Privacy policy.

GridSpell may collect information you provide directly, including your name, email address, phone number, company, project requirements, files, messages, approvals, support requests, and billing-related details.

When you use the website or client portal, technical information may also be processed, including IP address, browser and device information, page activity, authentication events, error details, and security signals used to protect forms and accounts.

Information is used to respond to inquiries, assess project fit, prepare proposals, deliver services, operate the client portal, communicate project updates, process payments, provide support, improve website performance, measure marketing activity, prevent abuse, and meet legal or accounting obligations.

GridSpell does not sell personal information.

Payments are processed by Stripe. GridSpell receives transaction status, customer identifiers, invoice references, and limited billing information required to maintain project records. Full payment-card numbers are not stored in the GridSpell database.

GridSpell uses carefully selected providers to operate the business and website. These may include Vercel for hosting, Supabase for database and authentication services, Resend for transactional email, Stripe for payments, Cloudflare Turnstile for bot protection, Google Analytics for website measurement, and Sentry for error monitoring.

These providers may process information in jurisdictions outside your province or country under their own contractual and security obligations.

The website may use essential cookies for authentication and security. If analytics is enabled, measurement technologies may collect information about pages viewed, device type, referral source, and actions taken on the site.

You can limit cookies through your browser settings. Blocking essential authentication cookies may prevent the client portal from working correctly.

Information is retained only for as long as reasonably required for inquiries, active projects, client support, financial records, security, dispute resolution, and legal obligations. Retention periods vary by record type.

GridSpell uses access controls, encrypted connections, role-based permissions, database security policies, account authentication, monitoring, and restricted administrative access. No online system can be guaranteed completely secure.

You may ask to access, correct, or delete personal information held by GridSpell, subject to identity verification and any records that must be retained for legal, security, contractual, or accounting reasons.

Privacy requests can be sent to privacy@gridspellstudio.com.

This policy may be updated as the website, services, or legal requirements change. The current version will be posted on this page with its effective date.