Legal
Privacy Policy
Effective July 1, 2026
Graviss Marketing, LLC (“Graviss Marketing,” “we,” “us,” or “our”) operates two properties: gravissmarketing.com, our marketing and sales consulting website, and GravHub, a business operations platform accessible at app.gravissmarketing.com. This Privacy Policy explains what information we collect across both properties, how we use it, and your rights regarding your data.
1. Information We Collect on gravissmarketing.com
On our marketing website, gravissmarketing.com, we collect:
- Contact form submissions — your name, company, email address, phone number, and message when you submit our contact form. We use this information solely to respond to your inquiry.
- Incomplete form submissions — if you begin filling out our contact form but don't submit it, we may capture the information entered (such as your name, email, or phone number) and follow up if you left contact details. This helps us reach people who intended to get in touch but didn't finish. This data is deleted automatically after 30 days.
- Revenue Readiness Quiz — the free quiz on our Revenue Readiness page runs entirely in your browser. Your answers are not transmitted to or stored on our servers.
- Case study downloads — our case study PDFs are available as direct downloads and do not require you to submit any personal information.
- Analytics — we use Google Analytics (via Google Site Kit) to understand site traffic and improve our content. See our Cookie Policy for details on the cookies this sets.
- Company identification — we use Maverick Intelligence and Sitelytics to identify the company associated with your visit from your IP address, for sales follow-up. This does not identify you personally. See our Cookie Policy for details.
2. Information We Collect on the GravHub Platform
We collect information in the following categories:
- Account information — name, email address, phone number, role, and company affiliation provided during registration or account setup.
- Business data — contacts, companies, deals, proposals, contracts, invoices, projects, tasks, time entries, communications, and other records you create or import into the platform.
- Integration data — when you connect third-party services (Google Workspace, Google Search Console, Google Analytics, Google Ads, Google Business Profile, Meta Ads, QuickBooks, HubSpot, Mercury, or similar platforms), we receive the data those platforms expose through the OAuth scopes you explicitly authorize.
- Usage data — IP addresses, browser type, device information, timestamps, pages visited, and event logs collected automatically for security monitoring, debugging, and service improvement.
- Cookies and similar technologies — see our Cookie Policy for details.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the GravHub platform and its features.
- Process transactions, send invoices, and manage billing.
- Communicate with you about your account, service updates, and support requests.
- Generate reports, dashboards, and analytics for your business operations.
- Ensure security, detect fraud, and prevent abuse of the platform.
- Comply with legal obligations and enforce our Terms of Service.
4. Google API Services — Limited Use Disclosure
GravHub’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- Google Calendar — to display your calendar events and create events for appointments scheduled through GravHub.
- Gmail — to display your inbox, send emails on your behalf, and log client correspondence against CRM records.
- Google Drive — to upload and share files through GravHub’s document library and client portal.
- Google Search Console — to retrieve keyword impressions, clicks, CTR, and position data for client SEO reporting.
- Google Analytics — to display session, user, and conversion metrics in client-facing reports.
- Google Ads — to read campaign performance data for advertising spend reporting.
- Google Business Profile — to display location insights, reviews, and facilitate review responses at your direction.
We do not use Google user data for serving advertisements. We do not sell or transfer Google user data to third parties except as necessary to provide and improve the features you’ve enabled. We do not use Google user data for purposes unrelated to the GravHub platform.
5. How We Store and Protect Your Data
- All data is stored on Supabase (PostgreSQL) infrastructure located in the United States.
- OAuth access tokens and refresh tokens are encrypted at rest using AES-256-GCM.
- All data in transit is protected by TLS 1.2 or higher.
- Access to production systems is restricted to authorized Graviss Marketing personnel through role-based access controls.
- We maintain application-level audit logs and monitor for security incidents through automated alerting.
6. How We Share Your Data
We share your data only in the following circumstances:
- Service providers — trusted infrastructure partners that help us operate GravHub, including Supabase (database and authentication), Vercel (hosting), Resend (transactional email), Twilio (SMS), Sentry (error monitoring), Upstash (rate limiting and caching), and Anthropic (AI-powered features).
- Third-party integrations — services you explicitly connect through OAuth or API key configuration, limited to the specific operations you authorize.
- Legal requirements — when required by applicable law, subpoena, court order, or governmental regulation.
- Business transfers — in connection with a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.
We do not sell your personal information to third parties.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. Upon account deletion or written request, we will delete your personal information within 30 calendar days, except where retention is required by law or necessary for legitimate business purposes (e.g., resolving disputes, enforcing agreements).
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Deletion — request deletion of your personal data.
- Portability — request your data in a structured, machine-readable format.
- Objection — object to certain processing of your personal data.
- Revocation — revoke any OAuth permissions you’ve granted by visiting the relevant service’s security settings (e.g., Google Account permissions).
To exercise any of these rights, contact us at the address below.
9. California Privacy Rights (CCPA)
If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of personal information. We do not sell personal information. To make a request, contact us at the email address below. We will verify your identity before processing the request.
10. Children’s Privacy
Neither gravissmarketing.com nor GravHub is intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.
11. International Data Transfers
If you access GravHub from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We take reasonable steps to ensure your data receives an adequate level of protection in the jurisdictions in which we process it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective date” above and notify account holders by email. Your continued use of the Service after changes constitutes acceptance of the updated policy.
13. Accessibility
We are committed to making gravissmarketing.com usable by as many people as possible, including people with disabilities, and we work toward the Web Content Accessibility Guidelines (WCAG) 2.1 at Level AA. For details on our current status and how to report an accessibility barrier, see our Accessibility Statement.
14. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Graviss Marketing, LLC
Riverview, FL 33578
Phone: +1 (678) 602-0988
Email: privacy@gravissmarketing.com
Website: www.gravissmarketing.com