Privacy Policy

We collect the email address you sign in with and the field tickets you upload. Your tickets, invoices and account are stored on servers in Montreal, Canada. To read the handwriting we send the ticket image to an AI provider outside Canada and get the text back. We do not sell anything to anyone, and we do not use your tickets to train models.

Your email address. That is the whole account. There is no password. If you sign in with Google we ask Google for your email address and whether it is verified — nothing else. We do not receive your contacts, calendar, files, or profile picture, and we do not keep a Google token after sign-in.

The tickets you upload. The image or PDF itself, plus the fields read from it: customer, work order number, well location, line items, rates, hours, GST and totals. Whatever is written on the paper you photograph.

Company details you enter. Your legal name, address, phone, GST registration number and payment terms — the things that have to appear on an invoice.

Basic usage records. How many tickets you have read this month, so we can bill correctly and show you what is left. We store a salted hash of the IP address a new account signs up from, to spot one person opening many free accounts. We do not keep a log of which pages you visit from where.

On servers in Montreal, Canada (AWS ca-central-1). Your tickets, invoices, company details and account records stay there.

The one exception is reading the handwriting. To turn a photograph into text, the image is sent to our AI provider, which processes it outside Canada, and the result comes back to us. We store the result here. If that is a problem for your contracts, this is the part to look at — and you should ask us before uploading, not after.

Three service providers, each for one job, and each gets only what that job needs:

• Our AI provider — receives the ticket image in order to read it.
• Stripe — handles subscriptions and payments. Your card details go to Stripe directly; we never see or store a card number.
• Resend — sends your sign-in codes. It sees your email address and the code.

That is the complete list. We do not sell, rent or share your data with anyone else, and we do not run advertising or third-party tracking on the pages you use after signing in.

Your tickets and invoices stay until you delete them or close your account — you are keeping records you may need years later, and it is not our place to decide when those expire.

Sign-in codes live ten minutes and are destroyed the moment they are used. Ask us to delete your account and we remove your account, company details, tickets, invoices and uploaded images.

A copy of everything we hold about you, a correction, or deletion. Email support@grandeaihub.com and we will action it. Under Canadian privacy law (PIPEDA) you can also complain to the Office of the Privacy Commissioner of Canada if you think we have handled your information badly.

One: the cookie that keeps you signed in. It is required for the product to work, it is not used for advertising, and there is nothing to opt out of because there is nothing else.

If we change how any of this works we will update this page and the date at the top. If a change is significant — a new provider seeing your tickets, say — we will email you rather than quietly editing a page you have no reason to re-read.

Questions: support@grandeaihub.com · Terms of Service