Privacy Policy

1. About this policy

GridMagic is operated by Enavox Corporation (“GridMagic,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the GridMagic website, browser extensions, APIs, Google Sheets integration, Excel integration, and related services (collectively, the “Service”).

Your use of the Service is also governed by our Terms of Service.

2. Information we collect

Account information

When you sign in with Google or Microsoft, we may receive your account identifier, email address, display name, profile image, email-verification status, and authentication information. Your identity provider processes information under its own privacy policy.

Clip information

When you create or refresh a clip, we may process and store:

• The source page URL, title, domain, and favicon.
• The value or values you selected.
• Element selectors and related metadata used to locate the content again.
• Grid or multi-value selection layout and cell positions.
• The latest retrieved value and prior successful values.
• Refresh dates, status, errors, confidence information, and troubleshooting diagnostics.
• Clip titles, search terms, formulas, and public share IDs.

A source URL or selected value can itself contain personal, private, or sensitive information. Do not clip passwords, authentication tokens, payment-card details, financial account information, health information, government identifiers, or other sensitive or regulated information unless you are authorized to do so and have determined that the Service is appropriate for that use.

If clip content contains information about another person, you are responsible for having a lawful right to collect and use it.

Extension and browser information

The browser extension may store authentication tokens, settings, pending clips, recently saved clips, and diagnostic logs in your browser’s extension storage. It needs permission to interact with webpages so you can select and refresh content.

We do not use extension page access to build or sell a general history of the websites you visit. Page content and related metadata are sent to GridMagic when needed to create or refresh clips you have configured or to perform another action you request. A browser-based refresh may use a page available through your browser session, but GridMagic does not intentionally collect your source-site password or authentication cookies.

Service and device information

When you use the Service, we and our infrastructure providers may process technical information such as your IP address, browser or device type, request path, request time, response status, error information, security events, and diagnostic information. We use this information to operate, secure, and troubleshoot the Service.

Payment information

If paid features become available, a payment processor may collect payment details. GridMagic may receive billing contact information, customer and subscription identifiers, payment status, and transaction records, but generally will not receive your complete payment-card number.

3. How we use information

We use information to:

• Create, authenticate, and manage accounts.
• Save, organize, search, and display clips.
• Retrieve updated values and provide requested value history.
• Return cached values to Google Sheets and Excel formulas.
• Authenticate requests and prevent unauthorized access.
• Operate, troubleshoot, secure, maintain, and improve the Service.
• Enforce our Terms of Service and investigate suspected misuse.
• Comply with legal obligations and respond to lawful requests.
• Send administrative and service-related communications.

We may create and use aggregated or de-identified information that does not reasonably identify an individual. We will not attempt to re-identify information that we have treated as de-identified except to test whether our de-identification measures work or as permitted by law.

4. Local and cloud retrieval

Some values may be retrieved through your browser. In that case, the source website may see your normal browser connection, including your IP address and other information your browser ordinarily provides to that site.

For cloud retrieval, GridMagic or a retrieval provider requests the source URL from its own systems. The source page response may be processed temporarily so the selected value can be located. GridMagic normally stores the extracted value and refresh diagnostics rather than a complete copy of the source page.

For websites that are difficult to retrieve, we may use Scrape.do, Bright Data, or another retrieval provider. That provider may receive the source URL and technical retrieval instructions, which can include a saved selector used to locate the clipped content.

5. Spreadsheet formulas and share IDs

Each GridMagic formula contains a long public share ID that acts like a capability token. Anyone who obtains that share ID may be able to retrieve the clip’s cached value, status, and requested value history without signing in. The public formula endpoint does not return the source URL, account information, or saved selector.

Treat formulas and share IDs as sensitive. If you place a formula in a shared spreadsheet, people with access to that spreadsheet may be able to use its share ID. Google or Microsoft may also process the formula request and returned value under their own terms and privacy policies.

The formula API does not require the contents of your entire spreadsheet. It receives the share ID and, when requested, a value-history period.

6. Cookies and local storage

We and our authentication providers use cookies, browser storage, and extension storage for sign-in, security, settings, test or administrative sessions, and core Service functionality. You can manage browser cookies and extension permissions through your browser, but disabling necessary storage or permissions may prevent parts of the Service from working.

7. When we disclose information

We may disclose information:

• To service providers that host, secure, support, retrieve data for, or otherwise operate the Service, including Google Cloud and Firebase.
• To Google or Microsoft when you use their identity or spreadsheet platforms.
• To retrieval providers such as Scrape.do or Bright Data when cloud retrieval requires them.
• To a payment processor if you purchase a paid plan.
• At your direction, including through formulas and share IDs you place in a spreadsheet.
• When reasonably necessary to comply with law, legal process, or a valid government request.
• To protect the rights, safety, security, and integrity of GridMagic, our users, source websites, or others.
• In connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, subject to appropriate confidentiality protections.

Service providers are permitted to process information for the services they provide to us and as otherwise allowed by their agreement with us or their direct relationship with you.

8. We do not sell personal information

We do not sell or rent personal information to third parties. We do not share personal information for cross-context behavioral advertising, and we do not use clipped content to target third-party advertisements to you.

9. Retention

We retain account and clip information while your account is active and for as long as reasonably needed to provide the Service. We may retain certain records longer when reasonably necessary for security, fraud prevention, dispute resolution, backup recovery, enforcement of agreements, or legal compliance.

When information is no longer reasonably needed, we will delete or de-identify it, subject to reasonable backup and technical limitations. Removing a formula or spreadsheet does not automatically delete the related GridMagic clip. Deleting GridMagic information also does not delete copies held by a source website, identity provider, spreadsheet platform, or another person.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No storage or transmission system is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your account, devices, formulas, and share IDs and for promptly notifying us if you believe they have been accessed without authorization.

11. Your choices and privacy rights

You can sign out of GridMagic and manage extension permissions through your browser. Depending on where you live and whether a particular law applies, you may also have rights to request access to, correction of, deletion of, or a copy of your personal information, or to object to or restrict certain processing. Tennessee residents may have rights under the Tennessee Information Protection Act where that law applies.

We may need to verify your identity before completing a request. Some information may be retained where permitted or required by law. Where applicable, you may also have the right to appeal our response or contact your state attorney general or local data-protection authority.

Privacy requests may be submitted through the support contact made available in the Service. We will respond as required by applicable law.

12. International processing

GridMagic and its service providers may process information in the United States and other countries where they operate. Those countries may have data-protection laws that differ from the laws where you live. Where required, we use appropriate safeguards for international transfers.

13. Children

The Service is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete it.

14. Changes to this policy

We may update this Privacy Policy as the Service changes. We will post the updated policy with a new effective date and provide additional notice when appropriate or required by law.

15. Contact

Privacy questions and requests may be directed to privacy@gridmagic.app.