In one paragraph: Grid runs on your machine. We hold an account so a licence can follow you between laptops, and a small amount of optional diagnostic data so we can fix crashes. We do not receive your source code, your cards, your prompts or your agent transcripts, and we do not train anything on them.What we collect
DATAWHYRETENTION
Email addressthe account a licence belongs tountil you delete the accountLicence token and planto know what you may rununtil you delete the accountDevice id and nameso you can sign a lost laptop outuntil you remove the deviceProblem reportsonly when you press send, after obfuscation. Never automatic12 monthsFeature counterswhich views are used, never their content. Off by default13 months, aggregatedBilling detailsheld by our payment processor, not by usas tax law requires
When you report a problemError reporting matters in an alpha, so Grid makes it easy and makes it yours to send. When something breaks you get a Report a problem window holding the error, an obfuscated screenshot, an obfuscated thirty-second replay of what you just did, and your version and machine. Every text run in the image and in the video is measured and replaced by a bar of the same width, so we see the shape of the interface and never a word of its content. Card titles, plans, prompts, transcripts, file names and code are replaced before the report exists.Grid transmits nothing. You read the exact message, switch off anything you would rather not include, and then either open it in your own mail client or copy it and send it however you like. Cancel and the recording is discarded. There is no background crash uploader and no silent telemetry channel.What we never collect
NOT RECEIVED, NOT STORED, NOT TRAINED ONyour source codecard contentsplans and transcriptsprompts and completionsfile pathsrepository namescommit messagesterminal outputanything in .envThis holds on every tier. If you self-host the sync image, your cards do not reach us either; if you ask us to host it, the contents are encrypted with a key you hold, so we store them without being able to read them.
Subprocessors
WHOFOR WHATWHERE
Your model providerthe agents themselves, under your own keytheir terms, not oursPayment processorsubscriptions and invoicesEUEmail providersign-in links and receiptsEUError reportingcrash reports, when you opt inEU
The model provider is worth saying plainly: prompts travel from your machine to them directly, under your agreement with them. We are not in that path and cannot read it.Your rightsUnder the GDPR you can ask for a copy of what we hold, correct it, delete it, or object to processing. Account deletion removes the account, the licence record and the devices within 30 days. Mail privacy@gridconsole.dev and a person will answer.CookiesThe website uses one cookie, for your session when signed in. No advertising trackers, no third-party analytics on the site. The application uses no cookies at all.ChangesIf this policy changes materially we will say so in the application and in the changelog before it takes effect, with the previous version kept available.