Privacy
Beta version, to be reviewed by a lawyer before launch
This text applies to the closed beta of Gradus. A lawyer will review it before the public launch, and we will let you know about changes.
1. Who processes your data
The controller of personal data is [DOPLNIT], company ID [DOPLNIT], registered at [DOPLNIT], e-mail [DOPLNIT].
This policy applies to the Gradus app and its website during the closed beta.
2. What data we process
Account data: e-mail, name, password (only as a secure hash, never readable), profile photo, language, time zone and other settings.
Content you put into the app: milestones, tasks, contacts, deals, events, finances, invoices, notes, files and messages to Jarvis. For the personal data of your contacts you are the controller, and we process it for you as a processor.
Usage and technical data: which screens and actions of the app you use, the type of device and browser, and error records. For sign-ins to the administration we store only a shortened IP address.
Problem reports: your description, technical details about the browser, the app's latest error messages and a screenshot, if you attach one.
3. Why, and on what legal basis
To provide the app under the terms (performance of a contract): your account and sign-in, storing your data, e-mails about your account (such as a password reset), Jarvis and contact generation.
Based on legitimate interest: security, finding and fixing errors, measuring usage and improving the app.
With consent: the waitlist. We keep your e-mail there until you withdraw consent; an unconfirmed sign-up is deleted after 30 days.
4. Usage measurement
To learn which parts of Gradus help and what needs to get better, we record how the app is used: which screens you open, which actions you take (such as creating a milestone or moving a contact), how long you spend in the app, what kind of device you use and which errors happened.
We store only types of actions, counts, times and states, never content: no names, phone numbers, e-mails, company, deal or task names, and no messages to Jarvis. The records are linked to your account, only the operator of Gradus can see them, and we use no tracking cookies or third-party services for this.
Usage records and sessions are deleted automatically after 13 months. After you delete your account, they stay only anonymously, with no link to you.
5. Artificial intelligence
When you use Jarvis, we send your message and the context it needs from your data (such as a summary of your situation, notes or an attached file) to Anthropic, which runs the language model. The same goes for the morning brief and the suggestions Jarvis prepares on his own.
Anthropic does not use data sent through its API to train its models and keeps it only for a limited time under its commercial terms. We don't use your data to train artificial intelligence either.
When generating contacts, we send Google Maps Platform only the industry and place you search for, none of your data.
6. Who we share it with
These processors handle data for us, each only as far as their work needs:
Supabase: database, sign-in and file storage. The data is stored in the EU (Ireland).
Vercel: running the website and the app. The server part runs in the EU (Frankfurt); static parts of the website are delivered through a global network.
Anthropic: the language model behind Jarvis. USA.
Google Maps Platform: finding businesses when generating contacts. Google, worldwide including the USA.
Resend: sending e-mails (password reset, invoices, notifications). USA.
Transfers to the USA rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. We don't sell data and don't pass it on to anyone else unless the law requires it.
7. How long we keep it
We keep account data and your content while you have an account. Deleting your account in the app deletes them at once, including uploaded files; they leave the database backups within [DOPLNIT] days.
Usage records, sessions and error records are deleted automatically after 13 months. After you delete your account, usage records stay only anonymously, with no link to you.
Deleted notes stay in the trash for 30 days, then they are deleted for good.
8. Your rights
You have the right to access your data, have it corrected or erased, restrict its processing, take it elsewhere, and object to processing based on legitimate interest. You can withdraw consent at any time.
Right in the app: download a copy of all your data under Settings → Privacy and data → Export my data (a ZIP of CSV tables), and delete your account with all its data under Settings → Privacy and data → Delete account. Correct your account details in Settings → Account.
Exercise your other rights by e-mail at [DOPLNIT]; we will answer within 30 days. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.cz).
10. Contact
For questions about personal data, write to [DOPLNIT].