Who we are
This privacy policy explains how Recro LP, trading as Gridstate, collects, uses, and protects personal data in connection with gridstate.co.uk, in accordance with the UK GDPR and the Data Protection Act 2018.
What we collect and why
- Email address - collected when you sign in via magic link or subscribe to a paid plan. Used to authenticate your account and to communicate with you about your account or subscription.
- Payment details - handled directly by Stripe, our payment processor. Gridstate does not store your card details. We keep a reference to your Stripe customer and subscription IDs to manage billing.
- IP address - hashed before storage and used only to apply rate limits on sign-in and feedback submission. We never store your raw IP address.
- Saved regions and preferences - if you're on a Standard or Pro plan, the regions you save, any notes you add, and your alert settings are stored against your account so they sync across your devices.
- Feedback you submit - if you use the feedback feature, we store the message, your email address if you choose to provide one, the page you submitted it from, and your account tier at the time.
Cookies
Gridstate uses one essential cookie to keep you signed in. This cookie is required for the service to function and is not used for tracking or advertising. We do not currently use analytics or advertising cookies. If we add analytics tools (such as Google Analytics) in future, this policy will be updated to reflect that, and any non-essential cookies will only be set with your consent where required by law.
Legal basis for processing
We process your data to perform our contract with you (providing the service you've signed up for), to comply with legal obligations (such as tax and payment records), and, in the case of feedback data, based on your consent to submit it.
Who we share data with
We share data with the service providers who help us run Gridstate: Stripe (payments), Resend (sending sign-in and alert emails), Turso (database hosting), and Vercel (application hosting). These providers may process data outside the UK or EEA and maintain their own appropriate safeguards. We do not sell your data, and we do not share it with advertisers.
How long we keep it
We keep your data for as long as your account is active, and for a reasonable period afterward to meet legal and accounting obligations. Feedback submissions are kept to help us improve the service. We don't currently have a fixed automatic deletion schedule; if you'd like your data deleted sooner, contact us and we'll action it.
Your rights
Under UK GDPR, you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact hello@gridstate.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you believe your data has been mishandled.
Changes to this policy
We may update this policy from time to time. Material changes will be noted on this page.
Contact
Questions about this policy or your data: hello@gridstate.co.uk