Privacy Policy
Introduction
Valaya AI Technologies ("SimpleGrid," "we," "our," or "us") operates the SimpleGrid platform and related services (collectively, the "Platform"). This Privacy Policy explains how we collect, use, store, and protect your information. By accessing or using SimpleGrid, you agree to the practices described here.
1. Information We Collect
1.1 Information You Provide
- Business name, contact details, and operational structure during onboarding
- User account information (names, emails, phone numbers, roles)
- Uploaded files (Excel sheets, PDFs, invoices, purchase orders, scanned records)
- Natural language inputs, commands, and operational instructions, which may be processed by third-party AI providers (see Section 4)
- Workflow configurations, approval rules, and policies you define
- Communications with our team
1.2 Information Collected Automatically
- Device and browser information (IP address, browser type, OS)
- Usage data (features used, time spent, actions taken)
- Log data (access times, error logs, API requests)
- Cookies and similar tracking technologies
1.3 Business and Operational Data
- Financial transaction records, inventory data, and workflows
- Employee and vendor information recorded in the Platform
- Approval histories and audit trails
2. How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the Platform
- Configure and personalize your workflows and system structure
- Process uploaded documents using AI/ML models
- Enable real-time updates, approvals, and status tracking
- Communicate about your account, onboarding, and support
- Improve Platform features and capabilities
- Ensure security and prevent fraud
- Comply with legal obligations
We do not sell your data to third parties. We do not train shared AI models on your data.
3. Data Storage and Security
3.1 Storage: Data is primarily stored on secure cloud infrastructure located in India, in compliance with applicable Indian data protection laws.
3.2 Security Measures: We use encryption in transit (TLS/SSL) and at rest, role-based access controls, regular security assessments, and audit trails for all Platform activity. No system is completely secure; we cannot guarantee absolute security.
3.3 Retention: Data is retained while your account is active. Upon termination, data is held for 90 days for export/recovery requests, then deleted or anonymized unless law requires otherwise.
4. Sharing of Information
We may share information with:
- Service providers (cloud hosting, email, analytics) bound by confidentiality obligations
- AI/ML model providers processing inputs solely to deliver services to you
- Legal authorities when required by law or court order
- Successor entities in a merger or acquisition, with advance notice
We do not share data with advertisers or marketing platforms.
5. Your Rights
You may have the right to: access, correct, or delete your personal data; withdraw consent; object to or restrict processing; and request data portability. Contact [email protected] to exercise these rights.
6. Cookies and Marketing-Site Tracking
The SimpleGrid marketing website (simplegrid.ai) uses cookies and similar technologies for site functionality, analytics, and measuring the effectiveness of our marketing. This section covers the marketing website only; Platform Customer Data is governed by Sections 3 and 4 above.
6.1 Cookie categories:
- Necessary - site security and core functionality
- Functional - preferences (including your cookie consent choice)
- Analytics - measure how visitors use the site so we can improve it
6.2 Third-party services on the marketing website:
- PostHog - product analytics
- Google Analytics 4 - aggregate traffic and campaign measurement
- Cal.com - used when you book a demo call
6.3 Consent and your preferences: Analytics cookies do not load until you click Accept on our cookie banner. If you click Decline, or never interact with the banner, no analytics are loaded. You can revoke a previous acceptance at any time by clearing site data in your browser, or by emailing [email protected].
6.4 Regional rights: If you are in the European Economic Area (GDPR), the United Kingdom (UK GDPR), California (CPRA), or India (DPDP Act 2023), you may have additional rights including access, correction, deletion, restriction, data portability, and opt-out of certain processing. Contact [email protected] to exercise these rights.
7. Children's Privacy
The Platform is for businesses and not directed at individuals under 18. We do not knowingly collect data from minors.
8. Changes to This Policy
Material changes will be notified by email or Platform notice. Continued use after the effective date of a revised policy constitutes acceptance.
9. Contact
Email: [email protected]
See also: Terms of Service