Privacy Policy

1. Data we collect

Waitlist: Email address.

App: Name, email, phone number, business details, job data, voice notes, photos, Telegram ID, and usage data.

Cookies: Session cookies to keep you logged in, and Google Analytics cookies (only if you consent) to understand how people find and use the site.

2. How we use it

We use your data to provide the service, process payments, send you relevant communications, and improve Graft. We do not sell your data.

3. Third-party processors

We use: Supabase (EU) for data storage, OpenAI (we do not use your data for model training), Twilio for SMS, Telegram for messaging, Stripe for payments, Google Analytics (only with your consent) for website analytics, and Vercel for hosting.

We do not sell your data to anyone.

4. Retention

Waitlist data is kept until you unsubscribe. App data is retained for 30 days after account closure. Google Analytics data is retained for 14 months.

5. UK GDPR rights

You have the right to access, correct, delete, object to processing, and request portability of your data. You can withdraw consent at any time.

6. Cookie policy

Essential: graft_session (7 days), graft_cookie_consent (1 year) — these keep the site working and remember your cookie preferences.

Analytics (consent only): ga, _ga* (2 years) — Google Analytics, only loaded if you choose "Accept all" cookies.

7. Contact & complaints

Questions: privacy@graft.systems

You can complain to the ICO (Information Commissioner's Office) if you believe we have mishandled your data.

← Back to home