Privacy Policy

Gratio is provided by ClanHQ Private Limited, Amrapali Grand, Greater Noida 201306, Uttar Pradesh, India. Email contact@gratiohq.com.

If you use Gratio at work, your employer decides what Gratio is used for and which information about you is added. Under India's Digital Personal Data Protection Act, 2023, your employer is the Data Fiduciary and ClanHQ is the Data Processor. We process your information only to run Gratio for your employer, under our Data Processing Agreement.

For questions about your information at work, start with your employer's HR team. You can also write to our Grievance Officer (below).

• From your employer: your name, work email, department, location, manager, job title, date of joining and, if your employer provides it, your birthday.
• From you: your profile (photo, preferred name, pronouns, about you, interests), and what you post or send in Gratio: kudos, posts, comments, reactions, wishes, votes, survey answers, event replies and club activity.
• To run the service: sign-in records, the notifications you receive, the devices you allow to receive push notifications (named by browser, such as "Chrome on Android"), and an audit log of admin actions.

We do not record IP addresses in your company's records. To stop abuse, we use a one-way scrambled form of the address briefly as a counter, and clear it within two days.

• to run Gratio for your employer: show your Home, deliver notifications and emails, and give admins the tools your employer chose
• to keep Gratio secure and working: prevent abuse, fix errors and back up data
• to show your employer insights, such as participation and who has not been thanked lately

We do not sell your information, use it for advertising, or train AI models on it.

• Your colleagues see what you post where you post it. Private clubs are visible only to their members, not even to admins.
• Anonymous survey answers are never shown with names, and results appear only once at least five people have answered.
• Admins see what their permissions allow. Everything admins do is written to an audit log the Owner can read.
• ClanHQ staff can see operational details, such as company names, plans and people's names and status, to support your employer. They do not read your company's posts, kudos or comments, except when the law requires it or your employer asks.

Your company's data is stored in Mumbai, India, encrypted in transit and at rest, and kept apart from every other company's data in the database itself.

We use a small number of providers to run Gratio, each bound to protect the data:

• Supabase: database, file storage and sign-in, in Mumbai, India
• Vercel: hosting and delivery of the app
• Resend: sending email
• Razorpay: payments, when your company pays online
• An AI provider, only if your company turns AI help on, with names removed first

Gratio's emails carry no tracking pixels and no tracked links. When we need to confirm an email address, we send a code, never a sign-in link.

The app uses only the cookies it needs to keep you signed in and remember your light or dark choice. Our marketing site counts visits without cookies.

We keep your company's data while it uses Gratio. Your employer can remove people and content at any time. When a company stops using Gratio, its workspace is deleted with all its people, posts and files. Backups age out within 30 days.

We keep invoices and payment records for 8 years, as Indian tax law requires, and a short record that the workspace was deleted, without any employee data.

You can see and correct your own profile in Gratio. To access, correct or erase your information, or to withdraw consent your employer relied on, contact your employer; we help them respond. If you are not satisfied, write to our Grievance Officer, and you may also complain to the Data Protection Board of India.

Grievance Officer, ClanHQ Private Limited, Amrapali Grand, Greater Noida 201306, Uttar Pradesh, India. Email grievance@gratiohq.com. We acknowledge every grievance and aim to resolve it within 30 days.

To show prices in rupees or dollars, our website uses the country your visit comes from, worked out by our hosting provider; we do not store it.

If you request a pilot on gratiohq.com, we keep your name, work email, company, role, optional phone and your note to reply to you, and nothing else. Write to us to have it deleted.

Gratio is for workplaces and is not meant for anyone under 18.

We may update this policy and will tell companies about important changes. The current version is always at gratiohq.com/legal/privacy. Questions: contact@gratiohq.com.