Privacy

Gridwright is run by HeySmile EOOD (Bulgaria, UIC 207603907), the controller of the data below. Contact: [email protected]. Full company details are on the privacy page of the Gridwright Store (gridwright.store/privacy).

What we keep

• Your account: your email, when the account was made, where you came from (a short source code such as "youtube", if a link carried one), and whether you had a trial. We need it to run your subscription (contract).
• Your subscription: its status and dates, and your Stripe customer number. Card details never reach us; Stripe keeps them.
• Payments: the amount and date of each paid invoice, for our accounts (legal duty).
• Downloads and tool opens: which pack or tool and when, to apply the trial and daily limits and stop abuse (legitimate interest). Kept 12 months.
• Your work in the tools: the settings and projects a tool keeps for you are saved with your account, so they open on any device you sign in on (contract). You can clear a tool's saved work by starting a new project in it; it is deleted with your account.
• Your Discord username: only if you type it in your account, to give you the member role in our Discord server while your plan runs (consent). We keep the username and your Discord id; remove it under Account at any time and the role goes with it.
• Your vote: which pack you chose in a members' vote.
• Sign-in: the code we email you is stored only as a scrambled hash for 10 minutes; your session is a cookie whose value we keep only as a hash, for up to 30 days.

Cookies and counting

We set one cookie, and only when you sign in: it keeps you signed in. We count page views on our server as daily totals per page and source, with no cookie, no script and nothing that identifies you; if your browser sends Global Privacy Control, the view isn't counted.

Two small notes stay in your own browser and are never sent to us: that you closed the tip beside the floating button (for that visit only), and, once you have signed in, that you are a member, so the button leads to your tools.

Who processes it for us

• Stripe (payments and the billing portal), which acts as its own controller for payment data.
• Cloudflare (hosting, the database in Western Europe, file storage).
• Resend (the emails we send you: sign-in codes and account emails).
• Discord, only if you give us your Discord username: we look it up in our own server and set the member role there.

Some of these companies are in the United States; transfers rely on the EU-US Data Privacy Framework or standard contractual clauses.

How long

Your account stays while you use Gridwright and for 2 years after your last sign-in or payment, then it is deleted. Payment records are kept as long as accounting law requires (in Bulgaria, 10 years).

Your rights

You can ask us for a copy of your data, to correct it, to delete your account, or object to how we use it: email us and we answer within 30 days. You can also complain to the Bulgarian Commission for Personal Data Protection or to the authority in your country.

Emails

We email you about your account and subscription (codes, trial reminders, receipts from Stripe, changes to these terms). We send nothing else unless you ask for it.