grait.io · book.grait.io
Privacy policy
What personal data grAIt processes on grait.io and on the booking site book.grait.io, why, and what your rights are.
Who is responsible
Controller: Mariusz Kreft (grAIt), Al. Płk. Władysława Beliny-Prażmowskiego 14, 31-514 Kraków, Poland · hi@grait.io. See also the imprint.
grait.io
The website runs on our own servers and is delivered through Cloudflare, which processes your IP address and technical request data to deliver and protect the site. grait.io sets no cookies and uses no advertising trackers. We count visits and clicks with Umami, a statistics tool we host ourselves: it uses no cookies, stores no IP addresses and creates no profiles across sites (legitimate interest, Art. 6(1)(f) GDPR). Short-lived server logs (IP address, time, requested page, browser) are kept for security and troubleshooting.
The AI Readiness Compass runs entirely in your browser: your answers are not sent to us. If you tick "remember on this device", they are stored only in your browser's local storage until you delete them.
book.grait.io (bookings)
- Account: name, email address and a password hash — or, if you sign in with Google, your name, email address and profile picture provided by Google.
- Bookings: the workshop you book, booking status, answers to registration questions, the amount due, your payment reference and payment status.
- Emails: verification, booking and reminder emails are sent through Google Workspace (Gmail) from hi@grait.io.
- Payments: you pay via PayPal or Revolut. Those providers process your payment under their own privacy policies; we see the payer name, amount and payment note in our account.
- Cookies and statistics: book.grait.io uses only a technically necessary session cookie to keep you signed in. Page visits and booking steps (seat reserved, payment reported, payment confirmed) are counted in our self-hosted Umami without cookies; with a booking we store where you came from (e.g. "WhatsApp") if the link you used said so.
Legal bases: performing your booking (Art. 6(1)(b) GDPR), our legitimate interest in secure operation (Art. 6(1)(f) GDPR), and statutory retention duties for payment records (Art. 6(1)(c) GDPR).
Recipients and transfers
Cloudflare (delivery and protection), Google (email, optional Google sign-in), PayPal and Revolut (payments). Some of these providers may process data outside the EU; such transfers rely on the EU-US Data Privacy Framework or standard contractual clauses.
How long we keep data
Your account stays until you delete it (Settings → delete account on book.grait.io) or ask us to. Booking and payment records are kept as long as tax and commercial law requires.
Your rights
You can request access, correction, deletion, restriction or a copy of your data, and object to processing based on legitimate interest. Write to hi@grait.io. You can also complain to a data protection supervisory authority.