Privacy Policy

This Privacy Policy describes how Grant Llama B.V. collects, uses, and protects personal data in connection with the use of the Grant Llama Platform.

1. Data Controller

1.1. Grant Llama B.V. is the data controller responsible for personal data processed through the Platform, in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws.

1.2. For privacy-related inquiries, Customers and Users may contact us at privacy@grantllama.com.

2. Data We Collect

2.1. Account Data – Name, email address, job title, and company name provided during registration.

2.2. Usage Data – Information about how Users interact with the Platform, including features accessed, actions taken, and session duration.

2.3. Content Data – Tasks, documents, notes, and other content created or uploaded by Users within the Platform.

2.4. Technical Data – IP addresses, browser type, device information, and cookies used for Platform functionality and security.

2.5. Billing Data – Payment information collected and processed securely through our third-party payment provider. Grant Llama does not store full payment card details.

3. How We Use Your Data

3.1. To provide, maintain, and improve the Platform and its features.

3.2. To manage subscriptions, process payments, and communicate about account activity.

3.3. To send product updates, security alerts, and support communications.

3.4. To analyze usage patterns and improve the user experience.

3.5. To comply with legal obligations and enforce our Terms of Service.

4. Legal Basis for Processing

4.1. Contract performance – Processing necessary to provide the Platform services under the subscription agreement.

4.2. Legitimate interests – Processing for security, fraud prevention, and product improvement.

4.3. Legal obligation – Processing required to comply with applicable laws and regulations.

4.4. Consent – Where required, for marketing communications. Users may withdraw consent at any time.

5. Data Retention

5.1. Account and content data is retained for the duration of the active subscription and for 30 days following termination.

5.2. Usage and technical data may be retained in anonymized form for analytical purposes beyond the subscription period.

5.3. Billing records are retained for as long as required by applicable tax and financial regulations.

6. Data Sharing

6.1. Grant Llama does not sell personal data to third parties.

6.2. Data may be shared with trusted subprocessors who assist in delivering the Platform, including cloud infrastructure providers, payment processors, and analytics tools. All subprocessors are bound by data processing agreements.

6.3. Grant Llama may disclose data where required by law, court order, or regulatory authority.

7. Data Security

7.1. Grant Llama implements industry-standard security measures including encryption in transit and at rest, access controls, and regular security audits.

7.2. In the event of a data breach that affects personal data, Grant Llama will notify affected Customers in accordance with applicable legal requirements.

8. Your Rights

8.1. Under GDPR, Users have the right to access, correct, delete, and port their personal data.

8.2. Users may object to or request restriction of certain processing activities.

8.3. To exercise these rights, contact us at privacy@grantllama.com. We will respond within 30 days.

9. Cookies

9.1. Grant Llama uses cookies and similar technologies to maintain sessions, remember preferences, and analyze Platform usage.

9.2. Non-essential cookies are only placed with the User's consent. Users may manage cookie preferences through their browser settings or our cookie consent tool.

10. International Transfers

10.1. Grant Llama primarily processes data within the European Economic Area (EEA). Where data is transferred outside the EEA, appropriate safeguards such as Standard Contractual Clauses are applied.

11. Changes to This Policy

11.1. Grant Llama may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 14 days before taking effect.

11.2. The current version of this Privacy Policy is always available at grantllama.com/privacy-policy.