Privacy policy

Personal information is all kinds of information that to some extent can be attributed to you. When you use our website, we collect and process a number of such information. It happens e.g. by ordinary access to content, if you sign up for our newsletter, participate in contests or surveys, register as a user or subscriber, otherwise use the Services or make purchases through the Website.

We typically collect and process the following types of information: a unique ID and technical information about your computer, tablet or mobile phone, your IP number, geographical location, and which pages you click on (interests). To the extent that you yourself give explicit consent to this and enter the information yourself, the following are also processed: name, telephone number, e-mail, address and payment information. This will typically be in connection with creating a login or purchasing.

GRAND collects and processes your personal data when you do the following:

a) Visit our website
b) Register as a user
c) Sign up for our newsletter
d) Sign up for early access
e) Send us questions, insights and complaints
f) Start a chat with us

The data controller responsible for the collection, processing and use of your personal information on grandsystems.com is:

Grand Systems ApS
Højbro Plads 10
1200 København K
hello@grandsystems.com

We collect your general contact information such as name and address in order to deliver the product or service that you have purchased from us. We will collect your e-mail address in order to send you an order confirmation and a delivery confirmation.

If you have given us your consent during the registration process or on our website, we will use your e-mail address to send out a newsletter. You can sign up for and unsubscribe from the newsletter at any time. All newsletters also contain a link to unsubscribe. If the processing of personal data is based on your consent, you have the right to revoke the consent at any time.

Your information (except your e-mail address if you have given consent to its processing for the purpose of receiving offers) will be deleted 2 years after the last processing, unless we are required by law to store the information longer than that. It will usually be 5 years plus current years, according to the Accounting Act.

When an authorised user connects Gmail to GRAND, we access email metadata, message content, attachments and basic account information. We use this data to display and organise correspondence, connect emails with customers and bookings, process booking requests, prepare draft replies and send messages authorised by the user.

We share Google user data only with service providers necessary to deliver this functionality:

• Amazon Web Services EMEA SARL (AWS) provides hosting, encrypted database and file storage, backups and AI processing through Amazon Bedrock.
• Langfuse GmbH provides monitoring and troubleshooting of GRAND’s AI functionality. Prompts and responses sent to Langfuse may contain email content and contact information and are automatically deleted after seven days.

Google user data is encrypted in transit using HTTPS/TLS and encrypted at rest within AWS. Access is restricted to authorised personnel, and OAuth credentials are stored securely with restricted access.

Imported emails and attachments are retained while needed to provide the service and may be deleted by authorised users. Disconnecting Gmail removes GRAND’s locally stored OAuth credentials and stops future access, but does not automatically delete previously imported data. Deleted database records may remain in encrypted backups for up to ten days.

We do not sell Google user data, use it for advertising or credit assessment, or use it to create, train or improve general-purpose or non-personalised AI or machine-learning models.

GRAND’s use and transfer of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.