Legal

Privacy Policy

Effective October 21, 2026

This Privacy Policy explains how GrapeNode ("GrapeNode", "we", "us") collects, uses and shares information when you use our website at grapenode.com, the GrapeNode app at app.grapenode.com and the GrapeNode POS agent (together, the "Service").

1. Who we are

GrapeNode provides the Service. GrapeNode is used by businesses ("organizations"). Each organization decides what business information goes into its workspace and who can see it, and we process that information on the organization's behalf to provide the Service.

Questions about this policy can be sent to privacy@grapenode.com.

2. Information we collect

Account information

Name and email address, provided when you sign up, when you sign in with Google, or by an administrator who creates an account for you.
Password. Passwords are handled by our authentication provider. We never see or store your password.
Profile photo. Either a photo you upload, or a link to your Google profile photo if you sign in with Google.
Personal PIN. If you set one, we store only a salted, one-way hash of it, never the PIN itself.

Business information

Information you or your organization enter into or sync to the Service, such as:

the organization's name and logo, its members, roles and invitations;
stores, products, prices, costs, stock levels, counts and sales;
schedules, tasks, notes and photos (for example, photos of broken items);
contact details of people your organization works with, such as suppliers, customers and employees.

POS data

If your organization installs the GrapeNode POS agent on a store's POS computer, it reads product, price, cost, stock, sales and vendor fields from the POS database and uploads them to the Service. It doesn't read customer, employee, cashier or transaction records. The agent signs in with an account your organization sets up for it.

Technical information

Notification tokens for devices where you allow push notifications.
Error reports sent by the app when something goes wrong.
An activity log of changes made in the Service. Each entry records who made the change and an excerpt of what was submitted, which can include information you entered.
Data stored in your browser: preferences such as your active organization and layout, and an offline copy of data so the app keeps working without a connection. The offline copy is erased when you sign out.

What we don't collect

We don't use cookies, analytics or advertising trackers in the app or on grapenode.com. Our hosting provider processes standard request information such as IP addresses in order to deliver the website and the app.

3. How we use information

To provide, maintain and secure the Service, including verifying email addresses, checking permissions and handling PIN approvals.
To send notifications you have turned on, and service emails such as email verification and password resets.
To find and fix errors.
To comply with the law and enforce our Terms of Service.

We don't sell your information, and we don't use it for advertising.

Within the Service. Members of an organization can see its business information according to their roles and permissions. Your name, email address and profile photo are visible to other users of the Service, such as members of the organizations you belong to.
Service providers. Our cloud hosting and authentication providers host and process data for us to run the Service.
Legal reasons. When we believe in good faith that the law requires it, or to protect the rights, property or safety of our users, the public or GrapeNode.
Mergers and acquisitions. If GrapeNode is involved in a merger, acquisition or sale of assets, information may be passed on as part of that deal, subject to this policy.
With your consent, or at your organization's direction.

5. Where information is stored

Information is stored in the United States.

6. How long we keep information

Account information is kept until you delete your account.
Business information is kept until your organization deletes it or deletes the organization. Uninstalling an app keeps its data so it can be restored if the app is installed again.
The activity log and error reports are deleted automatically after 30 days.
Backups may keep deleted information for up to 98 days.

Some records your organization keeps, such as who created an item or used an invitation, keep an internal user ID after an account is deleted. To make sure all information about you or your organization is removed, including uploaded files, email privacy@grapenode.com.

7. Your choices and rights

Update your profile in your account settings.
Delete your account from your account settings, or email privacy@grapenode.com and we'll do it for you. If you sign in only with Google, email us.
Delete an organization. Organization owners can delete the organization and its data.
Turn off notifications in your browser or device settings.

Depending on where you live, for example in California, you may have the right to know what personal information we hold about you, to access, correct or delete it, and not to be treated differently for exercising these rights. To make a request, email privacy@grapenode.com. We may need to verify your identity first. If your information is part of an organization's workspace, for example as an employee, we may refer your request to that organization.

We don't sell personal information, and we don't share it for cross-context behavioral advertising.

8. Security

We protect information with measures that include encrypted connections (HTTPS), separation of each organization's data, permission checks on our servers for every change, hashed PINs with lockout after repeated wrong attempts, and required email verification. No system is perfectly secure, and we can't guarantee the security of information.

9. Children

The Service is built for businesses and isn't directed to children under 13. We don't knowingly collect personal information from children under 13. If you believe a child has given us personal information, email privacy@grapenode.com and we'll delete it.

10. Changes to this policy

We may update this policy from time to time. When we do, we'll change the effective date above, and for material changes we'll take reasonable steps to let you know, for example in the app.

11. Contact us

Email privacy@grapenode.com with any questions or requests about your information.