Legal
Privacy Policy
Last updated: 7 July 2026
This Privacy Policy explains how Grapity collects, uses, and protects personal data when you use the try.grapity.dev demo service and this website. It applies alongside the Terms of Service.
1. Controller
The data controller for personal data processed by Grapity is:
Marcos Segovia Fernandez
Email: contact@grapity.dev
Grapity is operated as a non-commercial open-source project. There is no legal entity behind the project at this time.
2. Applicable law
This service is hosted in Switzerland. Swiss data protection law, in particular the Federal Act on Data Protection (FADP), applies. Because the service is accessible to users in the European Union, the General Data Protection Regulation (GDPR) may also apply in parallel.
3. What data we collect
We group personal data into three categories based on its source.
3.1 Information you provide to us
- Email address — submitted when you request a demo login link.
3.2 Information we generate
- Demo credentials — a demo username and password, plus client identifiers, created when you provision a demo instance.
- Session cookie — a signed HTTP-only cookie used to keep you logged in.
- Account metadata — timestamps, account status, and the demo instance assigned to you.
3.3 Information we collect automatically
- IP address — used for rate limiting and abuse prevention.
- User-agent string — may be included in gateway logs when you call a demo API.
4. How we use your data
| Data | Purpose |
|---|---|
| Email address | Send you a secure login link, identify your account, and communicate about the demo. |
| Demo credentials | Provision and manage your temporary demo instance. |
| Session cookie | Keep you authenticated during the demo session. |
| IP address | Prevent abuse of the magic-link and demo-creation endpoints. |
5. Legal basis
We process personal data on the following legal bases:
- Consent — when you agree to the Privacy Policy and Terms of Service before submitting your email.
- Contract — to provide and manage the demo instance you requested.
- Legitimate interest — to prevent abuse, maintain security, and keep the service operational.
6. Sharing and third parties
We do not sell personal data. We use the following service providers:
| Provider | Purpose | Location |
|---|---|---|
| Resend | Deliver magic-link emails. | United States |
| Keycloak | Authentication for the demo instance. | Switzerland |
| Coolify | Deploy and host the demo instance. | Switzerland |
| Google Fonts | Serve web fonts on this site. | United States |
7. International transfers
Some personal data is transferred to providers in the United States (Resend, Google Fonts). Transfers are made on the basis of the provider's participation in the EU-US Data Privacy Framework or Standard Contractual Clauses, as applicable. We only transfer data that is necessary for the listed purpose.
8. Security
We use HTTPS for all connections, signed session cookies, and rate limiting to reduce abuse. Demo credentials are stored in the database during the life of the demo. The demo is ephemeral and expires automatically. We do not store your passwords or billing information.
9. Retention
Demo instances and their credentials expire and are deleted two hours after creation. Your email address and account record are kept until you delete your account. Rate-limit records are kept while they are active and may be deleted when you delete your account. You can request deletion at any time by emailing contact@grapity.dev or using the "Delete my account" option in the demo panel.
10. Your rights
Under the FADP and GDPR, you have the right to access, correct, delete, restrict, and port your personal data, as well as to object to processing. To exercise these rights, contact us at contact@grapity.dev. We will respond within 30 days.
11. Cookies and tracking
This website loads fonts from Google Fonts, which may see your IP address. The try.grapity.dev service sets a single session cookie when you log in. We do not use analytics, tracking pixels, or advertising cookies.
12. Changes
We may update this Privacy Policy from time to time. The latest version will always be available at this URL. If we make significant changes, we will notify you by email or through the demo panel.
13. Contact
For privacy questions or data subject requests, contact:
contact@grapity.dev