Privacy Policy

Last updated: August 5, 2026

Grapzy LLC ("Grapzy," "we," "us") provides an AI-powered creator marketing platform for consumer brands. This policy explains what information we collect, why we collect it, and the choices you have.

This policy applies to grapzy.ai, app.grapzy.ai, and any related services (together, the "Services").

1. Who we are

Grapzy LLC

For questions about this policy or your information, email us at hello@grapzy.ai.

2. Information we collect

Information you provide

• Contact details. Name, business email address, phone number, and company name when you create an account, request a forecast, book a call, or contact us.
• Product and store information. Product URLs, store URLs, product descriptions, pricing, and catalog data you submit or connect.
• Campaign information. Brand details, target audience, budget, campaign goals, category, creative preferences, and any briefs or notes you share with us.
• Scheduling information. When you book a call, our scheduling provider collects your name, email, time zone, and selected time.
• Communications. Messages you send us by email, in-product chat, or during calls.

Information collected automatically

• Usage data. Pages viewed, features used, links clicked, session duration, referring URLs.
• Device and technical data. IP address, browser type and version, operating system, device type, approximate location derived from IP.
• Cookies and similar technologies. See our Cookie Policy.

Information from connected platforms

If you authorize a connection to an e-commerce or marketplace account (for example Shopify, TikTok Shop, Amazon, or Etsy), we may receive:

• Product and catalog data
• Order and transaction data, including SKU-level revenue attributed to campaigns
• Discount code and affiliate link performance
• Store configuration necessary to set up tracking

We request only the permissions needed to run and measure your campaigns. You can revoke access at any time through the connected platform, and we will stop receiving new data.

Information from public and third-party sources

We process publicly available information about creators and their content — such as handles, follower counts, engagement metrics, audience demographics, and published posts — including data licensed from third-party providers. We use this to match creators to products and to forecast campaign performance.

3. How we use information

• Provide the Services, including creator matching, revenue forecasting, campaign execution, and attribution reporting
• Create and manage your account and respond to your requests
• Communicate with you about your campaigns, account, and service updates
• Improve our platform and train and evaluate our forecasting models. Campaign outcome data helps our models predict performance more accurately over time. Where we use data for model improvement beyond your own account, we use it in aggregated or de-identified form that does not identify you, your brand, or your customers.
• Prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms of Service

We do not use your data to train models that are made available to your competitors as a standalone product, and we do not disclose your individual campaign results to other clients.

4. Marketing communications

With your permission where required, we may send you emails about Grapzy products, content, and events. Every marketing email includes an unsubscribe link. Transactional messages about your account or active campaigns are not marketing and cannot be opted out of while your account is active.

5. How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

We share information only in these cases:

• Service providers. Companies that help us operate the Services — hosting and infrastructure, database and storage, transactional email, analytics, scheduling, payment processing, and AI processing providers. They may access information only to perform services for us and are bound by confidentiality obligations.
• Creators and campaign partners. To run a campaign, we share the information necessary to brief, contract with, and pay creators — such as your brand name, product details, and campaign requirements.
• Advertising platforms. When you authorize paid amplification (for example Spark Ads), we share the campaign assets and settings needed to run it.
• Legal and safety. When required by law, legal process, or to protect the rights, property, or safety of Grapzy, our clients, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

6. Data retention

We keep information for as long as your account is active and as long as needed to provide the Services. After that, we retain it only as required for legal, accounting, tax, or dispute-resolution purposes, or in aggregated or de-identified form. You can request deletion as described below.

7. Security

We use industry-standard safeguards including encryption in transit, access controls, and least-privilege permissions for internal access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your information
• Obtain a portable copy of your information
• Opt out of marketing communications
• Withdraw consent where processing is based on consent

To exercise any of these rights, email hello@grapzy.ai. We will respond within the time frame required by applicable law. We may need to verify your identity before acting on a request.

California residents

If you are a California resident, the California Consumer Privacy Act, as amended, gives you rights to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under California law. You may exercise your rights by emailing hello@grapzy.ai. You will not receive discriminatory treatment for exercising your rights. You may designate an authorized agent to make a request on your behalf.

Visitors outside the United States

Grapzy is based in the United States, and the information we collect is processed and stored in the United States. If you access the Services from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

9. Children

The Services are intended for businesses and are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, email hello@grapzy.ai and we will delete it.

10. Third-party links

The Services may link to third-party websites and platforms. We are not responsible for their privacy practices, and we encourage you to review their policies.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you by email or through the Services.

12. Contact

Questions about this policy or how we handle information: hello@grapzy.ai