Privacy policy

Who is responsible

GridWhy is operated by Fuat Sezer, an individual based in Türkiye, who is the data controller for this site. Questions about this policy go to support@gridwhy.com.

What we collect

If you only visit the site

• A first-party cookie that records how you first arrived (referring site, campaign tags in the link, the first page you opened). It lasts 90 days and is never overwritten. We use it to learn which channels bring customers.
• A session cookie (24 hours) that groups the pages you view in one visit.
• Page views, sent to our own server. We do not use Google Analytics or any third-party analytics script.

If you use the free rank checker

• The business and keyword you searched for, the results, and a hashed form of your IP address used only to enforce the daily limit. The raw IP address is not stored.
• Your email address, if you choose to leave it, together with the report it belongs to.

If you have an account

• Your email address (for sign-in links, scan notifications and billing emails).
• The businesses, keywords, grids, scans and reports you create.
• Billing status from Paddle (plan, renewal date, whether a payment succeeded). We never see or store your card number.

What we do not do

• We do not sell or rent personal data.
• We do not run advertising or share data with ad networks.
• We do not access Google accounts or Google Business Profiles. All rank data is read from public Google Maps results.

Who else processes data

• Paddle (merchant of record): payment, invoices, tax. Paddle processes your billing details under its own privacy policy.
• Supabase: database and authentication hosting (United States).
• Vercel: web hosting.
• Resend: transactional email delivery.
• DataForSEO: the search API we use to read public Google Maps results. It receives the keyword and the coordinates of each grid point, never your identity.
• OpenFreeMap: map tiles for the report maps. Your browser requests tiles directly from it.

How long we keep things

• Scan history: for as long as your account exists. Deleting your account deletes it within 30 days.
• Free checker reports: 12 months, then deleted.
• Event and page-view records: 24 months.
• Billing records: as long as tax law requires.

Your rights

You can ask for a copy of your data, correct it, or have it deleted by emailing support@gridwhy.com. We answer within 30 days. If you are in the UK or EU you also have the right to complain to your data protection authority.

Changes

If this policy changes in a way that matters, we will email account holders before the change takes effect.