Privacy policy

Last updated: October 23, 2026

The privacy of your information is a big deal to us. In this policy, we lay out what information we collect and why, how it is handled, and your rights with respect to it. We never sell your information: never have, never will.

This policy applies to GridFrame Labs LLC, an Idaho limited liability company ("GridFrame Labs", "we", "us"), and to our handling of information about visitors to this website, people who contact us, and our customers and the people who act for them. We refer to these people as "you" throughout this policy.

This policy does not cover the business records you keep in GridFrame itself. GridFrame is installed on your own equipment, and the customers, jobs and money you record in it stay there. We see that information only if you give us access to help you, and then only as far as the help requires.

GridFrame Labs is a separate business from Falls Technology Services LLC, which sets up and supports GridFrame and other technology. Each has its own customers, records and privacy policy.

What we collect and why

Our guiding principle is to collect only what we need. Here's what that means in practice:

Visiting this website

This website uses no cookies, no analytics and no tracking. Like every website, it is delivered by a hosting provider (Cloudflare), which processes the technical information that every web request carries, such as your IP address and browser type, to deliver the pages and protect the site from abuse. Choices you make on the site, like light or dark mode or accessibility settings, are remembered only in your own browser. Because this website doesn't track you, a browser's "Do Not Track" or Global Privacy Control signal has nothing to turn off, and no other company collects information about your activity here across other websites.

When you contact us

When you e-mail us, or send a message with the contact form on this website, we keep that correspondence, including your name, e-mail address, phone number and business name, so that we have a history of past correspondence to reference if you reach out in the future. Messages from the form go straight into our own business software, which we run ourselves. The contact form uses Cloudflare Turnstile to check that a message comes from a person, not a robot: Cloudflare looks at technical information such as your IP address and browser to decide, and tells us only whether the check passed.

When you become a customer

We ask for your name, your business's name and address, and the contact details of the people we work with, so we can provide GridFrame, keep the records the law requires and support you. We'll never sell your personal information to third parties, and we won't use your name or business in marketing without your permission.

When we access or disclose your information

To provide the services you've asked for. We use a few service providers to run our business:

Our records are kept in software we run on our own equipment.

When required under applicable law. We are a U.S. company and our records are kept in the U.S. We respond to requests for information from government authorities only when we are compelled by legal process, such as a warrant, subpoena or court order. Our policy is to notify you before we disclose your information unless we are legally prohibited from doing so, and except in some emergency cases.

Finally, if GridFrame Labs is acquired by or merges with another company (we don't plan on that, but if it happens), we'll notify you well before any of your personal information is transferred or becomes subject to a different privacy policy.

Your rights with respect to your information

We apply the same rights to everyone, wherever you live:

• Right to know what personal information we collect, use and share. This policy describes it.
• Right of access to the personal information we hold about you.
• Right to correction of your personal information.
• Right to erasure, subject to certain limits under applicable law (for example, tax and accounting records we must keep).
• Right to portability: to receive the personal information we hold about you.
• Right to non-discrimination: we will not treat you differently because you exercised these rights.

To use any of these rights, e-mail [email protected]. We may need to take reasonable steps to verify your identity before responding, such as confirming your name and e-mail address.

How we protect your information

This website is served only over encrypted connections (HTTPS). Our business systems require two-step sign-in, are reachable only by the people who need them, and keep their data on encrypted disks. No system is perfect; if a security incident ever affects your personal information, we will tell you as the law requires.

Data retention

We keep your information for the time necessary for the purposes for which it is processed. The length of time depends on why we collected it and on your choices, after which we may delete it. We also keep information as necessary to comply with our legal obligations (for example, tax records), resolve disputes and enforce our agreements.

Children

Our products are for businesses. We do not knowingly collect information from children under 13.

Changes and questions

We may update this policy as needed to comply with relevant regulations and reflect any new practices. Whenever we make a significant change, we will refresh the date at the top of this page and e-mail our current customers about it.

Have any questions, comments or concerns about this privacy policy, your information or your rights? E-mail us at [email protected] and we'll be happy to answer them.

This policy is adapted from the Basecamp open-source policies by 37signals, used under CC BY 4.0. We changed it to fit our business.