GraySolve Privacy Policy

Effective date: October 30, 2026
Last updated: October 30, 2026

1. Who we are

GraySolve™ is a project-planning web app at graysolve.com, made and operated by EllaGray LLC, an Arkansas limited liability company based in Dover, Arkansas (Pope County) ("EllaGray," "we," "us," or "our").

Contact: info@graysolve.com.

This Privacy Policy explains what information GraySolve handles, where it goes, and the choices you have. It covers the website at graysolve.com, the planner at graysolve.com/app, any installed (home-screen) version of it, and emails we send about your account (together, the "Service").

2. The short version

• Your projects stay on your device. Tasks, budgets, people, notes, and documents you enter in the planner are saved in your web browser on your own device. EllaGray does not receive, store, or see them.
• Google Drive sync is optional. If you turn it on, your project files go directly between your browser and your own Google Drive. GraySolve can see only the files it created.
• Your account is small. Our servers keep your email address, a securely hashed password (never the password itself), and a record of your purchase.
• Payments are handled by Stripe. We never see or store your full card number.
• We don't sell your information, show ads, or use advertising or tracking cookies.

3. Information we keep on our servers

GraySolve runs on Cloudflare (Cloudflare Workers and a Cloudflare D1 database in the United States). We keep only:

• Account information: your email address; your password in hashed form (PBKDF2-SHA256 with a unique random salt, so we cannot read your password); the date your account was created and when you last signed in; and the ID of the Stripe checkout that paid for the account.
• Purchase records: the Stripe checkout and payment IDs, the email used at checkout, the amount, currency, status, and dates.
• Sign-in sessions: when you sign in, your browser gets a secure cookie containing a random code. We store only a one-way hash of that code, so a copy of our database can't be used to sign in as you. Sessions expire after 30 days or when you sign out.
• Password links: if we send you a "set your password" link, we store only a one-way hash of it. Each link works once and expires within 24 hours.
• Security counters: to stop password guessing and abuse, we briefly count attempts by IP address and by email address. These counters reset within 15 minutes to 1 hour and are deleted automatically after they expire.

4. Information that stays on your device (we never receive it)

In the planner you may enter project names, tasks, due dates, assignees, costs, budget items, notes, document titles, and the names, roles, phone numbers, and email addresses of other people ("Project Content").

Project Content is saved in your browser's storage on your device. EllaGray does not receive, collect, store, or have access to your Project Content. PDF exports and summaries are created on your device.

This means you control it, and it also means we cannot recover it for you if it is deleted (for example, if you clear your browser data, use private/incognito browsing, remove the app or browser, or lose your device). Please keep backups (see Section 5).

5. Optional features and what they share

5.1 Google Drive sync (optional)

If you choose to connect Google Drive:
- You sign in through Google's own sign-in service, which runs in your browser.
- GraySolve asks only for Google's "drive.file" permission. It can see and manage only the files GraySolve itself creates in your Drive. It cannot see your other Drive files.
- GraySolve creates a folder named "Project Planner" in your Drive with one file per project and a small "editing-lease" file (a random device code and a time) that helps prevent two devices from editing the same project at once.
- Your files travel directly between your browser and Google. They don't pass through, and are not stored on, EllaGray's servers.
- The temporary Google access token is kept on your device and usually expires within about an hour. We don't receive it.
- Google handles your data under its Privacy Policy (https://policies.google.com/privacy).

You can disconnect at any time in the planner, and you can remove GraySolve's access at https://myaccount.google.com/permissions. Files already saved in your Drive stay there until you delete them.

Google API Services — Limited Use disclosure. GraySolve's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. Specifically:
- We use Google Drive access only to provide the feature you turned on: saving, loading, and syncing your GraySolve project files in your own Drive.
- We do not transfer Google user data to anyone, except as necessary to provide that feature, to comply with law, or as part of a merger, acquisition, or sale of assets with notice to you.
- We do not use Google user data for advertising, including personalized, retargeted, or interest-based ads.
- We do not sell Google user data, and no person at EllaGray reads it. (Because the data flows only between your browser and Google, EllaGray does not receive it at all.)
- We do not use Google user data to develop, improve, or train generalized artificial-intelligence or machine-learning models.

5.2 Backups and export/import (optional)

On browsers that support it, you can pick a folder on your device for automatic backups, and you can export and import backup files. Those files stay wherever you put them; we don't receive them. Anyone with access to them can read them, so store them carefully.

5.3 Reminder notifications (optional, off by default)

If and when you turn on reminders, the planner sends to our Cloudflare server only:
- the due dates of your tasks (no task names, notes, costs, or people);
- your chosen reminder time and time zone; and
- a push subscription, a technical address and keys your browser creates so a notification can reach your device.

We use this only to send your reminders. The notification text is generic (for example, "Open GraySolve to see what's due") and contains no task names. Delivery passes through the push service run by your browser or device maker (such as Google, Mozilla, Apple, or Microsoft) under its own privacy terms. When you turn reminders off, we delete this data. If the push service tells us a subscription is no longer valid, we delete it then.

