Privacy Policy

Who this applies to

This policy covers GridMe, the GridMe Adobe Illustrator extension, and services on gridme.in (the site, account area, checkout, and support). If you use GridMe for a studio or employer, make sure your use fits their policies too.

The short version

• We collect what we need to run accounts, billing, license checks, and support.
• Your logo files stay in Illustrator on your computer. We do not upload your artwork to our servers.
• Checkout runs through Polar. Sign-in and account data may use Supabase.
• Analytics cookies load only if you accept them; change your choice anytime via Cookie settings in the footer.
• Email legal@gridme.in for privacy requests (access, correction, deletion).

Why we collect data

We only collect data we need to run GridMe. In short:

• Account email — sign you in, link purchases to your license, and send receipts or service notices.
• Payment data — card and billing details are entered at checkout and processed by Polar (merchant of record). We receive subscription status and customer references, not full card numbers.
• License validation — when the Illustrator plugin activates or checks your seat, it sends machine ID, OS, Illustrator version, device label, extension version, and your license key to our license server so we can verify entitlement and enforce one device per subscription.
• Support and site use — messages you send us, optional analytics if you consent, and basic server logs to keep the site secure.

Information we collect

Account and sign-in

When you create an account, we store your email and basic profile fields needed to sign you in and link purchases to your license. Passwords are handled by our auth provider, not stored in plain text on our servers.

Billing and subscriptions

Paid plans are processed by Polar (polar.sh). Polar receives payment details, billing address, and tax information you enter at checkout. We receive subscription status, plan type, customer references, and enough data to issue and validate your license. We do not store full card numbers on gridme.in.

License and devices

To activate Pro, enforce one seat per subscription, and refresh entitlement while you work, the Illustrator extension contacts our servers. We describe exactly what is sent in Extension license checks below.

We store license keys only as a one-way hash on our servers (not in plain text). Your account page and the panel info screen may show a masked key and the device label for this machine. The panel may cache license status locally so it works offline for up to seven days after a successful check. See Licensing for current behavior.

Illustrator extension

Info panel (ⓘ icon)

GridMe docks inside Adobe Illustrator. In the panel header, next to the GridMe name, an information (ⓘ) button opens the in-panel info screen. That screen is part of the extension UI—not a browser window—and includes:

• Account— Free or Pro status, license key entry and activation, this device's label, sign out, and a link to My account on gridme.in.
• Resources — Links to Documentation, video tutorials, and gridme.in.
• Support — Links to Contact support and in-panel Report a bug (sends a short message to our API).
• About — What's new and the installed GridMe extension version (for example, GridMe v1.0.0).

Opening those links may launch your default browser to pages on gridme.in. Normal grid generation does not require the info panel.

Extension license checks

When you activate a license key or when the panel performs a periodic online validation, the extension sends an HTTPS POST request to gridme.in/api/license/validate. We use this only to verify your key, register or refresh your seat, and return tier and expiry—not to collect your artwork.

Fields the extension may send in the request body:

• License key (key) — the key you enter in the info panel Account section.
• Machine ID (machine_id) — a stable identifier generated for this computer (for example from system hardware UUID on macOS or Windows) so we can enforce one active device per license.
• Device label (device_label) — a human-readable name shown in the panel and on your account (for example, DESKTOP-GRIDME or your computer name).
• Operating system (os) — such as macOS or Windows, used for support and compatibility.
• Illustrator version (illustrator_version) — the host app version running the panel (for example, Illustrator 2024).
• Extension version (extension_version) — the installed GridMe build (for example, 1.0.0).

What our server may also record for that request:timestamp, your IP address (for rate limiting and abuse prevention), and the fields above stored on your license's device record in our database while the seat is active.

When you sign out or deactivate a device from the panel or from License & devices, we mark that machine inactive so you can activate elsewhere. Deactivation requests send your license key and machine_id to gridme.in/api/license/deactivate.

The Foundation (free) tier does not require a license key. Pro trial and subscription checks use the same validation flow once you enter a key or complete checkout.

In-panel bug reports

If you use Report a bug from the info panel Support section, the extension may send your message, report type, current tier, and extension version to gridme.in/api/feedback. Do not include client artwork or confidential client names unless you have permission.

Support and feedback (website)

If you contact us through the site, in-panel feedback, or email, we receive your message, account email when provided, and technical context you include (Illustrator version, OS, extension build). Do not send client artwork or confidential client names unless you have permission.

Site usage

Like most websites, our host and analytics tools may log IP address, browser type, pages visited, and error reports. We use this to keep the site running, fix bugs, and see which docs people read.

