Privacy Policy

GrandPad Inc. ("GrandPad", “We” or “Our”) is committed to protecting the privacy of users of its software applications and services. This Privacy Policy states the GrandPad® practices apply to individual users of all GrandPad brand tablet computers and software services (the "Services").

GrandPad and its licensors own, operate, and maintain the Services. GrandPad is a Delaware corporation with its principal office in Byron, Minnesota.

BY ACCESSING AND USING THE SERVICES, YOU AGREE TO THE INFORMATION USE AND COLLECTION TERMS OF THIS PRIVACY POLICY. GRANDPAD HAS THE RIGHT TO REVISE THIS POLICY AT ANY TIME. WE MAY NOT NOTIFY USERS INDIVIDUALLY IF WE CHANGE THIS PRIVACY POLICY. ANY CHANGES WILL BE EFFECTIVE WHEN POSTED.
WE ENCOURAGE YOU TO CHECK THIS PRIVACY POLICY FREQUENTLY FOR CHANGES.

Information We Collect

GrandPad requires users of the Services to have a user account. The user registering for the Services must provide an email address and user name to establish and maintain a user account. For purposes of this Privacy Policy, "Personal Information" includes all information or data that is specific to an individual person and may be used to directly or indirectly determine their identity, such as full names, addresses, phone numbers, and email addresses. Except as specifically stated below, we will not provide Personal Information you provide to us to establish or maintain a user account to any third parties without your express consent.

The Services will collect and process information about the physical location of your tablet using GPS or other location technologies, such as sensor data from your tablet providing information about nearby Wi-Fi access points and cellular network towers (“Location Information”).

GrandPad may also collect information regarding a user's use of the Services with software application tools and data files, such as cookies, web log files, IP addresses, device state information, unique device identifiers, device hardware and OS information, and information relating to how the Services are functioning ("Usage Information").

Use and Disclosure of Information

We use your Personal Information to maintain your user account and operate the Services.

We may use Location Information to configure the Services for your use and provide you with access to information and functionality specific to your location. We also may use Location Information to help determine the location of a lost or stolen tablet.

We use the Usage Information to analyze and evaluate the features and functionality of the Services. GrandPad may also use Usage Information to process automatic crash reporting which collects reports of crashes, other technical issues, and information relating to how the Services are functioning.

This information will also be provided to certain third-party technology services providers as necessary to provide the Services functionality. Third party technology services providers include software development, application and data hosting, wireless network services providers, and payment processing agents. GrandPad is responsible for assuring that these third parties comply with the terms of this Privacy Policy.

Except for our third party technology services providers, we will not voluntarily share Personal Information or Location Information with a third party without your prior authorization, unless doing so is necessary (1) to enforce this Privacy Policy, to comply with law, regulation or other legal processes or to protect the rights, property or safety of us or others, (2) to comply with a valid order or process from a public authority, (3) in emergency situations, (4) to protect against misuse or unauthorized use of the Services, (5) to detect or prevent criminal activity or fraud, or (6) in the event that we or substantially all of our assets are acquired by one or more third parties as a result of an acquisition, merger, sale, reorganization, consolidation or liquidation, in which case Personal Information may be one of the transferred assets.

Tracking Technologies

GrandPad uses cookie files and other software tracking technologies (“Tracking Information”). Cookies are small data files containing a string of characters that are sent to your computer when you visit a website. When you visit the website again, the cookie allows that site to recognize your browser. Cookies may store your user preferences and other information. You can reset your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of the Services may not function properly without cookies.

We may use Tracking Information for product marketing, promotion, and sales purposes. We may share Tracking Information with third parties for marketing, advertising, or other uses. You can opt-out of the uses of Tracking Information by using the information provided in the “Contact Us” section.

We use Google Analytics and Google Analytics Advertising Features to evaluate Tracking Information. You can obtain more detailed information on how Google Analytics functions via this Google webpage: http://www.google.com/policies/privacy/partners.

You can opt-out of the Google Analytics Advertising Features we use by changing the privacy settings of your browser. For example, you can change your privacy settings in Google Chrome by accessing the Advanced Settings options on the Settings page. You can also install an add-on program provided by Google which enables you to opt-out of Google Analytics features across multiple browsers via this link: https://tools.google.com/dlpage/gaoptout.

We do not use tracking technologies, including Google Analytics, to derive or develop any Personal Information about you, other users of the Services, or any third parties.

Data Security

Data security is implemented through physical, administrative, and technical safeguards we put in place and operational procedures we follow to protect Personal Information. We protect your transactions involving Personal Information over the internet using Secure Sockets Layer (SSL) technology. We restrict access to your Personal Information in our database to our authorized employees, our agents, and certain of our authorized partners.

Children's Privacy

The Services are not intended for use by children under the age of 16. We will not knowingly collect any Personal Information from users under the age of 16 online through the Services. If you think that we have collected Personal Information from a visitor under the age of 16, please contact us using the information provided in the “Contact Us” section.

Data Privacy Framework

GrandPad complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. GrandPad has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. GrandPad has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/ In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, GrandPad commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner's Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of human resources data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF in the context of the employment relationship.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, GrandPad commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.

Following the DPF principles and guidelines GrandPad agrees to do the following:

  • Inform individuals about the requirement to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements
  • Inform individuals about the possibility, under certain conditions, for the individual to invoke binding arbitration
  • Inform individuals about the right of individuals to access their personal data
  • Inform individuals about the possibility, under certain conditions, for the individual to invoke binding arbitration
  • Note: GrandPad is obligated to arbitrate claims and follow the terms as set forth in Annex I of the DPF Principles, provided that an individual has invoked binding arbitration by delivering notice to your organization and following the procedures and subject to conditions set forth in Annex I of Principles.
  • Inform individuals about your organization's liability in cases of onward transfers to third parties
  • The Federal Trade Commission has jurisdiction over GrandPad’s compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).
  • In the context of an onward transfer, GrandPad has responsibility for the processing of personal information it receives under the DPF Principles and subsequently transfers to a third party acting as an agent on its behalf.  GrandPad shall remain liable under the DPF Principles if its agent processes such personal information in a manner inconsistent with the DPF Principles, unless the organization proves that it is not responsible for the event giving rise to the damage.

Contact Us

If you have any questions, comments or concerns about this Privacy Policy, our certification under the Data Privacy Framework, or your privacy please contact us at privacy@grandpad.net or via the contact information provided on the GrandPad website.

Changes to Our Privacy Policy

We may modify, alter or update our privacy policy at any time, so we encourage you to review our privacy policy frequently. We will not provide individual notice to you of changes to our privacy policy, but when we make updates to our privacy policy, we will update the date in this section.

Last Revised: June 26, 2024.

Copyright © 2014-2024 by GrandPad Inc. All rights reserved.