Last updated: September 1st, 2025
This Privacy Policy (the “Policy”) explains how Grand Labs, Inc. and its affiliates (collectively, “Grand,” “we,” “our,” or “us”) collect, use, disclose, and otherwise process personal data when you visit our websites, use our mobile/desktop applications (including the non‑custodial Grand Wallet), or interact with any other online products, features, or services that link to this Policy (together, the “Services”).
This Policy does not cover job applicants, employees, contractors, or other workforce members, nor information that is not subject to applicable data protection laws (e.g., de‑identified or public blockchain data in its public form). This Policy is not a contract and does not create legal rights beyond those provided by law.
The categories of personal data we collect depend on how you interact with us and our services. For example, you may provide us your personal data directly when you access our website, make an account, download our mobile application, or otherwise contact us or interact with us.
We also collect personal data automatically when you interact with our websites and other services and may also collect personal data from other sources and third parties.
The categories of personal data we collect depend on how you interact with the Services.
We collect information:
Contact & Profile : Contact Information, including first and last name, email address, phone number, and communication preferences. We use this information primarily to fulfill your request or transaction, to communicate with you directly, and to send you marketing communications in accordance with your preferences. We may use a third party service provider to process your sensitive Personal Data or criminal records to perform Know Your Customer (KYC) checks to comply with applicable Anti-Money Laundering (AML) laws.
Account Credentials — Account Information, including first and last name, email address, account credentials or one-time passcodes, and the products or services you are interested in, purchased, or have otherwise used. We use this information primarily to administer your account, provide you with our products and services, communicate with you regarding your account and your use of our products and services, and for customer support purposes.
Customer Support & Feedback — including email addresses, or other contact information we make available to customers, where permitted by law (including through the use of automated tools provided by us or our third-party provider). We use this information primarily to investigate and respond to your inquiries, to communicate with you via email, and to improve our products and services.
KYC/KYB (where required by a third‑party partner) — identity information and documents (e.g., government ID, proof of address, date of birth, sanctions screening results) collected by regulated partners to meet AML/CTF obligations. We receive status signals and limited metadata (e.g., “KYC passed/failed,” reason codes) but typically do not receive copies of your documents unless necessary to resolve an issue and permitted by law.
Payment Info — Please note that we use third-party payment providers to process payments made to us. We do not retain any personally identifiable financial information, such as payment card numbers, that you provide to these third-party payment providers in connection with payments. Rather, all such information is provided directly by you to our third-party payment providers. The payment provider’s use of your personal data is governed by their privacy notice.
Marketing Preferences — Marketing and communications information, such as your preferences in receiving marketing from us and your communication preferences.
When you use the Services, we and our service providers automatically collect:
Device & Network : Information About Your Device and Network, including the device type, manufacturer, and model, operating system, IP address, browser type, Internet service provider, and unique identifiers associated with you, your device, or your network (including, for example, a persistent device identifier or advertising ID). We employ third-party technologies designed to allow us to recognize when two or more devices are likely being used by the same individual and may leverage these technologies (where permitted) to link information collected from different devices.
Usage & Diagnostics : App and site activity, feature usage, performance metrics, crash logs, error traces, and referral/UTM data.
Interaction Data : Information About the Way Individuals Use Our Services and Interact With Us, including the site from which you came, the site to which you are going when you leave our services, how frequently you access our services, whether you open emails or click the links contained in emails, whether you access our services from multiple devices, and other browsing behavior and actions you take on our services (such as the pages you visit, the content you view, videos you watch, the communications you have through our services, and the content, links and ads you interact with). We employ third-party technologies designed to allow us to collect detailed information about browsing behavior and actions that you take on our services, which may record your mouse movements, scrolling, clicks, and keystroke activity on our services and other browsing, search or purchasing behavior. These third-party technologies may also record information you enter when you interact with our products or services, or engage in chat features or other communication platforms we provide.
Cookies/SDKs/Similar Tech : We use cookies, pixels, local storage, and SDKs for essential operations (authentication, security), analytics, fraud prevention, and—where permitted—marketing.
All of the information collected automatically through these tools allows us to improve your customer experience. For example, we may use this information to enhance and personalize your user experience, to monitor and improve our products and services, and to improve the effectiveness of our products, services, offers, advertising, communications and customer service. We may also use this information to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the site; (b) identify you across multiple devices; (c) provide and monitor the effectiveness of our services; (d) monitor aggregate metrics such as total number of visitors, traffic, usage, and demographic patterns on our website; (e) diagnose or fix technology problems; and (f) otherwise to plan for and enhance our products and services.
For information about the choices you may have in relation to our use of automatic data collection technologies, please refer to the Your Privacy Choices section below.
