1. Scope
This Privacy Policy applies to the GridCrew website, application, API, webhooks, support, and related services. It does not cover third-party products or destinations that you connect to GridCrew. Their privacy practices are governed by their own policies.
2. Information we collect
Information you provide
- account and profile details, such as name, email address, profile image, password credentials handled by our authentication provider, and organization membership;
- workspace content, including folders, boards, rows, typed values, views, dashboards, updates, mentions, attachments, roles, and activity;
- support messages, product feedback, survey responses, and other communications; and
- billing and transaction records when paid plans launch. Full card details will be collected by Paddle, not GridCrew.
Information from sign-in and integrations
If you choose Google sign-in, we receive the basic account data needed to authenticate you, such as your Google account identifier, name, email address, and profile image. GridCrew requests basic identity scopes and does not store Google provider access tokens. Connected services may provide data you authorize them to send.
Information collected automatically
- device, browser, IP address, approximate location derived from IP, referral, and request information;
- application and security logs, sign-in records, timestamps, error reports, and diagnostic information;
- feature interaction and website analytics; and
- API-key metadata, API requests, webhook configuration, delivery attempts, status codes, and limited error responses needed to operate and troubleshoot integrations.
3. How we use information
We use personal information to:
- provide, authenticate, maintain, and support GridCrew;
- create and administer organizations, permissions, boards, integrations, and collaboration features;
- secure the Service, prevent abuse, investigate incidents, and enforce our terms;
- process future subscriptions, taxes, cancellations, and refunds through Paddle;
- communicate service notices, invitations, support responses, and important policy updates;
- understand performance and improve usability and reliability; and
- comply with law and protect legal rights.
4. Legal bases
Where a legal basis is required, we process information to perform our contract with you; pursue legitimate interests such as providing, securing, and improving the Service; comply with legal obligations; protect vital interests; or act with consent. You may withdraw consent at any time, without affecting earlier processing.
6. Service providers
We use carefully selected providers to operate GridCrew. A provider is used only when its corresponding feature is configured or used.
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, and file storage |
| Vercel | Application hosting, delivery, and website analytics |
| Optional Google account sign-in | |
| Paddle | Future payment processing and Merchant of Record services |
| Resend | Transactional email where enabled |
| Cloudmersive | Attachment security scanning where enabled |
| Sentry | Application error monitoring where enabled |
7. Retention
We retain personal information only as long as reasonably necessary for the purposes described here, including providing the Service, preserving workspace history, complying with law, resolving disputes, preventing abuse, and enforcing agreements. Retention varies by data type, account status, workspace settings, legal requirements, and backup cycles.
When information is no longer required, we delete or de-identify it. Limited copies may remain temporarily in protected backups or where retention is required by law. Workspace administrators may be able to export or delete data; contact us for account-level requests.
8. Security
We use administrative, technical, and organizational measures designed to protect personal information. These include tenant-aware access controls, encrypted transport, protected infrastructure, credential safeguards, activity records, and secure software practices. No method of storage or transmission is completely secure. Read more on our Security page.
10. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information, and to appeal a denied request. You may also withdraw consent and complain to a data-protection authority.
Submit a request to support@fotomaster.com. We may need to verify your identity and authority. If the data is controlled by your employer or another GridCrew customer, please contact that organization first; we will assist it as required. We will not discriminate against you for exercising a privacy right.
11. International transfers
GridCrew and its providers may process information in the United States and other countries that may have different data-protection laws. Where required, we use recognized safeguards for international transfers, such as contractual protections, and apply additional measures appropriate to the data and risk.
12. Children
GridCrew is intended for business users who are at least 18 years old. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can review and delete it where appropriate.
13. Changes to this Policy
We may update this Policy as our practices, providers, or legal requirements change. We will post the new version, update the effective date, and provide additional notice if a change materially affects your rights.
14. Contact
For privacy questions or requests, contact:
Foto Master LLC1013 Centre Road, STE 403-B, Wilmington, DE 19805, United States
support@fotomaster.com
+1 (203) 349-4483