Privacy policy — Grain64
Grain64 is the trading name of the publisher below and covers the group's websites and the software products it builds and operates. The publisher and data controller is Grain64 SAS (being incorporated), a French société par actions simplifiée in formation; its registration details (Trade and Companies Register number, share capital and registered office) will be published here once it is registered — operating this product under the Grain64 name. This policy is written to Regulation (EU) 2016/679 (GDPR) and the French Loi Informatique et Libertés.
Who is the data controller
Grain64 (contact: privacy@grain64.com, or the contact address on grain64.com).
What we collect
- An email address, only when you type it into a form yourself (a contact message or a waitlist)
- Basic anonymous usage counts (page views), with no cross-site tracking and no cookies
We collect nothing else. We do not buy, enrich, or infer data about you, and we do not use your data to train AI models.
Purposes, legal bases, retention
| Purpose | Data | Legal basis (GDPR art. 6) | Kept for |
|---|---|---|---|
| Provide the product and answer you | What you submit | Contract (6.1.b) | While your account or request is live |
| Waitlist / launch notices you asked for | Email address | Consent (6.1.a), withdrawable any time | Until you unsubscribe, at most 2 years after last contact |
| Billing and accounting, once purchases open | Invoicing data | Legal obligation (6.1.c) | 10 years (French commercial code) |
| Keeping the service secure | Technical logs | Legitimate interest (6.1.f) | ≤ 13 months |
Where it lives, and who touches it
Hosting/CDN: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA — +1 888 993 5273 (hosting/CDN). Transactional email: Resend, Inc. (USA). Payments, once open: Stripe. Where a product's core feature processes your content through third-party AI model providers, the product page names them and the content is sent only to deliver that feature. Where the product works offline, that data stays on your device unless you export it. We sell data to no one. Transfers outside the EU/EEA rest on adequacy decisions or the EU Standard Contractual Clauses (GDPR art. 46).
Cookies and measurement
Only what is strictly necessary for the site to work — no advertising trackers, no analytics cookies. We measure page traffic with Cloudflare Web Analytics, which is cookie-less and stores no identifier on your device. Anything beyond that would require your consent first, and an amendment to this policy before it ships.
Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent — plus, under French law, directives on what happens to your data after death. Write to privacy@grain64.com; we answer within one month. You may complain to the CNIL (www.cnil.fr) or the supervisory authority where you live.
Changes
Material changes are noted on this page with a date. This policy covers the portfolio's standard stack; a product that adds a processor or practice gets a Board-approved amendment before shipping it.