Privacy policy

Griddo strives to reliably protect your privacy and we aim to be transparent by clearly explaining how we collect and process your information. It is important to us that you enjoy our website without compromising your privacy in any way.

You have the right to access, modify or delete your personal information at any time. You can also contact us through our Contact Us section.

Collection and use of your information

If you contact us through the forms on our website, we collect and store some information about you so that we can contact you again. We do not share that information with any other organization.

The mandatory information we collect and store for the above purpose is:

  • Your email address
  • Your name
  • The company you work for

Information we do not track

We do not track or collect any sensitive information about you. Only the information strictly mentioned in the previous section.

How we use your information

We only use your information for the services you have chosen, i.e. to contact you.

Retention and storage of your information

Retention policy

We store your information securely and keep it for as long as necessary to provide our services to you in accordance with applicable law. If you request that we do not contact you, we will remove your information from our database.

Secure storage of your information

We take information security very seriously and have policies and procedures in place to ensure that the information we hold about you remains secure. We limit who has access to your information and ensure that those who do are bound by contracts to proceed in a secure and restricted manner.

Griddo DXP Mobile App

This section describes the privacy practices specific to the Griddo DXP mobile application, available on the App Store and Google Play.

Information We Collect

When you use the Griddo DXP mobile application, we collect:

  • Login credentials: Your email address and password to authenticate your session. These credentials are transmitted securely and are not stored on your device.
  • Session data: Temporary authentication tokens necessary to keep your session active.
  • Device information: Device model, operating system version, and unique identifiers necessary for app functionality and technical troubleshooting.
  • Usage data: Information about how you interact with the app, including features used and time spent, in order to improve the user experience.

App Permissions

The Griddo DXP application may request the following permissions:

  • Internet access: Required to connect to Griddo servers and sync data.
  • Push notifications (optional): To send you alerts about your platform activity. You can manage this permission in your device settings.

Data Storage

The app stores locally on your device only the session tokens necessary to keep you logged in. We do not store sensitive content from your platform on the device.

Third-Party Services

The app may use third-party services for analytics and performance improvement. These services operate under their own privacy policies:

  • Analytics services to understand usage patterns
  • Crash reporting services to identify and fix technical issues

Your Rights

You can exercise your rights of access, rectification, and deletion of data by contacting privacy@griddo.io. Deleting the app from your device will remove all locally stored data.

Last updated: January 2026

Griddo AX Docs (MCP server)

This section describes the privacy practices of Griddo AX Docs, the MCP server from Griddo Digital, S.L. that gives AI assistants (such as ChatGPT, Codex, Claude or Cursor) access to the public documentation of the Griddo backoffice. The server is at https://ax.mcp.griddo.io/mcp.

Information we receive

Griddo AX Docs has no sign-up or login. When your AI assistant searches the documentation, the server receives only what the assistant sends for that request:

  • The search text, the language and, when it opens a page, that page's path. It does not receive your conversation with the assistant, only the terms the assistant chooses to search for.
  • Technical client data: the name and version of the application making the request (for example, ChatGPT) and its user agent.

Information we log

For each request we keep a technical log entry with:

  • the date and time;
  • the tool used, the language and the search text (up to 200 characters);
  • the number of results and the path of the first one;
  • the client name and version, its user agent (up to 120 characters) and the protocol version;
  • the response time and, if any, the error.

We do not log your IP address, name, email, account or any identifier that could tell us who you are. We do not use cookies or track you across sessions. To deliver the response, our infrastructure processes connection data (such as your IP address), but we do not keep it in these logs.

Do not include personal data in your questions about the documentation: if the assistant puts it in the search, it will stay in the log for the period below.

How we use this information

  • To answer each request.
  • To run the service: detect errors, measure performance and prevent abuse.
  • To improve the documentation: searches with no results show us which pages are missing or need a better explanation.

We do not use this information for advertising, we do not build profiles, we do not sell it and we do not use it to train AI models. The legal basis is our legitimate interest in providing the service and improving the documentation.

Who we share it with

The server runs on Amazon Web Services (AWS), which acts as our data processor. Logs are stored in the AWS region in Spain (eu-south-2). We do not share this information with any other organization. The AI application you use (for example, ChatGPT) handles your conversation under its own privacy policy.

How long we keep it

Logs are deleted automatically after 30 days. We keep only aggregate metrics, such as the number of requests per tool, which do not contain the search text.

Your choices

  • You can stop using Griddo AX Docs at any time by disabling or uninstalling the plugin or connector in your application.
  • You can ask us to delete a log entry by writing to privacy@griddo.io. Because we keep no data that identifies you, tell us the approximate date and time and the search text so we can find it.
  • You have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Last updated: October 2026

Contact

Our privacy representative is Daniel Serrano. If you have any questions about this policy or about your personal information, please send an email to privacy@griddo.io

Alternatively, you can write to us by postal mail at the following address:

Griddo Digital, S.L.
Calle Pradillo, 5
28002 Madrid, Spain

You can also call us at +34 660 564 092