Privacy Policy

Last updated: 1 May 2026  Â·  Effective date: 1 May 2026  Â·  Applies to: gridsense.jdsancontrols.com
Summary: We collect only what we need to run the platform. We don't sell your data. We use Supabase (EU servers) to store your projects. You can delete your account and all data at any time.
Contents
  1. Who we are
  2. What data we collect
  3. Legal basis for processing
  4. How we use your data
  5. Third-party services
  6. How long we keep your data
  7. Your rights (UK GDPR)
  8. Cookies & analytics
  9. Security
  10. Children
  11. Changes to this policy
  12. Contact us

1. Who We Are

GridSense is a product of Jdsan Controls ("we", "us", "our"), a company providing electrical engineering calculation software. We are the data controller responsible for your personal data.

Contact: privacy@jdsancontrols.com

2. What Data We Collect

2.1 Account data (provided by you)

2.2 Project and calculation data (content you create)

This data belongs to you. We store it solely to provide the service.

2.3 Usage data (automatically collected)

2.4 Billing data

Payment card details are processed directly by Razorpay and are never stored on our servers. We receive only a transaction reference, subscription status, and plan name.

3. Legal Basis for Processing (UK GDPR)

Processing activityLegal basis
Account creation and authenticationContract performance (Art. 6(1)(b))
Storing your projects and calculationsContract performance (Art. 6(1)(b))
Sending transactional emails (password reset, invoice)Contract performance (Art. 6(1)(b))
Analytics and product improvementLegitimate interests (Art. 6(1)(f))
Billing and subscription managementContract performance (Art. 6(1)(b))
Marketing emailsConsent (Art. 6(1)(a)) — opt-in only
Security audit logLegitimate interests (Art. 6(1)(f))

4. How We Use Your Data

We do not sell your data. We do not use your calculation data to train AI models or share it with third parties for their commercial purposes.

5. Third-Party Services

ServicePurposeData sharedLocation
SupabaseDatabase, authentication, file storageAccount data, project data, calculationsEU (Frankfurt)
RazorpayPayment processingEmail, billing details (card processed by Razorpay only)India / global
RailwayAPI server hostingRequest logs, IP (anonymised)US (East)
VercelFrontend hostingIP address, request metadataGlobal edge
Google Analytics 4Usage analyticsAnonymised page views, events (no PII)EU (data store)

Each sub-processor operates under their own privacy policy and data processing agreements with us.

6. How Long We Keep Your Data

Data typeRetention period
Account informationUntil account is deleted, then 30 days grace period
Project and calculation dataUntil account is deleted, or project is deleted by you
Billing records7 years (UK tax law requirement)
Audit log entries2 years
Server request logs30 days
Analytics data (Google)14 months (GA4 default, IP anonymised after 14 days)

7. Your Rights Under UK GDPR

As a UK resident, you have the following rights regarding your personal data:

To exercise any right, email privacy@jdsancontrols.com. We will respond within 30 days. You also have the right to lodge a complaint with the ICO (Information Commissioner's Office).

Account deletion: You can delete your account from the Settings panel inside the app. This permanently deletes all your projects, calculations, and PDF reports from our servers. Billing records are retained for 7 years as required by HMRC.

8. Cookies & Analytics

We use the following cookies:

CookiePurposeDurationType
gs_tokenAuthentication session token (sessionStorage, not a cookie)SessionEssential
gs_theme, gs_nav_openUI preferences (localStorage)PersistentFunctional
_ga, _ga_*Google Analytics 4 — anonymised usage tracking14 monthsAnalytics

Google Analytics is configured with IP anonymisation enabled. We do not use advertising or cross-site tracking cookies.

You can opt out of Google Analytics at any time using the Google Analytics Opt-out Browser Add-on.

9. Security

If you discover a security vulnerability, please report it to security@jdsancontrols.com. We aim to respond within 48 hours.

10. Children

GridSense is a professional engineering platform intended for adults. We do not knowingly collect data from children under 16. If you believe a child has created an account, please contact us and we will delete it immediately.

11. Changes to This Policy

We may update this policy as the platform grows. We will notify you of material changes by email (if you have an account) and by updating the "Last updated" date above. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related queries, data subject requests, or concerns:

We aim to respond to all privacy requests within 30 days as required by UK GDPR.