1. Introduction

Welcome to Grandworks ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://grandworks.co (the "Website") and use our services, including our AI chatbot.

Data Controller:
Grandworks
Mungozone Web Solutions LLP
1085, Shangrila, Segundo Bairo,

Santa Cruz, Tiswadi, Goa, India.
Email: hello(@)grandworks.co
Phone: +91 84460 01337

2. Information We Collect

2.1 Information You Provide to Us

Contact Forms and Inquiries

• Name

• Email address

• Phone number (optional)

• Company name

• Project details and requirements

• Any other information you choose to provide

AI Chatbot Interactions

• Chat messages and queries

• Conversation history

• Time and date of interactions

• Session identifiers

2.2 Information Automatically Collected

Analytics Data (via Google Analytics)

• IP address (anonymized)

• Browser type and version

• Device information (type, operating system)

• Referring website

• Pages visited and time spent

• Click patterns and site navigation

• Geographic location (country/region level)

Cookies and Similar Technologies

• Session cookies

• Preference cookies

• Analytics cookies

• Functional cookies

For detailed information about cookies, please see Section 6.

2.3 Information from Third Parties

We may receive information about you from:

• Business partners

• Social media platforms (if you interact with our social media accounts)

• Public databases

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Delivery

• Respond to inquiries and provide customer support

• Process and manage project requests

• Provide AI chatbot assistance

• Improve and personalize user experience

3.2 Communication

• Send responses to your inquiries

• Provide project updates and deliverables

• Send administrative information

• Marketing communications (with your consent)

3.3 Business Operations

• Analyze website usage and improve our services

• Detect and prevent fraud or technical issues

• Comply with legal obligations

• Enforce our terms and conditions

3.4 AI Chatbot Specific Uses

• Provide automated customer support

• Improve chatbot responses through conversation analysis

• Train and enhance our AI models (using anonymized data)

• Maintain conversation context for better assistance

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Consent: When you have given clear consent for specific processing activities

• Contract: Processing necessary for the performance of a contract with you

• Legitimate Interests: Our legitimate business interests that don't override your rights

• Legal Obligation: When we must process data to comply with laws

5. Data Sharing and Disclosure

We may share your information with:

5.1 Service Providers

• Google Analytics: For website analytics

• OpenAI: For AI chatbot functionality (processed data only)

• Web hosting providers

• Email service providers

5.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred.

5.3 Legal Requirements

We may disclose information if required by law or to:

• Comply with legal obligations

• Protect our rights and property

• Prevent fraud or illegal activities

• Protect anyone's safety

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

Essential Cookies Required for website functionality and cannot be disabled.

Analytics Cookies Help us understand how visitors interact with our website (Google Analytics).

Functional Cookies Remember your preferences and chatbot conversation history.

Marketing Cookies (if applicable) Used to deliver relevant advertisements (only with consent).

6.2 Managing Cookies

You can manage cookie preferences through:

• Our cookie consent banner

• Your browser settings

• Google Analytics opt-out browser add-on

7. Data Retention

We retain your information for:

• Contact form data: 3 years or until project completion + 1 year

• Chatbot conversations: 1 year for support purposes

• Analytics data: 26 months (Google Analytics default)

• Marketing data: Until you unsubscribe or request deletion

8. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request copies of your personal data

• Rectification: Request correction of inaccurate data

• Erasure: Request deletion of your data ("right to be forgotten")

• Restrict Processing: Request limitation of processing

• Data Portability: Receive your data in a machine-readable format

• Object: Object to processing based on legitimate interests

• Withdraw Consent: Withdraw consent at any time

• Lodge a Complaint: File a complaint with your supervisory authority

To exercise these rights, contact us at privacy@grandworks.co.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• SSL/TLS encryption for data transmission

• Secure data storage with encryption at rest

• Access controls and authentication

• Regular security assessments

• Employee data protection training

However, no method of transmission over the Internet is 100% secure.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs)

• Adequacy decisions by the European Commission

• Your explicit consent

11. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing any information.

13. AI Chatbot Specific Information

13.1 How the Chatbot Works

Our AI chatbot uses OpenAI's API to process and respond to your queries.

13.2 Data Processing

• Messages are sent to OpenAI for processing

• OpenAI does not train on API inputs/outputs

• We store conversation history for quality and support purposes

• You can request deletion of your conversation history

13.3 Automated Decision Making

The chatbot provides automated responses but does not make decisions with legal or significant effects on you.

14. Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting the new policy on this page

• Updating the "Last Updated" date

• Sending email notification (if applicable)

15. Contact Us

For questions about this Privacy Policy or to exercise your rights:

Data Protection Officer/Privacy Contact:
Email: hello(@)grandworks.co
Phone: +91 84460 01337
Address: 1085, Shangrila, Segundo Bairo, Santa Cruz, Tiswadi, Goa, India.

Supervisory Authority:
You have the right to lodge a complaint with the relevant data protection authority. For Indian residents, this will be the Data Protection Authority of India once established. EU residents may contact their local supervisory authority or the European Data Protection Board.

Cookie Policy Addendum

Cookie Consent Management

We use a cookie consent banner that allows you to:

• Accept all cookies

• Reject non-essential cookies

• Customize cookie preferences by category

Consent Record:
By using our website, you acknowledge that you have read and understood this Privacy Policy.

Last Updated: 1st September 2025
Effective Date: 1st January 2025