Privacy Policy

• Your email address, so we can send you your report.
• Your bank statement, which you submit for analysis.
• Payment information, handled entirely by our payment processor. We never see or store your card or bank login details.

When you upload a PDF, it is read in your browser, the file itself is not uploaded to our servers. If your statement is password-protected, it is unlocked on your own device, and your password is never sent to us, stored, or logged. Only the text and figures needed for the analysis are transmitted for processing. (If you upload a photo or screenshot instead of a PDF, that image is sent securely for analysis.)

Your data is encrypted in transit (using HTTPS/TLS) and at rest (our database provider encrypts stored data). Access is restricted to the automated systems that generate your report.

• The statement data we extract to run your analysis is permanently deleted within 24 hours of analysis, sooner if your report is generated, in which case it is deleted as soon as the report is ready.
• We keep your generated readiness reportand basic transaction record (your email, amount, and reference) so you can re-access your report and so we can handle refunds and support. You can ask us to delete these at any time (see "Your rights" below).

We do not sell your data, and we do not share it for advertising or marketing. We only share what is necessary with the trusted service providers that operate Grid Report, each of which processes your data on our behalf:

• Paystack, processing your payment (we never see or store your card details).
• Our AI analysis provider, securely analysing your statement data to generate the report.
• Supabase, encrypted database hosting for your transaction and report.
• Resend, delivering your report by email.
• Vercel, hosting and serving the application.

We may also disclose data where required by law or a valid order from a competent authority.

We use cookies and similar technologies to understand how people use Grid Report and to measure our advertising. These are not needed to run your check, the core service works without them.

When you first visit, we ask for your choice in a consent banner. Non-essential analytics and advertising cookies only run after you accept; if you decline, they are not used. You can change your mind at any time by clearing cookies for this site. We use Google Consent Mode, so until you accept, these tools stay in a restricted, cookie-free mode or off.

The tools we use for this are:

• Google Analytics, to see which pages are used and improve the site.
• PostHog, for privacy-conscious product analytics (how features are used).
• TikTok Pixel, to measure the performance of our adverts.

These providers may set cookies and receive limited usage data (such as pages visited, general location, and device or browser type). We do not use them to identify you personally, and, as noted above, we never sell your data or share your bank statement for advertising.

We process your data in line with the Nigeria Data Protection Act 2023. Our lawful basis is your consent and the performance of our service to you. You have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data;
• withdraw your consent at any time;
• lodge a complaint with the Nigeria Data Protection Commission.

To exercise any of these rights, email hello@usegridrep.com. We will respond within the timeframe required by the NDPA.

The Service is not intended for anyone under 18, and we do not knowingly collect their data.

We may update this policy; the "Last updated" date shows when it last changed. For any privacy question or data request, contact hello@usegridrep.com.