6. Payments

GraySolve is sold for a one-time price on our website. Payments are processed by Stripe, Inc. on Stripe's secure checkout page. Stripe collects your payment details, email address, and billing details (such as name, country, and postal code) under its own Privacy Policy (https://stripe.com/privacy). We never see or store your full card number. Stripe tells us that your payment succeeded and shares limited details (your email, the amount, and payment IDs), which we use to create your account, support your purchase, handle refunds, prevent fraud, and keep tax and accounting records. If you choose to save your details with Stripe's "Link" feature, that is between you and Stripe.

7. Website hosting, security logs, and analytics

Cloudflare processes standard technical information when your device connects (such as IP address, browser type, the page requested, and the time) to deliver the Service and protect it against attacks and abuse. Cloudflare handles this under its Privacy Policy (https://www.cloudflare.com/privacypolicy/). We do not use it to build profiles of you.

We use Cloudflare Web Analytics on our website pages to count visits in aggregate (for example, page views and load times). It does not use cookies or local storage and does not track you across sites.

Cookies: we use one cookie, a strictly necessary sign-in cookie (__Host-gs_session), set only when you sign in. It is marked HttpOnly and Secure. We use no advertising or tracking cookies. The planner also uses your browser's storage to save your projects and settings on your device, which it needs in order to work.

8. Emails

We email you only about your account and purchase (for example, your receipt or a password link) and to answer your messages. We don't send marketing email unless you ask for it. If you email us, we keep your message and email address to respond and to keep a support record. Please don't send us Project Content unless you want us to see it.

9. How we use information

We use the limited information we hold only to: provide the Service and the features you choose; create and secure your account; process and support purchases and refunds; send reminders you turned on; respond to you; keep the Service secure and prevent fraud and abuse; comply with law and keep required business, accounting, and tax records; and enforce our Terms of Service.

We do not sell or rent your personal information, and we do not "share" it for cross-context behavioral advertising.

10. When information may be disclosed

We disclose the limited information we hold only:
- to service providers that help us run the Service (Cloudflare for hosting and our database, Stripe for payments, and our email provider), only as needed for their services;
- if required by law (such as a valid subpoena or court order), or when we believe in good faith it is necessary to protect the rights, property, or safety of you, others, or EllaGray;
- in a merger, sale, or transfer of all or part of the business, in which case this policy (or one equally protective) will continue to apply; or
- with your consent.

Because we don't hold your Project Content, we cannot disclose it.

11. Other people's information you enter

You may enter information about other people (for example, a caterer's phone number). It stays on your device or in your own storage. You are responsible for having the right to enter and use it. We do not contact the people you list.

12. How long we keep information

• Project Content: on your device or in your own storage until you delete it. We never have it.
• Account information: while your account is open. If you ask us to delete your account, we delete it within 30 days.
• Purchase records: up to 7 years, for tax and accounting purposes, even after an account is deleted.
• Sign-in sessions: up to 30 days, or until you sign out.
• Security counters: up to about 1 hour, then deleted automatically.
• Reminder data: only while reminders are on (see Section 5.3).
• Support emails: up to 3 years.

13. Security

Collecting very little is one of the best protections there is. We also use encrypted (HTTPS) connections, store passwords and sign-in codes only in hashed form, limit sign-in attempts, and keep payment handling with Stripe. No method of storage or transmission is 100% secure, and much of the security of your Project Content depends on your device, browser, Google account, and backup files, which you control. Please use a strong, unique password for GraySolve and protect your device.

14. Your choices and rights

• Your Project Content: export or delete it at any time in the planner, by clearing your browser's site data, or by deleting GraySolve's files from your Google Drive.
• Google Drive: disconnect in the planner, or remove access at https://myaccount.google.com/permissions.
• Reminders: turn them off in the planner, or block notifications in your browser or device settings.
• Your account and other information we hold: email info@graysolve.com to access, correct, or delete it. We may need to confirm the request comes from you, and we may keep records the law requires or allows (such as tax records). We won't treat you differently for exercising your privacy rights.

Depending on where you live (for example, certain U.S. states, the European Economic Area, the United Kingdom, or Canada), you may have more rights under local law, such as to know, access, correct, delete, or port your personal information, to object to or restrict certain processing, and to appeal our decision or complain to your local data-protection authority. We will honor these rights as the law requires.

For users in the EEA/UK: EllaGray is the controller of the limited personal information we receive. We process it to perform our contract with you (your account, purchase, and reminders), for our legitimate interests (security, fraud prevention, and support), to comply with legal obligations, or with your consent (such as turning on reminders or Google Drive), which you may withdraw at any time. Our service providers may process information in the United States and other countries, with safeguards as required by law.

15. Children

GraySolve is not directed to children under 13, and we do not knowingly collect personal information from children under 13. You must be 18 or older to buy GraySolve or hold an account. If you believe a child has given us personal information, contact us and we will delete it.

16. Changes to this policy

We may update this Privacy Policy. When we do, we will change the "Last updated" date and post the new version on graysolve.com. If we make a material change in how we handle personal information, we will give reasonable notice (for example, by email or a notice on the site) before it takes effect and, where the law requires, ask for your consent. We will not use information we already have in a materially different way without your consent.

17. Contact us

EllaGray LLC
Dover, Arkansas
Email: info@graysolve.com
Website: graysolve.com