1. Information We Collect

We collect the following information when you use GridPilot:

Account information: Email address and authentication credentials
Uploaded content: Photographs you upload for tray design
Project data: Tray layouts, tool outlines, and design configurations you create
Billing data: Payment processing is handled entirely by Stripe; we store only your Stripe customer ID and subscription status, never your card details
Usage data: Export history and area usage for billing purposes

2. How We Use Your Information

We use your information to:

Provide and operate the Service (process images, generate 3D models)
Manage your account and subscriptions
Track usage against your plan limits
Send transactional emails (account confirmation, password reset)
Respond to support requests

We do not use your photographs or designs for AI training, advertising, or any purpose other than delivering the Service to you.

3. Data Storage and Security

Your data is stored on servers hosted by Vultr in the United States. All connections are encrypted via HTTPS/TLS. Uploaded photographs are processed server-side and stored only for the duration needed to provide the Service. We use industry-standard security practices including encrypted connections, hashed credentials, and access controls.

4. Third-Party Services

We use the following third-party services:

Supabase: Authentication (email/password, magic links)
Stripe: Payment processing
Cloudflare: DNS and DDoS protection
Resend: Transactional email delivery

Each service processes data in accordance with their own privacy policies. We do not sell or share your personal information with any other third parties.

5. Cookies

GridPilot uses only essential cookies required for authentication and session management. We do not use tracking cookies, analytics cookies, or advertising cookies.

6. Data Retention

Your project data and uploaded images are retained as long as your account is active. If you delete a project, its data is removed within 7 days. If you delete your account, all associated data is removed within 30 days. Database backups containing deleted data are rotated out within 7 days.

7. Your Rights

You have the right to:

Access: Request a copy of the data we hold about you
Correction: Update your account information
Deletion: Delete your account and all associated data
Export: Download your designs and exported files

To exercise these rights, email [email protected].

8. Children's Privacy

GridPilot is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this Privacy Policy? Email us at [email protected].