Legal
Privacy
Who is responsible
Uthena LLC (US), operating GrabLTD, is the controller of the data described here. Contact: privacy@grabltd.com. We answer within 7 days.
What we collect
- Account: email, display name, sign-in provider ID.
- Purchases: what you bought, the amount, tax, refund requests and the license codes delivered to you. Card details go to Stripe and never reach us.
- Workspace: the tools, wishlists and saved videos you add.
- Partners and affiliates: business details, payout details held by Stripe, sales and commission records.
- Email: your subscription choices, and delivery events (sent, opened, bounced) for our emails.
- Clicks: which product pages and outbound links are used, to count referrals and pay affiliates.
Cookies
- Session: keeps you signed in. Essential.
- grab_ref: remembers which affiliate link brought you, for 30 days, so the affiliate is credited if you buy. The last link wins.
- grab_coupon: remembers a coupon code from a link, for 30 days, so it applies at checkout.
- Newsletter prompt: a small cookie that limits how often we ask you to subscribe.
We use no advertising trackers across sites. Optional analytics load only if you opt in.
Why we use it
To run your account and purchases (contract), to pay partners and affiliates (contract), to prevent fraud and meet tax duties (legal obligation), and to send our newsletter (your consent, double opt-in; unsubscribe at any time).
Who processes it for us
- Supabase: database and sign-in (US).
- Stripe: payments, tax and payouts to partners and affiliates.
- SendGrid: sending our transactional and marketing email (processes your email address and message content).
- Hosting: our servers run on a European cloud host.
We do not sell your data. We share the minimum needed with partners to deliver a purchase (your email and the order).
Your rights
Under the GDPR and, for California residents, the CCPA: you can ask for a copy of your data, correction, deletion, to object to or restrict processing, and to withdraw consent. We do not sell or share personal information for advertising. Use /settings or write to privacy@grabltd.com. You can complain to your local data protection authority.
How long we keep it
Account data until you delete your account (7-day grace period). Purchase and tax records for the period the law requires. Click records are aggregated after 24 months.
Public maker information
The catalogue includes publicly available information about software and its makers. If you are a maker and want something corrected or removed, email us.
Changes
We post changes here and email account holders before significant ones take effect.