Gridwell ("Gridwell," "we," "us," or "our") operates gridwell.app, along with the Notion templates and SaaS products we build and sell (together, the "Services"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Services, you agree to the practices described here.

1. Information we collect

We keep collection deliberately narrow. Depending on how you use the Services, we may collect:

  • Information you give us directly — your name, email address, and anything you write to us through the contact form, a scoping call booking, or email, including project details, budget range, and timeline you choose to share.
  • Purchase information — if you buy a template or product, our payment processor (e.g. Stripe or a similar provider) handles your card details directly; we receive confirmation of the purchase and the billing email, not your full card number.
  • Information collected automatically — standard technical data our hosting provider logs for any site visit, such as IP address, browser type, device type, and pages viewed. This is aggregate server-log data, not a tracking profile built about you.
  • Information from client work — if you engage us for a Notion system or custom software build, we may access business data you grant us to complete the project (e.g. a Notion workspace, a database, or API credentials). That data is used solely to deliver the engagement and is covered separately by the project agreement.

2. Cookies & tracking

gridwell.app does not run third-party advertising trackers. We may use strictly necessary cookies or local storage to keep the site functioning (for example, remembering a form's state) and, if we later add analytics to understand traffic patterns, we will update this policy first and use privacy-respecting tools that avoid selling or sharing personal data with ad networks.

3. How we use your information

  • To respond to inquiries and scope projects
  • To deliver purchased templates and products, and provide support for them
  • To build, test, and support custom software or Notion systems you've engaged us to build
  • To send transactional emails (purchase receipts, project updates, scheduling)
  • To improve the Services and troubleshoot issues
  • To meet legal, tax, and accounting obligations

We do not sell your personal information, and we do not use your contact details for unsolicited marketing you haven't asked for.

4. Who we share it with

We share information only with the service providers that make the Services work, and only to the extent needed:

  • Hosting & forms — our site is hosted on Netlify, which also processes contact-form submissions on our behalf.
  • Payments — template and product purchases are processed by a third-party payment processor, which handles and stores your payment details under its own privacy policy.
  • Scheduling & email tools — if you book a call or receive project emails, that's handled through standard scheduling and email delivery tools acting as processors on our behalf.

We do not share your information with data brokers, and we disclose it beyond these processors only if required by law or to protect our legal rights.

5. Data retention

We keep contact-form submissions and project records for as long as needed to respond to you, deliver the engagement, and satisfy accounting or legal record-keeping requirements, after which we delete or anonymize them. Purchase records are retained as required by tax law.

6. Your rights

If you're in the EU/EEA or UK (GDPR): you have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority. Where we rely on your consent, you can withdraw it at any time.

If you're a California resident (CCPA/CPRA): you have the right to know what personal information we hold about you, to request deletion, to correct inaccurate information, and to opt out of any sale or sharing of personal information — which we don't do. Exercising these rights won't result in discriminatory treatment.

To exercise any of these rights, email us at hello@gridwell.app. We'll respond within a reasonable time and may need to verify your identity first.

7. International data transfers

Gridwell operates as a remote studio, and the tools we use (hosting, email, payments) may process and store data outside your home country, including in the United States. Where required, we rely on those providers' standard safeguards (such as standard contractual clauses) for cross-border transfers.

8. Data security

We use reasonable technical and organizational measures — access controls, reputable third-party providers, and minimal data collection — to protect your information. No method of transmission or storage is 100% secure, so we can't guarantee absolute security, but we treat client and visitor data as something to protect by default, not an afterthought.

9. Children's privacy

The Services are intended for businesses and individuals over the age of 18. We don't knowingly collect information from children, and if we learn we've inadvertently done so, we'll delete it.

10. Changes to this policy

We may update this Privacy Policy as the Services evolve. If we make material changes, we'll update the "Last updated" date above and, where appropriate, let existing clients know directly. Continued use of the Services after a change means you accept the updated policy.

11. Contact us

Questions about this policy or how your data is handled? Reach out at hello@gridwell.app.