Privacy Policy
Last updated: November 8, 2025
We take your privacy seriously. This policy describes how GridBoost Platform collects, uses, and protects your information.
Your data is encrypted and protected
Hosted with Row Level Security policies
You own your data, delete anytime
Clear, auditable practices
1. Information We Collect
Account Information
When you create an account, we collect your email address and password (hashed and encrypted). We do not store plain-text passwords.
Uploaded Documents
When you upload interconnection application PDFs for validation, we temporarily process these documents using AI agents. Documents are not permanently stored unless you choose to save session results.
Usage Data
We collect data on how you use the platform (agent runs, session history, token usage) to improve our services and provide analytics to administrators.
2. How We Use Your Information
- To provide and maintain the GridBoost Platform
- To process and validate your interconnection applications
- To improve our AI agents and validation algorithms
- To send you important updates about the service
- To provide customer support
- To comply with legal obligations
3. Data Security
We implement industry-standard security measures to protect your data:
- Encryption: All data is encrypted in transit (TLS/SSL) and at rest
- Row-Level Security (RLS): Database policies ensure users can only access their own data
- Role-Based Access Control (RBAC): Admin access is restricted and audited
- Audit Logging: All administrative actions are logged for security monitoring
- Third-Party Audits: Regular security assessments by independent firms
4. Data Sharing and Third-Party Services
We do not sell your personal information. We share data with:
- AI Processing: AI agents process document content using large language model APIs (subject to our AI provider's privacy policy)
- Cloud Infrastructure: Database and authentication services hosted on enterprise-grade cloud platforms
- Hosting Services: Application hosting and serverless compute provided by industry-leading infrastructure providers
5. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data
- Export your data (via JSON export functionality)
- Opt-out of non-essential communications
- Request information about data processing
To exercise these rights, please contact us at james@gridboost.io
6. Data Retention
We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we delete your personal data within 30 days (unless required by law to retain it longer).
7. Children's Privacy
GridBoost Platform is not intended for users under 18 years of age. We do not knowingly collect information from children.
8. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of material changes by email or through a prominent notice on our platform.