This Privacy Policy explains how Grafty, Inc. (“Grafty”, “we”) collects and uses personal information through our website at grafty.ai and related properties (the “Sites”). This policy does notgovern data processed inside customer-operated Grafty instances — Grafty is deployed on the customer’s own infrastructure, that data never reaches us, and the customer is its controller.
Who we are
Grafty, Inc. is a Delaware corporation. Contact: info@grafty.ai.
Scope
This policy covers our public website, marketing communications, and the contact form. Self-hosted Grafty deployments — including prompts, source code, previews, logs, app data, and runtime data — run entirely within customer infrastructure and are out of scope.
Information we collect
- Contact form submissions: name, work email, company, area of interest, and your message.
- Server logs: IP address, user agent, timestamps, and requested URLs.
- Optional analytics: aggregated, non-identifying usage metrics, only if you accept analytics cookies.
How we use information
- Reply to your inquiries and provide quotes, pilot licenses, and security materials
- Operate, secure, and improve the Sites
- Comply with legal obligations
What we never receive
Because Grafty runs on infrastructure you control, we do not receive, store, or process the applications you build, your source code, your prompts, your previews, your logs, or the data your applications handle. There is no multi-tenant cloud plane on our side.
Sharing
We share website information only with service providers that help us operate the Sites (hosting, email delivery, security) under written confidentiality terms. We do not sell personal information.
Retention
Contact submissions are retained for as long as needed to respond and for a reasonable follow-up period, then deleted or anonymized.
Security
We use administrative, technical, and physical safeguards for the Sites, including TLS in transit, encrypted secret storage, and least-privilege access controls.
International transfers
We are headquartered in the United States. If you contact us from outside the US, your website data will be processed in the US under appropriate safeguards.
Your rights
Depending on your jurisdiction you may have rights to access, correct, delete, or port your personal information. Email info@grafty.ai to exercise them.
Cookies & analytics
The Sites use only the essential cookies needed to function. Any analytics are loaded after you accept via the cookie banner; you can change your preference at any time by clearing site data.
Children
The Sites are intended for business users and are not directed at children under 16.
Changes
We will post updates to this policy here with a new “Last updated” date.
Contact
Questions about this policy: info@grafty.ai.