Privacy Policy

1. Introduction

This Privacy Policy describes how buildsheet ("we", "us", or "our") collects, uses, stores, and protects your personal information when you use our Service.

We are an sole proprietorship registered in Hungary, and we are committed to protecting your privacy in accordance with:

• EU General Data Protection Regulation (GDPR)
• Hungarian data protection laws
• Other applicable privacy regulations

2. Data Controller Information

3. Information We Collect

3.1 Account Information

When you create an account, we collect:

• Email address: For account identification, authentication, and communication
• Full name: For personalization and invoicing purposes
• Password: Securely hashed using bcrypt (we never store plain-text passwords)
• Account status: Whether your account is active or disabled
• Registration date: When you created your account

3.2 Billing and Payment Information

When you make a purchase, we collect:

• Billing address: Street address, city, state/province, postal code, and country
• Payment transaction data: Amount, currency, payment status, transaction IDs (processed by Stripe)
• Invoice data: Generated and stored via Billingo in compliance with Hungarian tax regulations

3.3 Usage Data

3.4 Content Data

When you use the builder, we store cheatsheet content, layout, and metadata.

4. How We Use Your Information

• Provide, operate, and maintain the Service
• Process payments and generate invoices
• Send transactional emails (password reset, account updates)
• Improve the Service and develop new features
• Prevent fraud, abuse, and unauthorized access
• Provide customer support and respond to your inquiries

5. Legal Basis for Processing

We process your data based on the following legal grounds under GDPR:

• Contractual necessity: To provide the Service and process your orders
• Legitimate interests: To improve the Service, prevent abuse, and ensure security
• Legal obligation: To comply with tax, invoicing, and financial reporting requirements
• Consent: For specific processing activities where required by law

6. Data Sharing & Third Parties

We do not sell your personal data. We share your data only with:

• Stripe: For payment processing
• Billingo: For invoicing and tax compliance
• Cloud infrastructure providers: For secure hosting and storage
• Email service providers: For transactional messages

Each provider processes data on our behalf under strict data protection agreements.

7. Data Retention

• Account data: Retained while your account is active and for 12 months after closure
• Billing/invoicing data: Retained for at least 8 years (Hungarian tax law requirement)
• Content data: Retained until you delete the content or request account deletion

8. Security Measures

• Encryption in transit (HTTPS/TLS) and at rest for sensitive data
• Secure password storage using bcrypt
• Regular backups and monitoring for suspicious activity

9. Your Rights Under GDPR

You have the right to:

• Access, update, or delete your personal data
• Request a copy of your data in a portable format
• Restrict or object to certain processing activities
• Withdraw consent where processing is based on consent
• File a complaint with your local data protection authority

To exercise these rights, contact hello@usegrand.app.

10. International Data Transfers

Your data may be processed by servers located in the European Union or other jurisdictions with adequate data protection laws. Where transfers occur outside the EU, we implement appropriate safeguards such as Standard Contractual Clauses.

11. Cookies & Tracking

We use essential cookies to maintain sessions and track basic usage analytics. You can control cookies via your browser settings. Non-essential cookies will only be used with your consent.

12. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will update the "Last Updated" date at the top of this page. Continued use of the Service indicates acceptance of the updated policy.

13. Contact

If you have any questions regarding this Privacy Policy, please contact us at hello@usegrand.app.