Privacy Policy.
This policy explains how Granumetrics handles personal data and the rights you have over it. It is an information notice, not a contract.
Who we are
Granumetrics Pte. Ltd.
UEN 202546773C
68 Circular Road, #02-01, 049422 Singapore
Data-protection contact: privacy@granumetrics.com
Legal notices: legal@granumetrics.com
What we collect
- Your email address and profile name, for sign-in and collaboration.
- Contact details and business context you submit through the pilot form, such as your name, company, country, optional phone numbers, material, and workflow.
- Subscription, invoice, tax, and payment-status information. When card payment is used, the payment processor collects the card details rather than Granumetrics.
- Photos you upload and the measurement data you add to them.
- Analysis results generated from your inputs.
- Technical and diagnostic information, such as error and performance logs, to keep the Service reliable.
The app does not request precise device location, contacts, or advertising identifiers. Like most online services, our infrastructure may process IP addresses and related network information, which can indicate an approximate location, for security, reliability, and delivery. We do not sell your data. We use aggregated, non-advertising website analytics and do not use advertising identifiers.
How we use it, and our legal basis
We use your data to operate the Service you signed up for. Our legal basis depends on the purpose:
- Running your account and processing your photos and results: performance of our contract with you, or our legitimate interest in providing the Service under an agreement with your organization.
- Billing, invoices, VAT, and receipts: compliance with our legal obligations, and performance of our contract.
- Keeping the Service secure and reliable: our legitimate interest in protecting accounts and preventing abuse.
- Replying to messages you send through the contact form: our legitimate interest in responding to you.
Providing your email and account details is necessary to use the Service; without them we cannot create an account or run analyses. We do not make automated decisions that produce legal or similarly significant effects on you.
Third parties
We rely on a small number of service providers to operate Granumetrics. We use contractual and technical safeguards appropriate to each service, including data-processing terms where applicable. We require providers to protect personal data consistently with this policy and applicable law:
- Cloud hosting, database, and file-storage providers that hold your account data and the photos, overlays, exports, and reports you create.
- A specialized image-processing provider used to produce analysis results from uploaded photos.
- A payment processor for subscriptions, tax, invoicing, and receipts.
- Email-delivery providers for sign-in, transactional messages, and contact-form replies.
- An error- and performance-monitoring provider that helps us keep the service reliable.
- Website delivery and aggregated, non-advertising website analytics.
Some of these providers may process data outside Singapore or the EU/EEA. The legal mechanism and safeguards depend on the provider, processing location, and law that applies to your use of the Service. Contact us for current information about the providers and transfer arrangements relevant to your use of the Service.
We do not sell your data and do not share it with advertisers.
How long we keep it
Retention depends on the type of data and why we hold it. Personal account data is kept while your account is active and for as long as reasonably necessary to operate the Service, meet contractual or legal obligations, resolve disputes, prevent fraud, and maintain security and audit records.
Contact and pilot enquiries are reviewed periodically and removed when they are no longer needed for the enquiry or a resulting business relationship.
Deleting your personal account removes your sign-in access, memberships, notification registrations, and personal profile data. It does not automatically erase records owned by an organization, such as analyses, source photos, materials, measurements, reports, and audit or provenance records. Those records may be retained for the organization's laboratory, traceability, contractual, or legal needs, while your identifying attribution is removed or replaced with a non-identifying record where the Service supports it. Organization owners can separately request export or erasure of organization-owned data, subject to legal and contractual retention requirements.
Deleting an individual item removes it from normal use where the Service offers that action, but sealed reports, audit trails, derived records, provider logs, and backup copies may be retained for a limited period or where required to preserve integrity, security, or legal compliance. We do not promise a single backup-deletion period for every provider. Contact us for the retention rules that apply to your organization.
Your rights
Depending on where you are, applicable data-protection law may let you ask us to show you your data, correct it, delete it, or export it, subject to lawful exceptions and organization ownership. It may also let you object to or restrict certain processing, and where we rely on consent you can withdraw it. To make a request, email privacy@granumetrics.com. Where the EU GDPR applies, we will respond within its required time limits, normally one month.
You can complain to Singapore's Personal Data Protection Commission at pdpc.gov.sg. If EU/EEA or UK data-protection law applies to you, you may also complain to the competent supervisory authority where you live or work.
Security
We use reasonable administrative, technical, and organizational safeguards to protect personal data. No system is perfectly secure, so please notify us immediately at the email above if you believe your account has been compromised.
Children
Granumetrics is a professional tool not intended for users under 16. We do not knowingly collect data from children. If a minor has created an account, contact us and we will remove it.
Changes
We may update this policy. Material changes will be communicated via the email on your account or an in-app notice, and the date at the top of this page will reflect the most recent revision.