Short version: Grantio is a developer tool. We collect only what is necessary to operate the service. We do not sell your data. Your Google Play purchase data is processed on your own infrastructure.
Grantio is operated by Epignosis. This Privacy Policy explains how we collect, use, and protect information when you use our MCP server, SDK, and associated web tools (collectively, "the Service").
For privacy-related questions, contact us at privacy@epignosishq.com.
We collect the following categories of information:
| Category | Examples | Purpose |
|---|---|---|
| Account data | Email address, organisation name | Account creation and communication |
| Configuration data | Project IDs, product mappings, paywall configs | Running the Service on your behalf |
| Usage data | API call counts, error rates, latency metrics | Service reliability and improvement |
| Technical data | IP addresses, user-agent strings, request timestamps | Security, rate limiting, abuse prevention |
We do not store Google Play purchase tokens or transaction details. Purchase verification requests are proxied to Google's API and the result is returned to your application; we do not persist the raw purchase data.
We use the information we collect to:
We do not use your data for advertising or sell it to third parties.
We share data only in these circumstances:
We retain data for as long as your account is active or as needed to provide the Service. Configuration data is deleted within 30 days of account closure. Aggregated, anonymised usage statistics may be retained indefinitely.
Server logs containing IP addresses and request metadata are retained for up to 90 days for security purposes.
We implement industry-standard security measures including:
No method of transmission or storage is 100% secure. We encourage you to protect your own API keys and service account credentials.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at privacy@epignosishq.com. We will respond within 30 days.
The Service's web interface uses only functional cookies necessary for authentication and session management. We do not use third-party analytics trackers, advertising cookies, or fingerprinting technologies.
The Service is intended for developers and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.
The Service is hosted on Google Cloud infrastructure. Data may be processed outside your country of residence. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms to ensure adequate data protection.
We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top and, for material changes, notify you by email or via a notice in the Service. Continued use of the Service after changes constitutes your acceptance of the updated policy.
For any privacy-related questions or to exercise your rights:
Epignosis — Data Privacy
Email: privacy@epignosishq.com
For general inquiries: legal@epignosishq.com