Privacy Policy

1. Introduction

Welcome to GridWall ("we," "us," or "our"). GridWall is a link-in-bio tool for Instagram creators, accessible at gridwall.link (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By accessing or using GridWall, you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

When you create an account and use GridWall, we collect the following information:

• Account credentials: your email address and password (password is securely hashed and never stored in plain text).
• Profile information: your chosen username, Instagram profile URL, bio, and avatar image.
• Content: the Instagram post URLs you add to your wall, section titles, section descriptions, and any social links you configure.
• Theme preferences: your selected visual theme for your public profile page.

2.2 Information Collected Automatically

When you or visitors interact with the Service, we automatically collect:

• Analytics data: profile view counts and content item click counts, aggregated on a daily basis.
• Usage data: information about how you interact with the dashboard and Service features.
• Device and browser information: collected through Vercel Speed Insights for performance monitoring purposes.

2.3 Information from Third Parties

When you provide your Instagram URL, we may retrieve your public Instagram profile picture and biography through automated processes to pre-fill your GridWall profile. This information is sourced from publicly available Instagram data.

3. How We Use Your Information

We use the information we collect for the following purposes:

• (a) To create and maintain your account and public profile page at gridwall.link/[username].
• (b) To authenticate your identity and secure your account.
• (c) To display your curated content to visitors of your public profile.
• (d) To provide analytics on profile views and content clicks so you can understand your audience engagement.
• (e) To import and host media from Instagram posts you add to your wall.
• (f) To improve and optimize the Service, including performance monitoring.
• (g) To communicate with you about your account or changes to the Service.

4. Data Storage and Security

4.1 Storage

Your data is stored using the following infrastructure:

• Authentication and database: Supabase provides our authentication system and PostgreSQL database. Your account data, profile information, sections, and analytics are stored in Supabase.
• Avatar images: uploaded to Supabase Storage.
• Media content: Instagram post media (images and videos) imported to your wall are hosted on an external CDN.

4.2 Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• Authentication is managed through Supabase Auth with secure session handling.
• Row-level security policies are enforced at the database level.
• All data transmission occurs over HTTPS/TLS encrypted connections.

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

GridWall relies on the following third-party services to operate. Each service has its own privacy policy governing its use of data:

• Supabase — authentication, database, and file storage.
• Vercel — application hosting and performance analytics (Vercel Speed Insights).
• n8n (self-hosted) — webhook-based automation for importing Instagram content and AI-powered wall generation.
• Instagram / Meta — we access publicly available Instagram post data and profile information when you provide URLs to import.

We do not sell, rent, or trade your personal information to any third party. Data is shared with third-party services only as necessary to provide the Service.

6. Cookies and Tracking

GridWall uses cookies and similar technologies for the following purposes:

• Authentication cookies: essential cookies managed by Supabase to maintain your logged-in session. These are strictly necessary for the Service to function.
• Performance analytics: Vercel Speed Insights may collect anonymized performance metrics.

We do not use advertising cookies or third-party tracking cookies. We do not build advertising profiles based on your browsing activity.

7. Public Profile Visibility

By creating a GridWall profile, you acknowledge that the following information will be publicly accessible at gridwall.link/[your-username]:

• Your username, avatar, and bio.
• Your social links.
• All sections and content items you have added to your wall.

Your email address, password, and analytics data are never publicly displayed.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data. You can update your profile information (bio, avatar, social links, theme) at any time through your dashboard.
• Deletion: request deletion of your account and associated data. Contact us at the email below to initiate account deletion.
• Data portability: request your data in a structured, commonly used format.
• Objection: object to processing of your data in certain circumstances.

To exercise any of these rights, please contact us at support@gridwall.link. We will respond to your request within 30 days.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you request account deletion, we will delete your profile data, sections, content items, and analytics data within 30 days of the request. Some data may be retained in backups for a limited period as part of our standard backup procedures.

10. Children's Privacy

GridWall is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: support@gridwall.link

Website: gridwall.link