Privacy Policy

GridXFlex ("we," "us," or "our") is an online marketplace for production-ready UI components, project templates. This Privacy Policy describes how we collect, use, store, and protect information about you when you access or use our website, platform, or any related services (collectively, the "Service").

If you have questions, contact us at gridxflex@gmail.com.

We collect information you provide directly:

• Account information: email address, username, and password when you register.
• Payment information: billing address and payment method details processed by Paddle. We do not store raw card data.
• Communications: messages you send us via support or contact forms.

We collect information automatically when you use the Service:

• Usage data: pages visited, components previewed, credits spent, and timestamps.
• Device and browser data: IP address, browser type, operating system, and referring URLs.
• Cookies and similar technologies: session cookies for authentication and preference cookies for settings persistence.

We use the information we collect to:

• Create and manage your account and credit balance.
• Process payments and deliver unlocked assets to your account.
• Send transactional emails: purchase confirmations, credit expiry warnings, and security alerts.
• Improve the Service through aggregate analytics and bug reports.
• Enforce our Terms of Service and prevent fraud or abuse.
• Comply with legal obligations.

We do not use your personal data to train machine learning models or sell it to third-party advertisers.

We share your data only in the following cases:

• Service providers: Paddle (payment processing), Vercel (hosting), and Resend (transactional email). Each is bound by a data processing agreement.
• Legal requirements: if required by applicable law, court order, or governmental authority.
• Business transfers: in the event of a merger, acquisition, or sale of substantially all assets, your data may be transferred. We will notify you before that occurs.
• With your consent: for any other purpose we describe at the time of collection.

We do not sell, rent, or share your personal data with third-party marketing platforms.

We use first-party cookies strictly necessary for the Service to function (authentication tokens, CSRF protection, and preference state). We do not use third-party advertising cookies.

You can disable cookies in your browser settings. Doing so may prevent you from signing in or accessing your credit balance.

We retain your account data for as long as your account is active. If you close your account, we delete personal information within 90 days, except where we are required by law to retain it (for example, payment records for tax purposes, which we retain for seven years).

Anonymous and aggregated analytics data may be retained indefinitely as it cannot be linked back to you.

We use industry-standard measures including TLS encryption in transit, bcrypt-hashed passwords, and role-based access controls for internal systems. No system is perfectly secure. If you believe your account has been compromised, contact us immediately at security@gridxflex.com.

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated personal data.
• Object to or restrict certain processing activities.
• Data portability: receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email gridxflex@gmail.com. We will respond within 30 days.

The Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page and, for material changes, notify you via email or a prominent in-app banner at least 14 days before the change takes effect.