Privacy Policy

Grid Network ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our interior design business management platform, including when you connect your Facebook account or Facebook Page to our service to capture leads and manage client relationships, and when you connect a WhatsApp Business number to message your leads and clients.

Grid Network is a sole proprietorship of Ishwar Sundararaman, based in India. Grid Network is responsible for the platform's processing of data received through its Meta integrations. Each connected business determines how its own leads and conversations are used; we process that workspace data on its behalf.

By using our service, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the platform.

1. Information We Collect

1.1 Information You Provide Directly

• Account registration details: name, email address, phone number, business name
• Business and company information (company name, logo, GST number, city)
• Employee records, vendor details, and project information you enter into the platform
• Payment and billing information (processed securely by our payment provider)

1.2 Information from Facebook / Meta Integrations

When you connect your Facebook account or Facebook Page to Grid Network, we may collect and process the following data with your explicit authorization:

• Facebook Lead Ads data: Lead form responses submitted by people on Facebook/Instagram, including names, email addresses, phone numbers, and any other fields you configure in your lead forms
• Facebook Page information: Page name, Page ID, and basic Page metadata required to connect your Page
• Facebook account identifiers: Your Facebook User ID and access tokens required to authenticate the integration

Important: We only access the Facebook data you explicitly authorize through the Facebook Login permission dialog. We never access your personal Facebook posts, messages, friends list, or any data beyond the permissions you grant.

1.3 Information from WhatsApp Business Integrations

When a company connects its WhatsApp Business Account to Grid Network through Meta's signup flow, we process the following on that company's behalf:

• WhatsApp Business Account details: WhatsApp Business Account ID, business phone number and its ID, display name, message templates, and the access token Meta issues for the connection
• Messages: the content of messages exchanged between the company and its leads or clients on that number, including text and media they send such as floor plans, photos, and documents
• Contact details: the WhatsApp phone number and profile name of each person who messages, or is messaged by, the connected number
• Delivery status: whether each message was sent, delivered, read, or failed

Important: Grid Network only processes messages for the WhatsApp number a company has explicitly connected. We never read a person's personal WhatsApp chats, contacts, or groups.

1.4 Usage and Technical Data

• Log data: IP address, browser type, pages visited, timestamps
• Device information: device type, operating system
• Cookies and similar tracking technologies for session management and analytics

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the platform: Manage your leads, projects, quotations, invoices, team, and vendors
• Facebook Lead synchronization: Import lead form submissions from your connected Facebook Pages and create lead cards in your sales or marketing pipeline within Grid Network
• Meta lead quality feedback: Quality feedback is included by default for connected companies once a company-specific Meta dataset is configured, unless the company opts out in Settings → Meta Lead Ads. We send Meta the original Meta lead identifier, the time the lead arrived in Grid, and the time it first reaches a configured quality stage, on that company's behalf, for advertising measurement and optimisation. This feedback does not include quotation amounts, revenue, documents or CRM notes.
• WhatsApp messaging: Connect a company's business number, manage its message templates, send approved templates to opted-in leads and clients, show replies inside the company's lead record, and allow authorised team members to reply within Meta's customer service window
• Communications: Send you service updates, security alerts, and support messages
• Analytics and improvement: Understand how our platform is used and improve features
• Legal compliance: Meet our legal obligations and enforce our Terms of Service

We do NOT:

• Sell your personal data or your clients' data to third parties
• Use Facebook lead data for advertising purposes outside the company's authorised Meta quality feedback
• Share data obtained from Facebook with third parties except as described in Section 3
• Use Facebook data for any purpose not disclosed in this policy or not authorized by the user
• Use WhatsApp message content for advertising, or to train AI models
• Message anyone from a connected number who has asked the company to stop

3. Data Sharing and Disclosure

We may share your information only in the following limited circumstances:

3.1 Service Providers

We engage trusted third-party vendors to help operate our platform (e.g., cloud hosting, payment processing, email delivery). These providers are contractually bound to process data only as instructed by us and to maintain appropriate security measures.

3.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before data is transferred and becomes subject to a different Privacy Policy.

3.3 Legal Requirements

We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of Grid Network, our users, or others.

Requests from public authorities are referred to the proprietor for review of their authenticity, legal basis and scope before any disclosure. We seek legal advice where needed, challenge or seek clarification of requests considered unlawful or overly broad, disclose only the information legally required, and document the request, decision, reasoning, people involved and response. We notify the affected business or person where lawful and retain request records with restricted access.

3.4 Facebook / Meta

Company administrators can select “Opt out for all leads” in Settings → Meta Lead Ads. This stops quality feedback for all current and future leads in that company. Lead import and the sales workflow continue when feedback is off. We check recorded restrictions before sending further events. A request already in transit may still arrive, and switching off does not automatically erase data Meta has already received. Contact us about deletion or other data-rights requests. Companies must provide the necessary disclosures and establish the permissions or other lawful basis required for their prospects' data. A company's setup instruction does not replace a prospect's consent where that consent is required.

Data obtained from Facebook's APIs is governed by Meta's Terms of Service and Meta's Privacy Policy. We comply fully with Meta's Platform Terms and Developer Policies.

3.5 WhatsApp Processing

WhatsApp messages are sent and received through Meta's WhatsApp Business Platform (Cloud API) and are also subject to the WhatsApp Business Terms. Grid's WhatsApp connection, template and reply features do not send conversations to an AI model or automatically generate replies. Each company acts as the controller of its own conversations; Grid Network processes them on its behalf using Base44 for application hosting, database storage and backend processing. Base44 uses supporting service providers; see its security and subprocessor information. If you separately authorise an external agent to access your workspace, the data you choose to share is also subject to that agent provider's terms and privacy practices.

4. Facebook Data Deletion

In compliance with Meta's Platform Policies, users may request deletion of any data collected through Facebook integrations.

You may also use Facebook's own data deletion tools at Facebook Settings → Your Facebook Information.

5. Cookies and Tracking

We use cookies and similar technologies for:

• Session cookies: To keep you logged in during your session
• Preference cookies: To remember your settings and preferences
• Analytics cookies: To understand platform usage and improve our service

You can control cookies through your browser settings. Disabling cookies may affect platform functionality.

6. Data Security

We implement security measures including encryption in transit (TLS/HTTPS), encrypted storage and access controls to protect your data. However, no method of transmission over the Internet is 100% secure. We encourage you to use strong passwords and notify us immediately if you suspect unauthorized access to your account.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. You may request account deletion at any time by contacting us. Upon deletion, we will remove or anonymize your personal data within 60 days, except where retention is required by law.

Facebook lead data is retained within the platform until you delete it or request account deletion. We do not retain Facebook user data beyond the period necessary to provide the service.

WhatsApp conversations are retained in the connecting company's workspace until that company requests their deletion or deletes its account. When a number is disconnected, we delete its stored access token immediately and stop receiving its messages.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to certain processing of your data
• Withdrawal of Consent: Withdraw consent for Facebook integration at any time by disconnecting your account

To exercise any of these rights, contact us at privacy@gridnetwork.in.

9. Children's Privacy

Our platform is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete such information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

11. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a prominent notice on our platform. Your continued use of the platform after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: