Privacy Policy

Last updated: 19 October 2026

At a glance

  • We collect only what you give us (for example, through a form or an email) and basic data about how you use our website.
  • We use it to reply to you, provide our services, improve our website and meet the law.
  • We do not sell your personal data.
  • Our service providers process data on our behalf.
  • You can ask to see, correct or delete your data, or withdraw consent, by contacting our Grievance Officer (section 9).

1. Who we are and what this policy covers

Gridverse Innovations Private Limited (“Gridverse”, “we”, “us”) is a company incorporated in India, with its registered office at 412, C8, Sector 8, Rohini, Delhi 110085, India. Corporate Identification Number (CIN): U47912DL2024PTC427781.

This policy explains how we handle personal data when you:

  • visit gridverse.io or any page that links to this policy;
  • contact us by email, phone, form or social media;
  • join a waitlist or early-access list for one of our products;
  • do business with us as a client, partner, supplier or job applicant.

For the purposes of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), Gridverse is the Data Fiduciary for this data. For the purposes of the EU and UK GDPR, we are the controller.

Some of our products have their own privacy notices. Where a product’s own notice applies, it takes priority for that product. Section 6 explains how we handle data that our clients upload to our products.

2. Information we collect

We collect personal data in three ways: you give it to us, it is created automatically when you use our website, or we receive it from others.

Category Examples How we get it
Contact and identity details Name, work email, phone number, job title, company name, city and country You fill in a form, email or call us
Business details Company size, industry, products, sales channels, what you want help with You tell us in a form, call or meeting
Communications Emails, messages, call notes, meeting notes You contact us or we talk to you
Contract and billing details Billing name and address, GSTIN, PAN, invoices, payment records You become a client or supplier
Website usage data IP address (shortened before storage by our analytics provider), browser and device type, pages visited, time on page, links clicked, approximate location, page speed measurements Automatically, through cookies and similar technologies (section 4)
Marketing source data How you reached our site (for example, campaign tags or ad click IDs), first page visited Automatically, from the link you followed
Job applicant details CV, work history, references You apply for a job
Data from others Your business contact details from a colleague, partner or public professional profile A third party or public source

Please do not send us sensitive data, such as health, religious or biometric information.

You do not have to give us personal data. If you don’t, we may not be able to reply to you or provide a service.

3. How we use your information and why we may

We use personal data only for the purposes below. Under the DPDP Act, we rely on your consent or on a legitimate use the Act allows. If you are in the EU or UK, the GDPR legal basis is shown too.

Purpose Data used Basis (India DPDP) Basis (EU/UK GDPR)
Reply to your enquiry or request Contact, business details, communications Data you voluntarily gave for that purpose (legitimate use) Steps before a contract; legitimate interest
Add you to a waitlist or early-access list, and tell you when access opens Contact and business details Consent Consent
Provide our services and manage our contract with you Contact, business, contract and billing details Voluntarily provided; contract Performance of a contract
Send news, product updates and marketing emails Contact details Consent (you can withdraw at any time) Consent
Understand how our website is used and improve it Website usage data On by default outside Europe; you can switch it off at any time under Cookie preferences Consent
Measure our advertising Website usage and marketing source data On by default outside Europe; you can switch it off at any time under Cookie preferences Consent
Keep our website and systems secure, and prevent fraud Website usage data, communications Legitimate use for security Legitimate interest
Keep accounts and meet tax, legal and regulatory duties Contract and billing details Compliance with law Legal obligation
Assess job applications Applicant details Voluntarily provided; consent Steps before a contract; legitimate interest

We do not sell personal data. We do not make decisions about you using only automated means, including profiling, that have legal or similarly significant effects.

If we want to use your data for a new purpose, we will tell you first and, where needed, ask for your consent.

4. Cookies and analytics

Cookies are small files stored by your browser. We use them to remember your choices, count visits and measure our advertising.

Cookie or storage Set by Purpose
Cookie-choice cookie Gridverse Remembers your cookie choices
Region preference Gridverse Remembers the region or language you chose
Campaign tags (session storage) Gridverse Keeps campaign tags while you browse, so a form can record how you found us
Analytics cookies Our analytics provider Counts visits and shows how pages are used
Advertising measurement cookies Our advertising partners Measures whether our ads lead to enquiries

We also send page speed measurements (Core Web Vitals) and form-submission events to our analytics provider.

Your choices depend on where you are:

  • EU, EEA, UK, Switzerland, Norway, Iceland and Liechtenstein: analytics and advertising cookies stay off until you choose “Accept” or turn them on under “Customize”. Only necessary cookies are used before that.
  • Everywhere else: analytics and advertising measurement are on by default.

Anywhere in the world, you can change your choice at any time by selecting Cookie preferences at the bottom of any page. You can also block or delete cookies in your browser. Our website does not currently respond to browser “Do Not Track” signals.

Our pages also load fonts from a third-party font service, which receives your IP address when the page loads.

5. Who we share your information with

We share personal data only with the people and organisations below, and only as much as they need.

Service providers (Data Processors). They process data only on our instructions.

Type of provider What they do for us
Business software (forms, customer records, e-signatures, accounting) Website forms, managing enquiries and client records, signing agreements, invoicing
Analytics and advertising measurement Website analytics and measuring our ads
Email and office software Email, documents and calendars
Website hosting and delivery Hosting our website and delivering it quickly worldwide
Payment, professional and recruitment services Taking payments, accounting, hiring

Others we may share with:

  • Gridverse products and partners you ask us to involve. For example, if you are interested in one of our products, we may pass your enquiry to that product’s team or to an authorised partner.
  • Professional advisers, such as lawyers, auditors and accountants, under a duty of confidentiality.
  • Authorities, when the law requires it, for example a court order or a lawful request from a government agency, or to protect our rights, our users or the public.
  • A buyer or successor, if Gridverse is involved in a merger, acquisition or sale of assets.

We do not sell or rent personal data.

6. Data we handle on behalf of our clients

Our clients put their own data into our products and services. That data belongs to them. Examples:

  • product information, images and documents that a business uploads to, or shares through, our software;
  • marketplace, store or campaign data we work with when we manage a client’s marketplace, website, SEO or advertising.

For this data, our client decides why and how it is used. In law, the client is the Data Fiduciary (or controller), and Gridverse acts as their Data Processor. We use it only to provide our services to that client.

If your personal data is in a client’s account and you want to access, correct or delete it, please contact that client directly. If you contact us, we will pass your request to the client and help them respond.

7. Where we store data, how long we keep it, and how we protect it

Where. Gridverse is based in India. We and our service providers may process and store your personal data in India, the USA, the European Economic Area and other countries where we or they operate.

We protect your data in the same way wherever it is processed, and this policy gives you the same rights wherever you live. We transfer personal data out of India only to countries the Government of India has not restricted. For data from the EU, EEA or UK, we use the safeguards that the law requires for international transfers.

How long. We keep personal data for as long as we need it for the purposes described in this policy. When we no longer need it, we delete it, anonymise it, or, if that is not possible, keep it securely and isolate it from any further use. Sometimes we keep data for longer where the law requires or permits it, for example to meet tax and accounting rules, resolve disputes or enforce our agreements. Copies in our backups are kept secure and are not used for any other purpose until they are deleted.

Client data in our products (section 6) is kept for as long as the client’s account or contract is active. When it ends, we delete the data, unless the law requires us to keep it.

How we protect it. We use reasonable security measures, including encryption in transit (HTTPS) and access controls. No system is completely secure, so we cannot guarantee absolute security.

If there is a data breach. If a breach affects your personal data, we will tell you without undue delay. We will also inform the Data Protection Board of India, CERT-In and, where the GDPR applies, the relevant supervisory authority, within the time limits the law sets.

8. Your rights

Everyone, wherever you live, can ask us to:

  • tell you what personal data we hold about you, how we use it, and who we have shared it with;
  • correct, complete or update it;
  • delete it, unless the law requires us to keep it;
  • stop sending you marketing (use the unsubscribe link in any email, or write to us);
  • withdraw any consent you have given. This is as easy as giving it. Withdrawing does not affect what we did before.

In India, under the DPDP Act, you can also nominate another person to exercise your rights if you die or become unable to do so. You have the right to have your complaint handled by our Grievance Officer (section 9). If you are not satisfied with our response, you may complain to the Data Protection Board of India.

In the EU, EEA or UK, you also have the right to:

  • object to processing based on our legitimate interests;
  • ask us to restrict processing;
  • receive your data in a portable format;
  • complain to your local data protection authority, for example the UK Information Commissioner’s Office (ico.org.uk).

How to use your rights. Contact our Grievance Officer using the details in section 9. We may ask you to confirm your identity before we act. Making a request is free.

9. Children, changes and how to contact us

Children. Our website and services are for businesses and adults. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete it.

Changes to this policy. We may update this policy as our services or the law change. We will post the new version here with a new “Last updated” date.

Grievance Officer and contact. If you have a question or complaint about your personal data, contact:

Swati Sharma, Grievance Officer

Gridverse Innovations Private Limited

412, C8, Sector 8, Rohini, Delhi 110085, India

Email: swati.sharma@gridverse.in

Phone: +91 766 966 8553

This policy is governed by the laws of India. It is available in English. You can ask for it in any language listed in the Eighth Schedule to the Constitution of India.