Cookies and tracking

Cookies are small files a site stores in your browser. We keep our use minimal and group them into two kinds:

• Strictly necessary cookies. These run the site and sign you in (session and security cookies). They cannot be switched off because the site would not work without them, so they do not require consent.
• Analytics cookies. We use Google Analytics to understand how the site is used. These are only set after you accept in our cookie banner. If you reject or ignore the banner, Google Analytics does not load and no analytics cookies are set.

We also use Vercel Web Analytics, which is privacy-friendly and does not use cookies or store personal identifiers, so it runs without a consent prompt.

You can change your mind at any time using the Cookie settings link in the site footer, which reopens the banner so you can grant or withdraw analytics consent. You can also block or delete cookies in your browser settings, though blocking strictly necessary cookies may break sign-in and checkout.

How we use information

• Provide, activate, and renew your GridMe license.
• Process payments, invoices, and billing support.
• Respond to install, licensing, and bug reports.
• Send service email (receipts, security alerts, or policy changes). No marketing unless you opt in.
• Improve the extension and documentation.
• Comply with law and prevent abuse (fraud, license sharing, automated scraping).

Your design files

GridMe reads paths inside Illustrator to generate grids and overlays on locked layers. That processing happens on your computer. We do not upload your .ai files as part of normal panel use. If you attach files to a support message, that is your choice.

Who processes your data

Data controller: GridMe (gridme.in). For privacy law enquiries, contact us by email only at legal@gridme.in. We do not publish a postal address on this website.

• Polar (polar.sh) — merchant of recordfor checkout, tax, invoicing, and subscription billing. Polar processes payment card data and billing addresses you enter at checkout under Polar's own privacy policy.
• GridMe license server (gridme.in) — our API validates license keys, stores hashed keys, device records (machine ID, device label, OS, Illustrator version, extension version), and activation timestamps. This runs on infrastructure we control.
• Supabase — authentication and database hosting for accounts and license records.
• Vercel — website and API hosting, plus privacy-friendly analytics without cookies.
• Google Analytics — optional site analytics, loaded only if you accept analytics cookies.

These providers act as processors or independent controllers as applicable. We use contracts and standard safeguards where required for international transfers.

Other disclosures

We share data only with providers that help us run GridMe, including:

• Polar for checkout and subscription management.
• Hosting and infrastructure providers that run gridme.in and APIs.
• Authentication and database providers for accounts and license records.
• Email delivery for transactional messages.

We may also disclose information if required by law, to protect our rights, or in connection with a merger or sale of the business. We do not sell your personal information to data brokers.

How long we keep data

• Account profile and email — while your account is active, then deleted or anonymised within 90 days of a confirmed deletion request, except where we must keep minimal records for legal compliance.
• License and device records — while your subscription or trial entitlement is active, plus up to 24 months after it ends (fraud prevention, billing disputes, and support).
• Billing and invoices — retained by Polar and us as required for tax and accounting (often 6–10 years depending on jurisdiction).
• Support messages — typically up to 24 months after the ticket is closed.
• Server and security logs — usually 30–90 days unless needed for an incident investigation.
• Analytics — per Google Analytics and Vercel retention settings when enabled.

You can ask us to delete account data where the law allows. Some billing records cannot be erased early because of legal obligations.

Security

We use HTTPS, access controls, and standard practices on our systems. No online service is perfectly secure. Use a strong password on your account and keep your license key private.

Your rights (including GDPR)

If you are in the European Economic Area, United Kingdom, or another region with similar privacy laws, you may have the right to:

• Access — ask what personal data we hold about you.
• Rectification — correct inaccurate data (for example, display name on your account).
• Erasure — request deletion of your account and associated data where we are not legally required to keep it.
• Restriction or objection — in limited cases, ask us to stop certain processing.
• Portability — receive data you provided in a portable format where applicable.
• Withdraw consent — for analytics cookies at any time via Cookie settings in the footer.
• Complain — to your local data protection authority if you believe we handled your data unlawfully.

To exercise access, correction, or deletion rights, email legal@gridme.in from the address tied to your account. We will verify your identity before making changes. We aim to respond within 30 days.

Product or billing help (non-privacy): help@gridme.in.

Children

GridMe is a professional design tool. We do not knowingly collect personal information from children under 16. Contact us if you believe a child provided data and we will delete it.

International users

We may process data in countries where our providers operate. By using GridMe you understand your information may be transferred and stored outside your home country, with safeguards required by applicable law.

Changes to this policy

We post updates on this page and change the date above. Material changes may also be emailed to account holders. Continued use after an update means you accept the revised policy.

Contact

Privacy & data rights: legal@gridme.in
Support & billing: help@gridme.in

We handle legal contact by email only. We do not list a postal address on gridme.in. Product terms: Terms of Service. Billing help: Licensing and Support.