Privacy Policy

1. Introduction

Welcome to grevly ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a safe and positive experience while using our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

By using grevly, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

Platform Role

grevly is a technology platform that enables users to connect with one another, form groups, and organize activities independently. We do not organize, host, supervise, verify, or endorse any groups, events, or user interactions. Users are solely responsible for the events they create or attend and for their interactions with other users, both online and offline.

2. Privacy by Design

At grevly, privacy is built into our platform by design. We aim to limit data collection to what is reasonably necessary to operate and improve our Service. We do not sell personal information to third parties, and we implement safeguards to keep your data secure and under your control.

3. Information We Collect

3.1 Information You Provide to Us

We collect information you voluntarily provide, including:

Account Information: When you sign in using OAuth providers (such as Google, Apple, or Yahoo), we collect your name, email address, profile picture, and other information provided by the authentication provider.
Profile Information: Name, email address, and profile picture associated with your account.
Content You Create: Group descriptions, event details, comments, messages, and other content you post.
Event Participation: RSVP status, attendance indicators, and interactions with events.
Group Membership: Groups you create or join, your role, and membership status.

3.2 Automatically Collected Information

When you use the Service, we automatically collect certain information, including:

Usage Data: Pages visited, features used, and time spent on the platform.
Device Information: Browser type, device type, operating system, and IP address.
Log Data: Server logs such as access times, pages viewed, and error messages.
Session Information: Session identifiers and authentication tokens.

3.3 Information from Third-Party Services

When you authenticate using third-party OAuth providers (Google, Apple, Yahoo), we receive information according to their privacy policies and your account settings. We collect only the minimum information necessary to create and maintain your account.

4. How We Use Your Information

We use collected information to:

Provide, maintain, and improve the Service
Create and manage user accounts
Enable users to create, discover, and join groups and events
Facilitate communication between users
Send essential service-related notifications
Monitor and analyze usage patterns
Detect, prevent, and address security or technical issues
Enforce our Terms of Service and comply with legal obligations
Respond to inquiries and provide customer support

We do not use personal information for advertising purposes and do not sell personal data.

5. How We Share Your Information

We share information only in the circumstances described below.

5.1 With Other Users

Your name and profile picture may be visible to members of groups you join.
Event organizers and attendees may see your RSVP status and basic profile information.
Content you post (such as comments or event details) is visible to relevant users.

Information you share with other users is shared at your own discretion. We are not responsible for how other users use or disclose information you voluntarily make available through the Service.

We do not verify the identity, background, credentials, or conduct of users, group organizers, or event participants.

5.2 Service Providers

We may share information with trusted third-party service providers that assist us in operating the Service, such as:

Hosting and cloud infrastructure providers
Database and data storage services
Authentication providers (Google, Apple, Yahoo)

These providers are contractually required to protect your information and use it only for authorized purposes.

5.3 Legal Requirements

We may disclose information if required by law or if we reasonably believe disclosure is necessary to:

Comply with legal obligations
Protect our rights or property
Prevent or investigate wrongdoing
Protect the safety of users or the public

5.4 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to this Privacy Policy.

6. Data Security

We implement reasonable technical and organizational measures to protect personal information, including:

Encryption of data in transit (HTTPS/TLS)
Secure OAuth-based authentication
Access controls and authorization restrictions
Regular security updates and monitoring

No system is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Privacy Rights and Controls

7.1 Access and Portability

You may access your account information through your settings and request a copy of your data in a portable format.

7.2 Correction

You may update or correct your profile information at any time. Certain information (such as email) may be managed through your OAuth provider.

7.3 Deletion

You may delete your account at any time. This will remove your personal information from active systems, subject to retention requirements described below.

7.4 Privacy Settings

You may control privacy options, including:

Joining public or private groups
Visibility of event participation
Profile visibility settings

7.5 Opt-Out

You may opt out of non-essential notifications. Essential service communications cannot be disabled.

8. Data Retention

We retain personal information for as long as necessary to operate the Service and meet legal obligations. When you delete your account, we will:

Remove personal data from active systems
Anonymize or delete content where feasible
Retain limited backup data for up to 90 days
Retain information as required by law or for legitimate business purposes (e.g., fraud prevention)

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Maintain sessions and authentication
Remember preferences
Analyze usage patterns

You can manage cookies through your browser settings, though disabling cookies may limit functionality.

10. Children's Privacy

The Service is not intended for children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children under 13 and will delete such information if discovered.

11. International Data Transfers

Your information may be processed in countries other than your own. We apply appropriate safeguards to protect your information regardless of processing location.

12. California Privacy Rights (CCPA)

California residents have the right to:

Know what personal information we collect and use
Request deletion of personal information
Opt out of the sale of personal information (we do not sell personal information)
Exercise rights without discrimination

13. European Privacy Rights (GDPR)

If you are in the EEA, you have rights including access, correction, deletion, restriction, portability, objection, and withdrawal of consent where applicable.

Requests may be submitted as described in Section 17.

14. Third-Party Links and Services

The Service may link to third-party websites or services not operated by us. We are not responsible for their privacy practices and encourage reviewing their policies.

15. Data Breach Notification

If a data breach affecting personal information occurs, we will investigate promptly, take appropriate remedial action, and notify affected users and authorities as required by law.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy, revising the "Last updated" date, and, where appropriate, notifying users.

Continued use of the Service constitutes acceptance of the updated policy.

17. Contact Us

If you have questions or privacy-related requests, contact us at:

Email: contact@grevly.com

Please include "Privacy Request" in the subject line and sufficient information to verify your identity.

This Privacy Policy is governed by the laws of the United States and the state in which our company is registered.