Privacy Policy

1. Introduction

GramSpec ("we", "us", "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you consent to the practices described here.

2. Information We Collect

Account Information

When you register, we collect your name, email address, phone number, company name, and job title. This information is used to create and manage your account.

Usage Data

We log AI API calls (timestamps, token counts, response times) to monitor service health, enforce usage limits, and improve the product. Logs are associated with your account but we do not store the content of your prompts or AI responses long-term.

Cookies & Local Storage

We use essential cookies for authentication (session management). We may use analytics cookies to understand how visitors interact with our public pages. You can manage cookie preferences via the consent banner shown on your first visit.

3. Payment Processing

Payments are processed by Stripe. We do not store your credit card number or full payment details on our servers. Stripe handles payment data in accordance with PCI-DSS standards. We store only your Stripe Customer ID and Subscription ID for managing your plan.

4. How We Use Your Information

• To provide and maintain the Service.
• To manage your account and subscription.
• To communicate important updates (e.g., billing, security).
• To monitor and enforce usage limits.
• To improve the Service based on aggregated, anonymized usage patterns.

5. Data Sharing

We do not sell your personal information. We may share data with:

• Stripe — for payment processing.
• AI providers (e.g., Google Gemini, OpenAI) — prompts are sent to generate responses. We do not send your personal account details to AI providers.
• Law enforcement — if required by law or to protect our rights.

6. Data Retention

We retain your account data for as long as your account is active. If you close your account, we deactivate it and may retain minimal records for legal and accounting purposes. Usage logs are retained for up to 12 months and then aggregated or deleted.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. You can update your profile information from your account page, or contact us to request data export or deletion.

8. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and secure hosting. However, no method of transmission over the Internet is 100% secure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated date. Continued use of the Service after changes constitutes acceptance.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at our contact page.