Privacy

What Grasp collects, why, and who else sees it.

This document is being finalised. The sections below describe exactly how Grasp handles your information today, in plain language, while the formal wording is prepared. If anything here matters to a decision you're making, email contact@grasptechnology.com and a person will answer.

What we collect

From the signup form on this site: your name and email address, and nothing else.
From a purchase: your email, shipping and billing address, phone number if you give one, and what you bought. Card details are entered on Stripe's payment page and never reach a Grasp server.
Marketing attribution on a signup: the source, campaign and page you arrived from, and the referring site.
Whether an email we sent was delivered, opened or clicked, and whether it bounced or was reported as spam.

Why we hold it

To fulfil an order, send a receipt, and answer questions about it afterwards.
To send product updates and early-access email, which you can stop at any time from the link in any of them.
To keep a record of what we sent you and whether it arrived, which is how we avoid mailing an address that has already bounced or asked us to stop.

Who else sees it

Stripe processes payments and holds the card details we never see.
Resend delivers our email and reports back on delivery.
Supabase hosts the database and file storage.
Vercel hosts the site itself.
Cloudflare Turnstile checks that form submissions come from a person, where it is enabled.
Anthropic's API drafts marketing email copy for our team to edit. Customer data is not sent to it.
Nothing is sold, and nothing is shared for anyone else's advertising.

Your choices

Every marketing email carries an unsubscribe link, and using it stops marketing email immediately. Order confirmations and refund notices still send, because they are about a transaction you started.
You can see your own orders at /store/orders by entering your email and the six-digit code we send to it. There is no account and no password.
To see what we hold about you, email contact@grasptechnology.com.

Deleting your data

To have your information deleted, email contact@grasptechnology.com from the address you used with us and ask. A person handles every request.
That removes your contact record and the details you gave when you signed up.
Orders are the exception: they are kept as accounting records, as described below.
Unsubscribing is not the same as deletion. It stops marketing email but keeps the record, which is what stops us mailing you again.
The Instagram posts on this site are Grasp's own. Nobody signs in to this site with Facebook or Instagram, and we receive no data about you from either.

How long we keep it

Orders are kept as business records, because they are accounting documents as well as your receipt.
One-time login codes are deleted shortly after they expire; they are stored hashed and are never readable, including by us.
The formal retention periods are part of the wording still being finalised.

Questions about any of this go to contact@grasptechnology.com. Back to the site