We may receive the same categories of personal data as described above from the following sources and other parties:
Mobile Sign-On: We may provide you, including through Passkeys, the ability to log in to our mobile applications or authenticate yourself using facial, fingerprint, or other biometric recognition technology available through your mobile device. If you choose to utilize these login features, information about your facial geometry, your fingerprint, or other biometric information will be collected by your mobile device for authentication purposes. We do not store or have access to this biometric information. Instead, your mobile device will perform the biometric authentication process and only let us know whether the authentication was successful. If the authentication was successful, you will be able to access the applicable mobile application or feature without separately providing your credentials. For more details, please refer to the biometric authentication guides offered by your device provider.
Service Providers: Our service providers that perform services on our behalf, such as analytics and certain marketing providers, collect personal data and often share some or all of this information with us. For example, we receive personal data you may submit in response to requests for feedback to our survey providers.
Other Sources: We may also collect personal data about you from other sources, including publicly available sources, third-party data providers, brand partnerships, or through transactions such as mergers and acquisitions.
Inferences: We may generate inferences or predictions about you and your interests and preferences based on the other personal data we collect and the interactions we have with you.
In addition to the primary purposes for using personal data described above, we may use personal data we collect to:
Fulfill or meet the reason the information was provided, such as to fulfill our contractual obligations or to deliver the services requested or provided by our third-party service providers;
Manage our organization and its day-to-day operations;
Communicate with you, including via email;
Facilitate the relationship we have with you and, where applicable, the company you represent;
Request you provide us feedback about our product and service offerings;
Address inquiries or complaints made by or about an individual in connection with our products or services;
Create and maintain accounts for our users;
Market our products and services to you, including through email and social media;
Administer, improve, and personalize our products and services, including by recognizing you and remembering your information when you return to our products and services;
Develop, operate, improve, maintain, protect, and provide the features and functionality of our products and services;
Identify and analyze how you use our products and services;
Infer additional information about you from your use of our products and services, such as your interests.
Create aggregated or de-identified information that cannot reasonably be used to identify you, which information we may use for purposes outside the scope of this Privacy Notice;
Conduct research and analytics on our user base and our products and services, including to better understand the demographics of our users;
Improve and customize our products and services to address the needs and interests of our user base and other individuals we interact with;
Test, enhance, update, and monitor the products and services, or diagnose or fix technology problems;
Help maintain and enhance the safety, security, and integrity of our property, products, services, technology, assets, and business;
Defend, protect, or enforce our rights or applicable contracts and agreements, as well as to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of third parties;
Detect, prevent, investigate, or provide notice of security incidents or other malicious, deceptive, fraudulent, or illegal activity and protect the rights and property of Grand and others;
Facilitate business transactions and reorganizations impacting the structure of our business;
Comply with contractual and legal obligations and requirements;
Fulfill any other purpose for which you provide your personal data, or for which you have otherwise consented.
We disclose or otherwise make available personal data in the following ways:
To Marketing Providers: We coordinate and share personal data with our marketing providers in order to advertise and communicate with you about the products and services we make available.
To Service Providers: We engage other third parties to perform certain services on our behalf in connection with the uses of personal data described in the sections above. Depending on the applicable services, these service providers may process personal data on our behalf or have access to personal data while performing services on our behalf..
To Other Businesses as Needed to Provide Services: We may share personal data with third parties you engage with through our services or as needed to fulfill a request or transaction including, for example, payment processing services.
In Connection with a Business Transaction or Reorganization: We may take part in or be involved with a business transaction or reorganization, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose, transfer, or assign personal data to a third party during negotiation of, in connection with, or as an asset in such a business transaction or reorganization. Also, in the unlikely event of our bankruptcy, receivership, or insolvency, your personal data may be disclosed, transferred, or assigned to third parties in connection with the proceedings or disposition of our assets.
To Facilitate Legal Obligations and Rights: We may disclose personal data to third parties, such as legal advisors and law enforcement:
in connection with the establishment, exercise, or defense of legal claims;
to comply with laws or to respond to lawful requests and legal process;
to protect our rights and property and the rights and property of our agents, customers, and others, including to enforce our agreements and policies;
to detect, suppress, or prevent fraud;
to reduce credit risk and collect debts owed to us;
to protect the health and safety of us, our customers, or any person; or
as otherwise required by applicable law.
With Your Consent or Direction: We may disclose your personal data to certain other third parties or publicly with your consent or direction. For example, with your permission, we may post your testimonial on our websites.
We disclose or otherwise make available personal data in the following ways:
Communication Preferences
Email Communication Preferences: You can stop receiving promotional email communications from us by clicking on the “unsubscribe” link provided in any of our email communications. Please note you cannot opt-out of service-related email communications (such as, account verification, transaction confirmation, or service update emails).
