Privacy Policy
Last Updated: September 1, 2026 | Effective Date: September 1, 2026
1Introduction
Welcome to Grapple It (“we”, “our”, or “us”), operated by Grapple It Technologies. We are committed to protecting the privacy, confidentiality, and security of all users (“you”, “User”, or “Facility Owner/Operator”) who access our Multi-Facility SaaS Operating System available at https://grappleit.in.
This Privacy Policy details how we collect, process, store, and safeguard your personal information when you use our web platform, APIs, Google OAuth authentication services, and automated notification services.
2Google API Services & OAuth 2.0 User Data Disclosures
When you choose to authenticate using Google Sign-In (“Continue with Google”), Grapple It accesses only the minimal standard profile information required to securely establish your account:
- Primary Email Address: Used strictly to identify your account, send authentication tokens, and provide operational invoices.
- Display Name & Profile Picture: Used to personalize your facility administrative dashboard and owner profile avatar.
- Google Unique User ID: Used to maintain secure cryptographic session linkage across devices.
3Information We Collect
Owner name, business name, WhatsApp mobile number, facility address, branch configuration, room/seat layouts, meal token catalog, and staff credentials.
Razorpay Order IDs, payment transaction status, subscription plan duration, and receipt logs. Sensitive card/banking credentials are processed directly by PCI-DSS certified payment processors (Razorpay) and are never stored on our servers.
4Multi-Tenant Data Isolation & Security
Every facility on Grapple It operates under a strict, cryptographically enforced Multi-Tenant Data Isolation Architecture. Your students, members, dietary logs, and billing ledgers are strictly partitioned using foreign key tenant isolation policies, preventing cross-tenant access.
All communications are encrypted in transit using TLS 1.3 / SSL 256-bit certificates with HSTS strict transport security and stored within enterprise Google Cloud / PostgreSQL infrastructure with automated daily snapshots.
5Your Data Rights & Deletion Requests
In accordance with India's Digital Personal Data Protection (DPDP) Act and global privacy standards, you hold full authority over your data:
- • Access & Portability: You may export all facility, member, and payment reports at any time via CSV/Excel.
- • Correction: You may update or correct profile and business details directly from your dashboard settings.
- • Account Deletion: You may request complete erasure of your account, tenant data, and Google OAuth tokens by emailing grappleit.in@gmail.com. Requests are processed within 48 business hours.
Contact & Grievance Officer
If you have any questions, clarifications, or privacy grievance requests regarding this policy or data processing, please contact our Data Governance team: