Privacy Policy

1. Who we are

GRID NIVA and Your Organization

GRID NIVA operates Gridniva. For account, website, sales and support information, GRID NIVA generally determines why and how personal information is processed. For project content entered by a customer—such as subcontractor, worker or incident information—the customer organization generally controls that information and GRID NIVA processes it to provide the service.

If your information was entered by a contractor or another Gridniva customer, contact that organization first about access, correction or deletion. We will assist our customer where reasonably required.

2. Information collected

Categories of Information

We may collect account and profile information, including names, company details, business email addresses, roles, authentication identifiers and account settings; transaction and subscription information; support communications; and technical information such as IP address, device or browser details, timestamps, security events and service usage.

Customer Data may include project and subcontractor records; compliance documents and reviews; Change Order requests, decision notes and photographs; Safety Incident Reports and photographs; Daily Site Logs, worker and equipment entries; secure-link recipient details; reminders, notifications, audit histories and exports.

3. Purposes and legal bases

How We Use Information

We use information to provide and administer accounts and subscriptions; deliver the four Gridniva workflows; authenticate users; store and display records; send secure links, reminders and transaction messages; provide support; generate audit exports; maintain security; prevent misuse; diagnose faults; improve the service; and comply with legal obligations.

Depending on the context and applicable law, processing is based on performance of a contract, legitimate interests in operating and protecting the service, consent where required, and compliance with legal obligations. We do not sell Customer Data or use uploaded compliance, Change Order, safety or Daily Site Log content for unrelated advertising.

4. Payments

Paddle and Transaction Information

Paddle acts as Merchant of Record for purchases processed through Paddle. Paddle collects and processes payment-method and billing information under its own privacy notices. GRID NIVA normally receives limited transaction information needed to activate and administer a subscription, such as customer contact details, product, status, amount, currency, tax information and Paddle transaction or subscription identifiers. We do not receive complete payment-card details from Paddle.

5. Sharing and processors

When Information Is Shared

We may share information with infrastructure, database, authentication, storage, email, payment, monitoring and support providers that help operate Gridniva; with authorized users of the relevant customer account; with professional advisers; or with authorities when reasonably necessary to comply with law, protect rights or address fraud and security threats.

Providers receive only the information reasonably needed for their role and are expected to protect it. Information may also be transferred in connection with a merger, financing, acquisition, reorganization or sale of the business, subject to appropriate confidentiality and notice requirements.

6. International processing

Where Information May Be Processed

GRID NIVA and its service providers may process information in countries other than the country where you are located. Where required, we use contractual or other recognized safeguards for international transfers. Contact us if you need further information about safeguards relevant to your information.

7. Retention and deletion

How Long We Keep Information

We retain information while an account is active and as reasonably necessary to provide the service, secure accounts, maintain transaction and audit records, resolve disputes and comply with legal obligations. Retention varies by record type, customer instructions and applicable law.

Customers can delete certain records and may permanently delete eligible subcontractors, projects or accounts. Database deletion is designed to remove the selected records promptly. Associated storage or authentication cleanup may continue through a restricted background queue so temporary orphaned technical items can be retried without delaying the user. Limited backups, transaction records or legal records may remain until their applicable retention period expires.

8. Security

Protecting Information

We use reasonable technical and organizational measures intended to protect information against unauthorized access, alteration, disclosure or loss. Measures may include access controls, authenticated sessions, private storage, transport encryption, restricted service credentials, logging and deletion controls. No online service can guarantee absolute security.

Customers should use strong passwords, limit employee access, review recipients before sending secure links and notify us promptly of suspected unauthorized activity.

9. Cookies and communications

Website and Service Messages

Gridniva may use cookies or similar storage that is necessary for authentication, security, preferences and core operation. If we introduce non-essential analytics or marketing technologies, we will provide notice or obtain consent where required.

We may send essential account, billing, security and transactional messages. Optional reminders or notification emails may be controlled through available settings. You cannot opt out of messages strictly necessary to operate or protect an active account.

10. Your rights

Privacy Choices and Requests

Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent or complain to a data-protection authority. These rights may be subject to exceptions and identity verification.

Send a request to the email below. If GRID NIVA processes the information only for a customer organization, we may direct the request to that organization. We will not discriminate against you for exercising a legally protected privacy right.

11. Age and updates

Children and Policy Changes

Gridniva is business software and is not directed to children. We do not knowingly invite children to create accounts. We may update this Policy as the service, providers or law changes. We will update the date above and provide reasonable notice of material changes.

12. Contact

Contact GRID NIVA

For questions or privacy requests, contact GRID NIVA: