Privacy Policy
Core Grid AI ("Core Grid AI", "we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you use our website, products, and Software‑With‑a‑Service (SWaS) solutions (collectively, the "Services").
We comply with applicable privacy laws including the UK GDPR, EU GDPR, and the California Consumer Privacy Act (CCPA/CPRA) where applicable.
1) Who We Are
Controller: Core Grid AI. Contact: support@coregrid.site.
2) What We Collect
Data You Provide
- Contact details (name, email, phone, company, role)
- Account and billing data (billing contact, addresses)
- Content you submit (requests, messages, files)
Data We Collect Automatically
- Usage data, device data, log files, diagnostics
- Cookies/identifiers (analytics, preferences, security)
- Geolocation (approximate, from IP)
Data from Clients & Integrations
When you connect third‑party platforms (e.g., ads, CRM, calendars, payment processors), we process data as a processor/service provider under a Data Processing Addendum (DPA). We only process such data per your documented instructions.
3) How We Use Personal Data
- Provide, maintain, and improve the Services
- Operate AI agents, qualification workflows, and reporting
- Authenticate, secure, and prevent fraud/abuse
- Customer support, training, and service communications
- Billing, account management, and compliance
- R&D, analytics, and product development (with safeguards)
- Marketing with consent and lawful basis; opt‑out anytime
4) Legal Bases (GDPR/UK GDPR)
- Performance of a contract
- Legitimate interests (e.g., securing, improving Services)
- Consent (e.g., marketing cookies, newsletters)
- Legal obligation (e.g., tax, accounting, KYC/AML where required)
5) Sharing & Disclosure
- Vetted subprocessors for hosting, analytics, communications, payments
- Professional advisors (legal, accounting, security)
- Transfers as required by law or to protect rights/safety
- Business transfers (merger, acquisition) with notice
International transfers use appropriate safeguards (SCCs/UK IDTA, adequacy, or equivalent).
6) Security
We use administrative, technical, and physical safeguards aligned with industry standards (encryption, access controls, least‑privilege, logging, regular reviews). Cardholder data is handled only by PCI‑DSS certified processors.
7) Data Retention
We retain personal data only as long as needed for the purposes stated or as required by law. Client data processed as a processor is retained per contract and deleted or returned upon termination or request, subject to legal holds and backups.
8) Your Rights
Depending on your location, you may have rights to access, correct, delete, restrict, object, port data, and withdraw consent. To exercise rights, email support@coregrid.site. You may also lodge a complaint with your local authority.
9) Cookies & Tracking
We use necessary cookies for core functionality and optional cookies for analytics and marketing with consent. You can manage preferences via our cookie banner or browser settings.
10) Children
Our Services are not directed to children under 16 and we do not knowingly collect data from them.
11) Contact
Questions? support@coregrid.site
12) Changes to This Policy
We may update this policy from time to time. If changes are material, we will provide notice and update this page.