Draft — under review. This document is not yet in legal effect.

Privacy Policy

Last updated: July 2026 (draft)

1. Who we are

Gridview (“we”, “us”, “our”) operates the gridview.ai web application, a UK energy-sector analytics platform for renewable and battery asset owners. Our contact address is [email protected].

2. What data we collect

  • Account data: email address and a salted, hashed password when you register. We never store your password in plain text.
  • Usage data: pages visited and actions taken, collected via Cloudflare's edge network logs. These logs are retained for up to 30 days.
  • Contact submissions: subject, message body, and optional email address you provide via the contact form. We also store a one-way SHA-256 hash of your IP address for rate-limiting purposes; your raw IP is never stored.
  • Waitlist entries: email address and the page from which you registered interest in a feature.
  • Referral data: if you use a referral link, we record an association between your account and the referrer's account.

3. How we use your data

  • To operate and secure your account.
  • To send transactional emails (account activation, trial notices, password reset).
  • To respond to your contact-form submissions.
  • To detect and prevent abuse (rate limiting, spam prevention).
  • To improve the platform (aggregated, anonymised analytics only).

We do not sell your data to third parties. We do not use your data for advertising.

4. Third-party services

  • Cloudflare: DNS, edge network, DDoS protection, Turnstile bot-detection widget, and D1/Workers for our database and serverless functions. Cloudflare's privacy policy applies to traffic passing through their network.
  • Resend: transactional email delivery. Resend receives the recipient address and rendered email HTML for messages we send.

5. Data retention

  • Account records are retained for the lifetime of your account.
  • Contact-form submissions and waitlist entries are retained for up to 2 years, or until we respond to a deletion request.
  • Sent emails in our outbox log are retained for 90 days.
  • Raw frequency readings are pruned after 90 days (downsampled summaries are permanent).

6. Your rights (UK GDPR)

If you are based in the UK or EEA you have the right to access, correct, or delete your personal data. To exercise these rights, email [email protected]. We will respond within 30 days.

7. Cookies

We set one first-party cookie: gv_session — an HTTP-only, Secure, SameSite=Strict session token valid for 7 days. No third-party tracking cookies are set by Gridview. Cloudflare's Turnstile widget may set its own cookies per Cloudflare's policy.

8. Changes to this policy

We will post any material changes here and update the “last updated” date. Continued use of Gridview after changes constitutes acceptance.

9. Contact

Questions about this policy: [email protected].