Privacy Policy

This Privacy Policy explains how Graond (https://graond.com), operated by Imran as a sole proprietorship in Dhaka, Bangladesh, collects, uses, and protects personal information across our studio website (https://graond.com) and general business operations. Graond develops and publishes proprietary software products across desktop, web, extension, and mobile platforms. Because each software product has a distinct technical architecture, individual commercial products hosted on dedicated domains or subdomains may publish their own product-specific Privacy Policy, Security Architecture, and Data Deletion disclosures. For any privacy-related inquiries, you can reach us directly at support@graond.com.

We practice strict data minimization and collect only the information necessary to operate our studio website, verify software licenses, and provide customer support:

• Account, Waitlist & Contact Data: Your name and email address when you join a studio waitlist, purchase a product license, or contact support.
• License & Order Metadata: Non-sensitive order reference numbers, plan tier, and license activation status provided by our Merchant of Record, Paddle.com, along with cryptographic device/seat identifiers where required by a desktop product to enforce license seat limits.
• Product-Scoped Application Data: Depending on whether a Graond product is a local-first desktop utility or a cloud-enabled web/mobile application, product-specific data handling is governed by and detailed in that product’s dedicated Privacy Policy.
• Website Logs & Optional Product Diagnostics: Standard web server logs (IP address, browser type) required to maintain security on graond.com, plus strictly opt-in anonymous product diagnostics where applicable.
• Support Communications: Messages, feedback, or attachments you voluntarily send to support@graond.com.

All payment data is processed securely by Paddle (Paddle.com), our Merchant of Record and authorized online reseller. Graond does not collect, process, or store raw credit card information, debit card numbers, CVV codes, or bank account details on our servers.

• PCI-DSS Level 1 Compliance: Checkout and payment processing are handled entirely by Paddle.com under strict PCI-DSS security standards.
• Limited Billing Metadata: We only receive non-sensitive transaction confirmations from Paddle (such as your email address, country for tax compliance, plan tier, and subscription status) in order to provision your software license.
• Paddle Privacy Practices: You can review how Paddle processes buyer payment information in Paddle’s Privacy Policy at https://www.paddle.com/legal/privacy.

We process your personal data strictly for legitimate business and contractual purposes:

• License Provisioning: To issue, verify, and manage software licenses and subscriptions across Graond products.
• Customer Support: To respond to your inquiries, troubleshoot technical issues, and process refund or cancellation requests via support@graond.com.
• Product Improvement & Security: To monitor application stability, fix bugs, and protect our infrastructure against unauthorized access or abuse.
• Transactional Communications: To send essential service updates, license keys, and security notices (never unsolicited spam).

Our websites use minimal cookies and local storage to ensure proper functionality and understand aggregate site performance:

• Strictly Necessary Cookies: Used for authentication, theme preferences, and Paddle checkout session integrity.
• Privacy-Friendly Analytics: Used to measure aggregate page views and referral sources without building invasive cross-site advertising profiles.

We do not sell, rent, or trade your personal data to third parties. We only share data with trusted infrastructure providers necessary to operate our services:

• Paddle.com: Our Merchant of Record responsible for order processing, payment security, tax compliance, invoicing, and fraud prevention.
• Cloud & Hosting Providers: Infrastructure partners (such as Vercel and Supabase) used to host our web applications and authenticate licenses securely.
• Legal Compliance: When required by applicable law, regulation, or valid legal process.

We implement industry-standard technical and organizational safeguards, including TLS encryption in transit, encrypted database storage, and strict access controls, to protect your data. We retain personal data only for as long as necessary to provide you with our software services, comply with tax and accounting obligations, or resolve disputes.

Regardless of your location, we respect your statutory data protection rights. You have the right to:

• Access & Portability: Request a copy of the personal data we hold about you in a structured format.
• Correction: Request that we update or correct any inaccurate or incomplete personal information.
• Deletion (Right to Erasure): Request deletion of your account and personal data, subject to mandatory legal or tax retention requirements.
• Objection & Restriction: Object to or request restriction of certain data processing activities by emailing support@graond.com.