Privacy Notice
Last updated: July 1, 2026
Who we are
This Privacy Notice describes how GridMind EPC ("GridMind", "we") collects, uses and shares personal data. For personal data processed to provide the Service to you, GridMind acts as the data controller.
What data we collect
- Account data: name, email, password hash, organization, role.
- Content data: projects, engineering inputs, cost estimates, proposals, contacts, and other content you submit to the Service.
- Support communications: messages you send us.
- Usage & telemetry: pages viewed, features used, timestamps, device identifiers, IP address, and error diagnostics.
- Cookies: essential cookies for authentication and session state.
Why we use it (purposes and legal basis)
- Provide the Service (contract performance): create accounts, authenticate, deliver features, sync data across your team.
- Support (contract performance): respond to your requests.
- Security & fraud prevention (legitimate interests): detect abuse, protect accounts, and investigate incidents.
- Product improvement (legitimate interests): understand feature usage and diagnose issues.
- Legal compliance (legal obligation): meet applicable laws and respond to lawful requests.
- Marketing (consent, where required): occasional product updates you can unsubscribe from at any time.
Who we share it with
We share personal data with the following categories of recipients:
- Service providers / subprocessors: cloud hosting, database and analytics providers who process data on our behalf under written agreements.
- Merchant of Record: Paddle.com Market Ltd. handles all sales, subscription management, payments, tax compliance and invoicing for GridMind purchases.
- Professional advisers: legal, accounting and compliance advisers where necessary.
- Authorities: where required by law, court order, or to protect our rights or the safety of others.
International transfers
Where personal data is transferred outside your country of residence, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions, depending on the jurisdictions involved.
Retention
We retain personal data only for as long as needed to provide the Service and comply with our legal obligations. When no longer needed, data is deleted or anonymized. Account and content data are retained for the life of your account and for a reasonable period after termination to allow for export.
Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You can also complain to your local data protection authority. To exercise any of these rights, email privacy@gridmindepc.com. We respond within one month.
Security
We implement appropriate technical and organizational measures to protect personal data, including encryption in transit, role-based access controls, and row-level security on all customer data at the database layer.
Cookies
We use essential cookies to keep you signed in and to remember your preferences. We do not use advertising cookies. If we introduce optional analytics or marketing cookies in the future, we will present a cookie choice at that time.
Contact
Privacy questions or requests: privacy@gridmindepc.com.