1. Scope
This Privacy Notice explains how Graft AI ("Graft," "we," "us," or "our") handles personal information collected through this private beta website, workflow assessment, private-beta request forms, and related communications. Product-specific privacy terms may also apply to private-beta access.
2. Information we collect
Information you provide
When you submit a workflow assessment, we collect your work email address, company, role, the system or application involved, a high-level workflow description, frequency or volume, timeline, and any optional details you choose to provide. When you request private-beta access or contact us, we may collect your work email address and the content of communications you send us.
Attribution and technical information
When you submit a form, we may collect first-party campaign parameters included in the page URL, the first page path visited, the referring page without its query string, the part of the site where the form was submitted, and the submission time. We temporarily retain this attribution in browser session storage so it can accompany a form submitted during the same browsing session. The server assigns a conversion type and opaque conversion ID to distinguish the form completed and recognize repeated delivery of the same submission. This conversion record is created only when a form is submitted; Graft does not use it to track page views or activity across websites. Our hosting infrastructure may also process standard network and device information needed to deliver and secure the site, such as IP address, browser type, request time, and error information. The private-beta website does not set advertising or analytics cookies and does not use third-party analytics or third-party behavioral advertising.
Describe workflows at a high level. Do not submit passwords, access tokens, personal customer records, financial account data, health data, confidential production data, or other sensitive information through the assessment, private-beta request, or general contact channels.
3. How we use information
We use personal information to:
- review workflow assessments, evaluate whether Graft may fit the described business need, and respond to the submitting company;
- manage private-beta requests and communicate about access when requested;
- respond to questions, partnership inquiries, and feedback;
- understand which first-party campaigns and site paths lead to inquiries;
- operate, secure, debug, and improve the website; and
- comply with law and protect the rights, safety, and integrity of Graft, our users, and others.
Where applicable, we rely on your consent, our legitimate interests in operating a secure private beta website and responding to business inquiries, steps requested before entering into a contract, and compliance with legal obligations.
5. Retention
We generally retain private-beta request and workflow-assessment information, including the associated conversion record, until the private-beta or business-inquiry process concludes and for no longer than 24 months after our last interaction with you, unless you ask us to delete it earlier or a longer period is reasonably necessary for legal, security, fraud-prevention, or recordkeeping purposes. Browser session storage used for first-party attribution is scoped to the browsing session.
6. Your choices and privacy rights
You can unsubscribe from product emails using the link in the message or by contacting us. Depending on where you live, you may have rights to request access to, correction of, or deletion of personal information, or to object to or restrict certain processing. You may also have the right to appeal a decision or lodge a complaint with a privacy regulator.
To make a request, contact us. We may need to verify your identity before completing a request. We will not discriminate against you for exercising applicable privacy rights.
7. Security
We use administrative, technical, and organizational measures designed to protect personal information. No internet transmission or storage system can be guaranteed to be completely secure, so please do not send sensitive credentials or confidential production data through private-beta request forms or general contact channels.
8. International use
Graft may operate and use service providers in countries other than your own. Where required, we use appropriate safeguards for international data transfers. Contact us for more information about safeguards that apply to a particular transfer.
9. Children
The private beta website is intended for business users and is not directed to children under 13. We do not knowingly collect personal information from children through private-beta request forms. If you believe a child has submitted information, contact us so we can delete it.
10. Changes to this notice
We may update this notice as the product, website, or law changes. We will post the revised notice here and update the effective date. If a change materially affects how we use information already collected, we will provide additional notice where required.
11. Contact
Questions, privacy requests, and general inquiries can be sent to [email protected].