Push Notification Preferences: You can stop receiving push notifications from us by changing your preferences in your device’s notification settings menu or in the applicable service-specific application. Please note we do not have any control over your device’s notifications settings and are not responsible if they do not function as intended.
Direct Mailing Preferences: You can stop receiving promotional direct mail communications from us by contacting us at support@itsgrand.app. Please note this opt-out does not affect any mailings that are controlled by third parties that may feature or mention our services.
Where we have your consent for the processing of your personal data (e.g., when you opt in to receive certain types of marketing communications from us), you may withdraw your consent by following the instructions provided when your consent was requested or by contacting us as set forth in the Contact Us section below.
Where a Grand specific preference manager or privacy setting is not available, you may be able to utilize third-party tools and features to further restrict our use of automatic data collection technologies. For example, (i) most browsers allow you to change browser settings to limit automatic data collection technologies on websites, (ii) most email providers allow you to prevent the automatic downloading of images in emails that may contain automatic data collection technologies, and (iii) many devices allow you to change your device settings to limit automatic data collection technologies for device applications. Please note that blocking automatic data collection technologies through third-party tools and features may negatively impact your experience using our services, as some features and offerings may not work properly or at all. Depending on the third-party tool or feature you use, you may not be able to block all automatic data collection technologies or you may need to update your preferences on multiple devices or browsers. We do not have any control over these third-party tools and features and are not responsible if they do not function as intended.
If you have any questions about reviewing, modifying, or deleting your personal data, you can contact us directly at support@itsgrand.app. We may not be able to modify or delete your personal data in all circumstances.
Certain of our third-party providers and partners offer additional ways that you may exercise control over your personal data, or automatically impose limitations on the way we can use personal data in connection with the services they provide:
Device-Specific / Platform-Specific Preferences: The device and/or platform you use to interact with us (such as you mobile device or social media provider), may provide you additional choices with regard to the data you choose to share with us. For example, many mobile devices allow you to change your device permissions to prevent our products and services from accessing certain types of information from your device (such as your contact lists or precise geolocation data), and many social media platforms allow you to change your platform permissions to prevent integrated products and services from accessing certain types of information connected with your profile. Please refer to your device or platform provider’s user guides for additional information about implementing any available platform-specific targeted advertising opt-outs.
We will usually retain the personal data we collect about you for no longer than reasonably necessary to fulfil the purposes for which it was collected, and in accordance with our legitimate business interests and applicable law. However, if necessary, we may retain personal data for longer periods of time as required under applicable law or as needed to resolve disputes or protect our legal rights.
To determine the appropriate duration of the retention of personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations.
Once retention of the personal data is no longer reasonably necessary for the purposes outlined above, we will either delete or deidentify the personal data or, if that is not possible (for example, because personal data has been stored in backup archives), we will securely store the personal data and isolate it from further active processing until deletion or deidentification is possible.
We implement administrative, technical, and physical safeguards designed to protect personal data (e.g., encryption in transit, access controls, logging, and segregation). No system is 100% secure; you are responsible for securing your devices and wallet backups.
Marketing emails : Unsubscribe via links in emails or in‑app settings.
Push notifications : Disable in OS settings or in‑app preferences.
Cookies & identifiers : Manage via browser settings and OS controls. Blocking certain tools may impact functionality.
Do Not Track : We honor legally required signals where applicable; many browsers send DNT signals that are not yet standardized.
Your rights depend on your location. Subject to exceptions, you may have the right to:
Access your personal data and obtain a copy;
Correct inaccurate or incomplete data;
Delete personal data;
Portability of certain data;
Restrict or object to specific processing, including direct marketing;
Withdraw consent where processing is based on consent;
Appeal certain decisions (where required by law).
Exercising rights :
Submit a request to support@itsgrand.app or via in‑app controls (where available). We may verify your identity and, where permitted, charge a reasonable fee for excessive or unfounded requests. You may also authorize an agent to submit a request, subject to verification.
The Services are not directed to children under 13 (or under 16 in certain jurisdictions), and we do not knowingly collect personal data from them. If you believe a child has provided personal data to us, contact support@itsgrand.app, and we will delete it.
Our Services may link to or enable third‑party sites, wallets, dApps, or services. Their privacy practices are governed by their own policies. We are not responsible for third‑party content or practices. Except where we post, link to or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to any personal data practices of third parties. To learn about the personal data practices of third parties, please visit their respective privacy notices
We may update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify individuals by email to their registered email address, by prominent posting on this website or our other platforms, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.
Grand Labs, Inc.
30 N Gould St Ste R Sheridan, WY 82801 – Wyoming, USA
Support: support@itsgrand.app
