⚠️ Template for development. Have qualified counsel review and complete this before publishing — especially the TCPA, GDPR/CCPA and data-processing sections, given Grandeza's business.
1. Who we are
Grandeza ("we", "us") provides compliance engineering, documentation and monitoring for customer-intake systems. This policy explains how we handle information when you use grandeza.io and our services.
2. Information we collect
- Information you give us — name, company, email, phone, and details about your intake setup when you request a scan or contact us.
- Usage data — standard analytics about how you use the site (pages, device, referrer), collected with your consent.
- Client engagement data — during an engagement, the compliance evidence and configuration needed to harden and document your systems.
3. How we use it
To deliver your scan and services, communicate with you, improve the site, and meet legal obligations. We do not sell your personal information.
4. Cookies & analytics
We use essential cookies to run the site and, with your consent, analytics cookies to measure what's working. You can accept or limit these via our consent banner.
5. How we protect & retain data
Data is encrypted in transit and at rest, access is role-based, and we hold ourselves to the same retention and deletion discipline we build for clients. We keep information only as long as needed for the purposes above or as required by law.
6. Your rights
Depending on where you live (e.g., under CCPA/GDPR), you may have rights to access, correct, delete or port your information, and to opt out of certain processing. Contact us to exercise them.
7. Sharing
We share information only with service providers who help us operate (under contract), or where required by law. [List sub-processors here.]
8. Contact
Questions or requests: privacy@grandeza.io.