Privacy Policy
Last updated: February 2026
1. Information We Collect
We collect information you provide directly to us, such as when you create an account, use our services, or contact us. This may include your name, email address, organization, and role. We also automatically collect certain technical information when you access our platform, including IP address, browser type, and usage data.
2. How We Use Your Information
We use the information we collect to provide, maintain, and improve our gold traceability services; process transactions and send related information; send technical notices and support messages; and respond to your requests and inquiries. We may also use aggregated or de-identified data for analytics and service improvement.
3. Data Retention & Security
We retain your personal information for as long as your account is active or as needed to provide you services. Blockchain-anchored records (Merkle roots, transaction hashes) are immutable by design and cannot be deleted once published on-chain. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or destruction.
4. Cookies & Tracking
We use essential cookies to maintain your session and authenticate your access to the platform. We do not use third-party advertising or tracking cookies. You can configure your browser to refuse cookies, but this may limit your ability to use certain features of our services.
5. Third-Party Services
Our services interact with third-party blockchain networks (Polygon) for data anchoring purposes. Information published on-chain is publicly accessible by design. We may also use third-party service providers for hosting, analytics, and communication, each bound by contractual obligations to protect your data.
6. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal information; object to or restrict certain processing; and request data portability. Note that blockchain-anchored data cannot be modified or deleted due to the immutable nature of distributed ledger technology.
7. Contact
For any questions about this privacy policy or our data practices, please contact us at privacy@gram.io.