Privacy Policy

This Privacy Policy describes how Grungard Inc. (“Grungard,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit us.grungard.com (the “Site”), use the Grungard SIMPro hardware device and associated mobile or web applications (collectively, the “Services”), or otherwise interact with us.

By accessing or using our Services, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Services.

1. Information We Collect

1.1 Information You Provide Directly

• Account registration: name, email address, company name, mailing address, phone number, and password.
• Order and billing information: shipping address and payment card details (processed by our PCI-compliant payment processor — we do not store full card numbers).
• Support communications: messages, photos, or files you send to our support team at [email protected].
• Newsletter and marketing opt-ins: email address and preferences.

1.2 Information Collected Automatically

• Device and usage data: IP address, browser type, operating system, referring URLs, pages visited, and time spent on the Site.
• Cookies and similar technologies: session identifiers, preference cookies, and analytics pixels. See Section 7 (Cookies) for full details.
• SIMPro device telemetry: cellular signal strength, firmware version, controller status, valve activation logs, run-time data, and GPS/location metadata if enabled. This data is transmitted over our cellular network and stored in our cloud infrastructure.

1.3 Information from Third Parties

• Reseller and distribution partner records when you purchase through a licensed Grungard contractor.
• Analytics providers (e.g., Google Analytics) that supply aggregated demographic and behavioral signals.
• Publicly available business directory data used to verify contractor license information.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your Grungard account and authenticate you to the Services.
• Provision and operate the SIMPro device, including delivering firmware updates over the air (OTA) and managing cellular data connectivity.
• Process orders, handle billing, and issue receipts.
• Provide technical support and respond to your inquiries.
• Monitor device health, diagnose connectivity issues, and proactively alert you to controller faults or anomalies.
• Send transactional emails (order confirmations, firmware release notes, security alerts).
• Send marketing communications where you have given consent or where permitted by applicable law, with a clear opt-out mechanism in every message.
• Improve our products through aggregated analytics and user feedback.
• Comply with legal obligations and enforce our Terms of Service.
• Detect, investigate, and prevent fraudulent or unauthorized activity.

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract performance: processing necessary to deliver the Services you have subscribed to.
• Legitimate interests: security monitoring, product analytics, fraud prevention.
• Consent: marketing emails and non-essential cookies.
• Legal obligation: compliance with applicable laws and regulatory requests.

4. How We Share Your Information

We do not sell your personal information. We may share data with:

• Service providers: cloud hosting (AWS), payment processors, email delivery platforms, and cellular network carriers that support SIMPro connectivity — all bound by data processing agreements.
• Authorized resellers and contractors: limited account and device data necessary to fulfill installation and support services on your behalf.
• Analytics partners: aggregated and pseudonymized usage data only.
• Law enforcement or regulatory authorities: when required by valid legal process or to protect the safety of our users or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

5. IoT Device Data & Cellular Connectivity

Grungard SIMPro is an IoT device that communicates with our cloud platform over a cellular data connection. The following practices apply specifically to device-generated data:

• All cellular data transmitted by SIMPro is encrypted in transit using TLS 1.2 or higher.
• Device telemetry (valve logs, runtime, signal metrics) is retained for up to 24 months to support historical reporting and diagnostics.
• Firmware update packages are cryptographically signed. Grungard may push mandatory security patches to devices to address critical vulnerabilities. You will be notified in advance except where an urgent security risk requires immediate deployment.
• If you decommission a SIMPro device, you may request deletion of associated device telemetry by contacting [email protected].

6. Data Retention

We retain personal information for as long as necessary to:

• Maintain your account and deliver the Services.
• Comply with tax, accounting, and legal recordkeeping requirements (typically 7 years).
• Resolve disputes and enforce agreements.

Upon account deletion, we will delete or anonymize your personal data within 90 days, except where retention is required by law.

7. Cookies & Tracking Technologies

We use cookies and similar tracking technologies on the Site. You can manage your preferences through our Cookie Settings page at us.grungard.com/cookies.

• Strictly necessary cookies: required for authentication and security — cannot be disabled.
• Analytics cookies: help us understand how visitors use the Site.
• Marketing cookies: used to deliver relevant advertising on third-party platforms.

8. Your Privacy Rights

California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act, you have the right to:

• Know what personal information we collect, use, and disclose.
• Request deletion of your personal information.
• Opt out of the sale or sharing of personal information (we do not sell data).
• Correct inaccurate personal information.
• Non-discrimination for exercising your rights.

EEA / UK Residents (GDPR / UK GDPR)

You have the right to:

• Access a copy of your personal data.
• Rectify inaccurate or incomplete data.
• Request erasure (“right to be forgotten”) under applicable conditions.
• Restrict or object to certain processing.
• Data portability in a machine-readable format.
• Lodge a complaint with your national supervisory authority.

To exercise any of these rights, email us at [email protected] with the subject line “Privacy Request.” We will respond within 30 days.

9. Data Security

We implement industry-standard technical and organizational measures to protect your information, including encryption at rest and in transit, role-based access controls, and regular security assessments. However, no system is completely secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorized access to your account.

10. International Data Transfers

Grungard Inc. is based in the United States. If you access our Services from outside the US, your information may be transferred to and processed in the United States. We rely on appropriate safeguards — such as Standard Contractual Clauses (SCCs) for EEA/UK transfers — to ensure your data receives adequate protection.

11. Children’s Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the revised policy on this page with an updated “Last updated” date and, where appropriate, notify you by email. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact:

Grungard Inc.
Email: [email protected]
Website: us.grungard.com