Your data
Privacy policy
This page explains the data required for Grappil to work and how it is used. Last updated: August 10, 2026.
Data controller
LXD CORP, Grappil's publisher, is responsible for processing the data required for the service to work. The company's contact details are listed in the legal notice.
Data processed
Depending on your use, Grappil may process your email address and sign-in details, information about your workspace and collections, the photos and videos you upload, and technical security data (logs, hashed IP address, browser and upload events).
Why
This data is used to create and secure your access, enable uploads and exports, prevent abuse, provide support and comply with legal obligations. Photos and videos are processed solely to provide the collection they are associated with.
Retention and access
The retention period depends on the plan and the state of the collection. The organizer can manage the content of their collection; a contributor can delete their own uploads during the window provided by the service. Limited technical periods may apply for backups, security logs and legal obligations.
Your rights
You may request access, rectification, erasure, restriction or objection to the processing of your data, within the limits provided by the GDPR. Send your request to hello@grappil.com, specifying the email address associated with your account and the nature of your request. Do not include a password or sign-in code.