GridInvoiceBack to homeScope and responsibility
Altamira Systems, United States, is responsible for the personal information it processes to provide GridInvoice. This policy covers our website, assisted pilot installations, licensing, and support. The website is currently a prelaunch site; checkout and public activation remain closed.
Information we use
- Google identity: verified account email and a stable Google account identifier to check ownership, limit installation access, and associate purchases. Google identity tokens are used to verify requests.
- Business records in your installation: business settings, client details, invoices, estimates, line items, payments, reports, selected spreadsheet data, attachments, PDFs, and backups. These are processed in your separate Google Apps Script, Sheets, and Drive installation, not copied into the licensing database.
- Purchases and installations: purchase references, amount, currency, date, permanent-use status, update coverage, installation and deployment identifiers, storage identifiers, and installed version.
- Support: correspondence you send and technical reports you choose to submit. The diagnostic endpoint accepts installation ID, app version, issue category, and optional request counts and elapsed time; it does not accept invoice or client contents.
- Website and service requests: hosting and security providers may process IP addresses, browser information, request paths, timestamps, and error information to deliver and protect services.
Gumroad processes checkout information under its own policy. We verify purchases with Gumroad. The activation service processes the submitted license key to verify it but does not store that key, full payment-card details, or the complete upstream purchase response in its licensing records.
Google permissions and use
Sheets access supports the business database and selected sheet attachments. Drive access supports documents, attachments and backups. Docs access supports document generation. The app can send invoice-related email at your direction, manage recurring triggers, display its interface, and contact the licensing service. It does not request permission to read your Gmail inbox.
We use Google data only to provide and support the features you choose, verify identity, and protect the service. We do not sell Google user data, use it for advertising, or use it to train generalized AI models. Human access to the contents of your Google files requires your explicit consent for a specific support task, except where necessary for security or legal obligations permitted by Google's policies.
GridInvoice's use and transfer of information received from Google APIs follows the Google API Services User Data Policy and Google Workspace user data policy, including their Limited Use requirements.
Sharing and service providers
Google provides the app runtime, customer storage, identity verification, and Cloud hosting for licensing and diagnostics. Amazon Web Services hosts this website; Cloudflare provides domain infrastructure. Gumroad processes purchases. Providers process information needed for their roles, and their own policies govern their direct services to you. Email you request is sent to the recipients you select. We may also disclose information when necessary to meet a legal obligation or address fraud or a security incident.
Information may be processed in the United States and other locations where these providers operate. We do not claim that all processing remains in a single country.
Retention
- Your Sheets and Drive files: you control their retention, including backups and copies. Removing the app or revoking access does not automatically delete them.
- Technical diagnostic reports: scheduled to expire 30 days after submission. Provider deletion jobs can take additional time to remove expired records. Billing-service operational logs use a 30-day retention setting.
- License and purchase records: we retain the minimum identity, purchase and installation records needed for as long as we administer your permanent entitlement. These records are not subject to the 30-day diagnostic limit. After entitlement administration ends, records are retained only as needed for an unresolved refund/dispute, fraud prevention or applicable recordkeeping obligations; unnecessary data is removed after those purposes end.
- Support correspondence: kept while handling the request and any related follow-up or dispute. We review closed correspondence for deletion when no longer needed. Payment and infrastructure providers may have separate retention requirements under their policies.
Your choices and requests
You can review, export and delete your business records in Google Sheets and Drive. Remove unneeded backups separately and review Drive's trash if you want to permanently delete files. You can revoke GridInvoice's access in your Google account connections; doing so stops authorized app access but does not remove existing files or purchase records.
Contact us to request access, correction, export or deletion of information Altamira Systems holds about you. We verify ownership before acting and explain any records that must be retained and why. Deleting licensing identity or installation records can prevent future activation, update delivery or account recovery; we will explain that consequence before proceeding. A deletion request does not itself waive your permanent-use rights.
Security, cookies and changes
We use HTTPS, owner access checks, separate pilot installations and restricted backend service identities. No system can guarantee absolute security. Send redacted examples rather than client files unless a specific support exchange requires them.
This public website uses no analytics, advertising scripts, sign-in forms or tracking cookies. Google sign-in and Gumroad checkout, when used separately, have their own cookie practices. We will update this page and its date when our practices change and communicate material changes to affected customers.
For support, refund, or privacy requests, use the contact options on our support page.