privacy policy
gravee has no accounts. that means we collect very little about you. here's what we do collect, what we don't, and why.
the short version
what we collect
when you make a purchase, we receive and store:
what we don't collect
no names. no passwords. no phone numbers. no company names. no browsing history. no analytics cookies beyond what's technically necessary. no tracking pixels. no behavioral profiles. no marketing database.
we don't know who you work for. we don't know what you do with the leads. we don't build a profile of your interests based on your searches. the less we know about you, the less we can leak.
cookies
gravee itself sets no cookies. Stripe's checkout may set cookies required for payment processing — those are governed by Stripe's privacy policy.
we use no analytics platforms, no conversion tracking, no retargeting pixels, and no social media tracking scripts.
the data we provide
the business leads gravee delivers are aggregated from publicly available sources: business listings, review sites, public websites, and other information that businesses publish voluntarily. we don't scrape private databases, social media DMs, personal email addresses, or anything behind authentication.
our opportunity scores are analytical outputs — our interpretation of public signals, not insider information. a phone number we deliver is the same one that appears on a business's public Google listing.
data retention
purchase records are kept for the duration required by tax and financial regulations (typically 7 years). terms acceptance records are kept indefinitely as legal evidence. IP addresses used for volume cap enforcement are retained for 90 days, then discarded.
search results are not retained after delivery. once your leads are sent, we don't keep a copy of your specific result set.
third parties
Stripe processes payments. they receive your card information directly — gravee never handles or stores full card numbers.
Vercel hosts the website. standard web server logs (IP, user agent, timestamps) may be collected as part of normal hosting operations.
we do not share, sell, or transfer your purchase data to any other third party.
california residents
under the California Consumer Privacy Act (CCPA), California residents have the right to know what personal information is collected, request its deletion, and opt out of its sale.
we don't sell personal information. ever. for deletion requests or questions, contact us using the email on your purchase receipt.
changes
if we change this policy, the updated version will be posted here with a new date. material changes — things that affect what we collect or who we share it with — will be noted visibly on the purchase page for at least 30 days.