Privacy policy

Greppi is a product of IT Solutions B.V., Essebaan 15 A, 2908 LJ Capelle aan den IJssel, The Netherlands. We are the controller for the data described here. For anything about your data, write to support@greppi.ai.

• Account data — your email address, your login details and when you verified the address.
• Your projects — the prompts and files you send, the conversation with the platform, the apps it builds for you, and the data those apps store.
• Usage — what each message cost in credits, so we can show you a receipt and bill correctly.
• Billing data — your plan, renewal date and invoices. Card details are handled by Stripe and never stored by us.
• Domains and email — the domains you connect or buy and, for a bought domain, the registrant details the registrar requires.
• Technical logs — IP addresses and timestamps of requests, kept for a short time to keep the platform running and safe.

We process this data to provide the service you signed up for (the agreement between us), to bill you (a legal obligation and the agreement), to keep the platform secure and improve it (our legitimate interest), and to send you the emails the service needs, such as verification and receipts. We do not sell data, and we do not use your projects to train AI models.

We use a small number of service providers to run the platform. They act on our instructions, under data-processing agreements:

• Stripe, our payment provider (Ireland / USA) — payments and invoices; your card details never reach us.
• Hosting and infrastructure providers (USA) — running the platform and keeping its backups.
• AI and software service providers (USA) — services that help build and run your apps.
• Email and domain service providers (EU, Switzerland, USA) — sending email, hosting mailboxes and registering domains.

Where data leaves the European Economic Area, the transfer rests on the European Commission's Standard Contractual Clauses or, for the USA, on the EU-US Data Privacy Framework where the provider is certified.

Your account, projects and their data stay for as long as your account exists. Delete your account and they are removed; copies in backups disappear within thirty days. Invoices are kept for seven years, as Dutch tax law requires. Technical logs are kept for at most ninety days.

The apps you build may collect data from their own users. For that data you are the controller and we are your processor: we host it and do nothing else with it. It is up to you to tell your users what your app collects.

Under the GDPR you can ask to see the data we hold about you, have it corrected or deleted, receive a copy, or object to a use of it. Most of this you can do yourself from your account page; for the rest, write to support@greppi.ai and we answer within a month. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

We use one cookie to keep you signed in and one to remember your theme, and nothing for advertising or analytics. Details are on the cookies page.

We may update this policy. A change that matters to you is announced by email before it takes effect.