Privacy policy
Last updated 25 October 2026
Who we are
Gridline is a trading name of [Company name] Ltd, a company registered in England and Wales (company number [company number]), registered office [registered office address]. In this policy, "we", "us" and "our" mean [Company name] Ltd.
Questions about privacy, or a request about your data: email hello@getgridline.net.
Two kinds of data
Data about our customers and website visitors. When you visit this website, start a trial or subscribe, we decide how your data is used. We are the controller, and this policy explains what we do.
Data our customers put into Gridline. Our customers upload details of the people they contact (their "leads") and send emails through their own accounts. For that data, our customer is the controller and we are their processor: we only handle it on their instructions, under our data processing agreement. If you've been contacted by a business using Gridline, please contact that business. Every email sent through Gridline includes their details and a one-click unsubscribe link.
What we collect, and why
| Data | Why we use it | Lawful basis |
|---|---|---|
| Your name, email address, business name and password (stored hashed, never in plain text) | To create and run your account | Contract |
| Your business details for email footers (name, company number, address, privacy link) | To add them to the emails you send, as the law requires | Contract |
| Connected inbox details and app passwords (stored encrypted) | To send your emails and read replies on your behalf | Contract |
| Billing details: plan, invoices and payment status. Card details are held by Stripe, never by us | To take payment and keep records | Contract and legal obligation |
| Records of activity in your account, such as logins, campaign launches and settings changes | To keep the service secure, fix problems and give you an audit log | Legitimate interests |
| Messages you send us, and questions you ask Griddy | To answer you and improve our help | Legitimate interests |
| Technical data when you visit (IP address, browser type) | To deliver the website securely | Legitimate interests |
We don't sell your data, and we don't use advertising or analytics trackers on this website or in the app.
Cookies
The app uses one essential cookie to keep you logged in. It also remembers your light or dark display choice in your browser. Neither is used for tracking, so we don't need to ask for consent. This website sets no cookies.
Who we share data with
We use a small number of trusted providers to run Gridline:
| Provider | What they do | Where |
|---|---|---|
| Render Services, Inc. | Hosts the Gridline app and its database | Data stored in Frankfurt, Germany (EU) |
| Stripe Payments Europe, Ltd. and Stripe, Inc. | Takes subscription payments and stores card details | EU, UK and USA |
| Netlify, Inc. | Hosts this website | Global network, USA |
| Google LLC (Google Fonts) | Delivers the typeface used on our pages | Global network, USA |
| Anthropic, PBC | Powers Griddy's AI answers, if switched on. Receives your question and a summary of your account's setup, never lead names, email addresses or message content | USA |
| Adzuna | Searches job adverts when you use Growth signals with your own Adzuna key | UK |
The email account you connect (for example Google or Zoho) also processes your emails under your own agreement with them. We may share data if the law requires it, or with a buyer if the business is ever sold, in which case we'd tell you first.
International transfers
Some of our providers are based in, or can access data from, the USA. Where that happens we rely on UK adequacy regulations (including the UK–US data bridge, where the provider is certified) or on approved safeguards such as the UK International Data Transfer Agreement or Addendum.
How long we keep data
- Account data: while your account is open. When you close it, we delete account and lead data within 30 days, apart from backups, which roll off within a further 30 days.
- Billing records: 6 years, as UK tax law requires.
- Leads: our customers choose how long inactive leads are kept, and Gridline deletes them automatically.
How we protect it
All connections are encrypted (HTTPS). Passwords are hashed, inbox app passwords are encrypted, each customer's data is kept separate, and access to our systems is restricted. No system is perfectly secure, but we take care and will tell you promptly if something goes wrong that affects you.
Your rights
You can ask us for a copy of your data, or ask us to correct it, delete it, restrict how we use it, or give it to you in a portable format. You can also object to us using it for our legitimate interests. Email hello@getgridline.net and we'll respond within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, but please talk to us first.
Changes
If we change this policy in a way that matters, we'll update the date at the top and let customers know by email or in the app.