Privacy Policy

Effective date: June 3, 2026
Last updated: June 3, 2026

This Privacy Policy explains how greyspan.ai ("Greyspan," "we," "us," or "our") collects, uses, and protects information when you visit greyspan.ai (the "Site") or use our products and services (the "Services"). By using the Site or Services, you agree to the practices described in this policy.

1. Our Approach to Privacy

Privacy is core to how Greyspan is built. Our products are designed to run inside your own environment, and we collect as little personal information as possible to operate our business and provide our Services. We do not sell your personal information. This is described in more detail in Section 8.

2. Information We Collect

We collect information in the following ways:
Information you provide directly. When you contact us, request a demo, sign up for updates, or communicate with us, we may collect your name, email address, company name, job title, phone number, and the contents of your message.
Information collected automatically. When you visit the Site, we may automatically collect technical information such as your IP address, browser type, device type, operating system, referring URLs, pages viewed, and the dates and times of your visits. We collect this through cookies and similar technologies (see Section 7).

Product and Services data. Greyspan's platform is designed to operate within your own environment whenever possible. Customer prompts, documents, knowledge base files, operational data, identity workflow data, and infrastructure configuration data processed by Greyspan products are intended to remain on the customer’s infrastructure and are not transmitted to or stored by Greyspan unless required to provide the Services, enabled by the customer, submitted for support, or routed through a customer-approved integration or cloud service.

Some Greyspan products may support optional or customer-configured integrations with third-party platforms, including cloud AI providers, identity providers, ticketing systems, documentation platforms, telephony providers, and other business systems. When those integrations are enabled, data may be transmitted to those third-party services as necessary to perform the requested function and subject to the applicable provider’s terms and privacy policy.

We may collect limited account, billing, implementation, diagnostic, logging, and support information necessary to provide, maintain, troubleshoot, secure, and improve the Services.
We do not knowingly collect more information than is necessary for the purposes described in this policy.

3. How We Use Your Information

We use the information we collect to:
Provide, operate, maintain, and improve the Site and Services;
Respond to your inquiries, demo requests, and support needs;
Send you administrative information, updates, and, where permitted, marketing communications you can opt out of at any time;
Understand how the Site is used so we can improve it;
Protect the security and integrity of the Site and Services;
Comply with legal obligations and enforce our agreements.

4. Legal Bases for Processing — EEA/UK users

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: your consent; the performance of a contract with you; our legitimate interests in operating and improving our business, where those interests are not overridden by your rights; and compliance with legal obligations.

5. How We Share Information

We do not sell your personal information. We share it only in the following limited circumstances:
Service providers. With vendors who perform services on our behalf, for example hosting, website operations, analytics, email delivery, customer support, billing, payment processing, cloud infrastructure, AI/model services, telephony services, and business operations tools, bound by contractual obligations to protect your information and use it only as instructed.
Legal and safety. When required by law, subpoena, or legal process, or to protect the rights, property, or safety of Greyspan, our users, or others.
Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this policy continuing to govern your information.
With your direction or consent. When you ask us to share information or otherwise consent to sharing.

6. Third-Party Services

We may use third-party tools and service providers to operate the Site and Services, including website hosting and management tools, analytics tools, email and communication providers, customer support tools, billing and payment processors, cloud infrastructure providers, AI/model providers, telephony providers, speech-to-text providers, text-to-speech providers, identity providers, ticketing systems, documentation platforms, and other integrations requested or enabled by customers.

Examples of third-party services that may be used by Greyspan or integrated with Greyspan products include, as applicable, Google Workspace, Microsoft 365 / Entra ID, AWS, Anthropic Claude, OpenAI, Google Gemini, Twilio, Deepgram, Cartesia, ElevenLabs, Vapi, LiveKit, ConnectWise, HaloPSA, Datto Autotask, Kaseya, ServiceNow, IT Glue, SharePoint, Confluence, Google Drive, and payment, tax, analytics, hosting, or email providers used to operate our business.
These providers may collect information as described in their own privacy policies. We encourage you to review them.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Site, remember your preferences, secure the Site, and analyze traffic. You can control cookies through your browser settings; disabling them may affect some functionality.
If the Site uses a cookie consent banner or cookie preference tool, you may use that tool to manage your cookie preferences where available.

8. We Do Not Sell Your Personal Information

Greyspan does not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not sold personal information in the preceding twelve (12) months and have no plans to do so. If this ever changes, we will update this policy and provide any rights and notices required by applicable law before doing so.
Greyspan does not use customer data, customer documents, customer prompts, or customer operational data to train shared or public AI models unless expressly agreed in writing.

9. Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, including the right to:
Access the personal information we hold about you;
Correct inaccurate information;
Request deletion of your information;
Object to or restrict certain processing;
Withdraw consent where processing is based on consent;
Opt out of marketing communications;
For California residents, request disclosure of the categories of information collected and confirm that we do not sell your personal information, without discrimination for exercising these rights.
To exercise any of these rights, contact us at legal@greyspan.ai. We will respond within the timeframe required by applicable law. We may need to verify your identity before fulfilling your request.

10. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it.

11. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect your information, including encryption in transit where appropriate, access controls, role-based access controls, audit logging, tenant isolation, credential protection, rate limiting, and other security measures appropriate to the nature of the Services.
No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

12. International Data Transfers

If you access the Site or Services from outside the United States, your information may be processed in the United States, including North America. Where required, we use appropriate safeguards, such as Standard Contractual Clauses, for international transfers.

13. Children's Privacy

The Site and Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.

14. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Site or Services after changes take effect constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

GreySpan.ai LLC
110 Moraine Pointe Plaza #1001
Butler, PA 16001
USA

Email: legal@greyspan.ai