Last updated August 6, 2026.
Introduction
Grid1x, Inc. ("Grid1x," "we," "us," or "our") operates the Grid1x marketplace at grid1x.com and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you browse software listings, create an account, write or respond to reviews, or use the vendor portal.
We process personal data in accordance with applicable privacy laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA).
Information we collect
Account and profile data: name, email address, password hash, account type (buyer or vendor), company name, job title, and preferences you provide in account settings.
Vendor and listing data: product listings, showcase content, pricing information, company verification details, and billing-related identifiers when you subscribe to a vendor plan.
Reviews and user content: review text, ratings, campaign responses, and moderation records associated with your account.
Usage and analytics: pages viewed, product profile views, comparison appearances, profile visits after comparisons, search queries, referral URLs, device and browser type, and approximate location derived from IP address.
Authentication and security: session tokens, login timestamps, OAuth provider identifiers when you sign in with LinkedIn, and audit events related to account access.
Communications: support requests, deletion or export requests, and marketing preferences if you opt in to product updates.
How we use information
Provide and operate the Service, including displaying listings, comparisons, reviews, and vendor analytics.
Authenticate users, enforce access controls, prevent fraud, and protect the security of our platform.
Process vendor subscriptions, listing upgrades, and related billing through our payment processors.
Send transactional messages (account verification, security alerts, review notifications) and, with consent, marketing communications you can opt out of at any time.
Analyze usage to improve search relevance, product discovery, and marketplace quality.
Comply with law, respond to lawful requests, and enforce our Terms of Service and community guidelines.
Lawful basis (GDPR)
We rely on contract performance to create and manage your account and deliver core marketplace features.
We rely on legitimate interests for security monitoring, fraud prevention, service improvement, and aggregated analytics, balanced against your rights.
We rely on consent for optional marketing emails and non-essential cookies where required.
We rely on legal obligation when retention or disclosure is required by applicable law.
Data retention
We retain account and listing data while your account is active and for a limited period afterward to resolve disputes, comply with law, and maintain audit records.
Reviews and public listing content may remain published in anonymized or aggregated form after account deletion where retention supports marketplace integrity.
Security and audit logs are retained according to our compliance program, typically for up to twelve months unless a longer period is required for investigations.
You may request deletion of your account; we will process verified requests within thirty days subject to legal retention requirements.
Your privacy rights
Depending on your location, you may have the right to access, correct, delete, restrict, or object to certain processing of your personal data, and to receive a portable copy of your data.
Account holders can export account data and submit deletion requests from Account → Security → Privacy & data rights.
California residents may exercise CCPA/CPRA rights, including knowing what personal information we collect, requesting deletion, and opting out of sale or sharing where applicable. We honor Global Privacy Control (GPC) signals where required.
EU/UK residents may lodge a complaint with your local supervisory authority. Our lead contact for privacy inquiries is privacy@grid1x.com.
We will verify your identity before fulfilling rights requests and respond within the timelines required by applicable law.
International transfers
Grid1x may process and store information in the United States and other countries where we or our subprocessors operate. When personal data is transferred outside the EU/EEA or UK, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
Security
We implement administrative, technical, and organizational measures designed to protect personal data, including encryption in transit, access controls, row-level security for vendor data, and audit logging for sensitive operations. No method of transmission or storage is completely secure; please use a strong password and protect your credentials.
Children
The Service is not directed to individuals under sixteen years of age, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact privacy@grid1x.com.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes will be communicated through the Service or by email where appropriate. Continued use after changes become effective constitutes acceptance of the updated policy.
Contact us
For privacy questions or to exercise your rights, email privacy@grid1x.com or write to Grid1x, Inc., Privacy Office, 548 Market Street, Suite 35410, San Francisco, CA 94104, United States.