Legal
Privacy Policy
Last updated: 1 January 2026
1. Introduction
GraftPal ("we", "us", or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services (collectively, the "Service").
2. Information We Collect
We collect information in the following ways:
- Account Information: Name, email address, company name, and billing details when you register.
- Usage Data: How you interact with the Service, including pages visited, features used, and session duration.
- Client Data: Information you input about your clients, leads, invoices, and other business data.
- Device Information: Browser type, operating system, IP address, and device identifiers.
- Cookies: We use cookies and similar technologies as described in our Cookie Policy.
3. How We Use Your Information
- To provide, operate, and maintain the Service
- To process transactions and send billing-related communications
- To improve and personalise your experience
- To communicate with you about updates, features, and support
- To detect, prevent, and address fraud or technical issues
- To comply with legal obligations
4. Data Sharing
We do not sell your personal data. We may share your information with trusted third-party service providers who assist us in operating the Service (e.g., payment processors, hosting providers, email delivery services). These providers are contractually obligated to protect your data and use it only for the purposes we specify.
5. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. If you cancel your account, we will delete or anonymise your data within a reasonable timeframe, unless we are required to retain it for legal or regulatory purposes.
6. Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Data portability (receive your data in a structured format)
- Withdraw consent at any time
To exercise any of these rights, contact us at privacy@graftpal.com.
7. Security
We implement industry-standard security measures to protect your data. However, no method of transmission over the internet is 100% secure.
8. International Data Transfers
Your data may be transferred to and processed in countries outside your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses and adequacy decisions, in compliance with applicable data protection laws.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. Your continued use of the Service after changes constitutes acceptance.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us at privacy@graftpal.com.