1. Scope
This Privacy Policy applies to Release at publish.gridframe.site. Separate services—including Polar, Vercel and the services used by a Marcel or Philippe deployment—process information under their own privacy policies.
2. Information we handle
Release may handle the email address associated with your purchase, the licensed product and tier, a masked licence-key reference, Vercel project and domain metadata, deployment status, and technical request information needed to operate and secure the service.
When you validate a licence, Release sends the key to Polar server-side and stores an encrypted licence session in a secure cookie. When you connect Vercel, the token is encrypted in a separate secure, HTTP-only cookie.
3. Project files and settings
Selected project files are uploaded directly to temporary Cloudflare R2 storage and are removed after deployment or cancellation. Local environment files, dependencies, build output and Git metadata are excluded from the deployable upload. Project settings you enter are sent to Vercel for the deployment; Release is not intended to be a permanent credential vault.
4. Checkout information
Polar processes checkout, payment, tax, invoice and customer-portal information as merchant of record. Release may receive a temporary customer-session token after checkout so it can retrieve the matching GridFrame licence benefit. Release does not receive or store full card details.
5. How information is used
We use information to validate product access, maintain secure sessions, connect the Vercel account you authorize, inspect and publish supported projects, manage requested domains, provide support, prevent misuse, diagnose failures and improve reliability.
6. Legal bases
Where data-protection law requires a legal basis, processing is carried out to perform our agreement with you, pursue legitimate interests in operating and securing Release, comply with legal duties, or act with consent where consent is required.
7. Sharing
Information is shared only as needed with service providers supporting the requested workflow, including Polar for licence and purchase entitlements, Vercel for project deployment and domain management, and Cloudflare for temporary project staging. We may also disclose information when required by law or to protect users, rights and service security.
8. Cookies
Release uses essential cookies for the encrypted licence and Vercel connection sessions. These cookies are HTTP-only and use security settings appropriate to the environment. Release does not require advertising cookies to provide the publishing workflow.
9. Retention
Temporary staged project files are scheduled for deletion after deployment or cancellation. Session cookies expire or are cleared when you sign out or disconnect. Operational records are retained only as long as reasonably needed for security, support, legal compliance and service administration.
10. Security
Release uses server-side licence validation, encrypted session cookies, secure production cookies and restricted handling of credentials. No online system is completely risk-free. You should use strong unique credentials, protect your email and Vercel accounts, and rotate secrets if you suspect exposure.
11. International processing
Service providers may process information in countries other than your own. Where required, appropriate contractual or legal safeguards are used for international transfers.
12. Your choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability or objection. You can disconnect Vercel within Release and clear the Release session by signing out. Requests can be sent to the contact address below; we may need to verify your identity.
13. Children
Release is intended for adults purchasing and deploying commercial website products. It is not directed to children under 13, and users must meet the eligibility requirements in the Terms.
14. Changes
We may update this notice as Release or its service providers change. The updated date at the top identifies the current version.
15. Contact
Privacy questions and rights requests can be sent to support@gridframe.site.
