Privacy Policy
Last updated 7 September 2026. This policy explains what Gray Office collects, why, and what you can do about it. It is a starting template — have it reviewed by counsel before you rely on it.
Information we collect
- Account information — your name, email address, and password hash.
- Organization data — membership, roles, and invitations.
- Finance data you connect or upload — invoices, ledger entries, bank transactions, and documents.
- Usage data — basic logs needed to operate and secure the service.
How we use it
Solely to provide the service to your organization: running the workflows you ask for, showing you your data, and keeping the account secure. We do not sell personal data or use it for advertising.
Sharing
We share data with infrastructure providers that host the service and with integrations you explicitly connect. We disclose data if required by law.
Retention
We keep your data for as long as your organization has an account. Delete a record and the underlying file is removed from storage. Close your account and we delete or anonymize your data within 30 days, except where law requires otherwise.
Your rights
You can access, correct, export, or delete your data from within the app, or by writing to privacy@grayoffice.app.