1. Introduction & Data Controller
Gramim ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy informs you how we collect, process, and safeguard your data when you visit our website or use our cloud application.
2. Information We Collect
- Account Data: Email address, name, password hash, account preferences;
- OAuth Profile Data: Google or Telegram profile ID, username, and public avatar URL;
- Technical & Usage Data: IP address, device information, browser type, referral URLs, and session cookies.
3. Legal Bases for Processing (GDPR Art. 6)
We process your personal data under the following legal bases:
- Performance of a Contract: To provision the services you registered for;
- Legitimate Interests: To secure our network, prevent fraud, and optimize application performance;
- Consent: Where explicitly provided (e.g., marketing communications or optional cookies).
4. Your Data Protection Rights
Under GDPR and applicable privacy legislation, you have the right to:
- Access, update, or erase the personal information we hold about you;
- Object to or restrict our processing of your personal data;
- Request data portability in a structured, machine-readable format;
- Withdraw your consent at any time without affecting the lawfulness of prior processing.
5. Data Retention & Sub-processors
We retain personal data only as long as necessary to fulfill the purposes outlined herein or as required by law. We use trusted infrastructure providers (Supabase, Fly.io, Upstash) bound by strict Data Processing Agreements (DPAs).
6. Contact Our Privacy Team
If you have questions or wish to exercise your rights, please email: privacy@gramim.cc.