimate interests).
- To process payments and send service/billing emails (contract; legitimate interests).
- To comply with legal obligations.
3. Sharing & subprocessors
We share data only with providers that help us run the Service, under appropriate agreements:
- Stripe — payment processing.
- Cloudflare — networking, security, and content delivery.
- Email delivery — transactional emails (verification, password reset, receipts).
- Hosting/infrastructure — the servers and database that run Gridly.
We do not sell personal data.
4. Retention
We keep account and workspace data while your account is active. After deletion we remove or anonymise personal data within a reasonable period, except where we must retain it for legal, accounting, or security reasons.
5. Your rights
Subject to UK GDPR, you may request access, correction, deletion, restriction, portability (export), or object to certain processing. You can export your data from within the app, and you can delete your account. To exercise other rights, contact [email protected]. You may also complain to the UK Information Commissioner's Office (ICO).
6. Security
We use encryption in transit, hashed passwords, per-workspace data isolation, access controls, and rate limiting. No system is perfectly secure, but we work to protect your data and will notify you of breaches as required by law.
7. International transfers
Where data is processed outside the UK, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.
8. Changes & contact
We may update this policy and will post the new version with a date. Questions or requests: [email protected].