Grano Privacy Policy

We collect information you provide directly, information generated through your use of Grano, and, where permitted, information received from third parties.

A. Account Information

When you create a Grano account, we may collect:

• Name
• Email address
• Phone number
• Password or authentication information
• Profile photo
• Account type
• User preferences
• Location information
• Other information you choose to provide

If you create a business profile, we may collect information including:

• Business name
• Business description
• Business story
• Business category
• Business type
• Business location
• Business hours
• Website
• Social media accounts
• Contact information
• Business logo
• Business photos
• Products
• Prices
• Availability
• Events
• Wholesale information
• Business relationships
• Other information you choose to make available through your profile

Some of this information may be publicly visible.

You are responsible for determining what information you publish through your business profile.

Grano may allow businesses to submit documents for verification, including:

• Business licenses
• Food permits
• Cottage food licenses
• Certifications
• Insurance documentation
• Business registration documents
• Other business-related documentation

These documents may contain personal or sensitive business information.

Documents submitted for verification are not automatically made public.

Grano may use submitted documents to:

• Verify business information
• Confirm licenses or permits
• Determine eligibility for certain Grano features
• Maintain business verification status
• Protect the integrity of the Grano marketplace
• Comply with legal obligations

Where appropriate, Grano may display a verification indicator on a public business profile without displaying the underlying document.

For example:

We may retain verification information for as long as reasonably necessary to maintain the integrity of the platform and comply with applicable legal requirements.

When a business creates a product listing, we may collect:

• Product name
• Description
• Ingredients
• Allergen information
• Photos
• Price
• Inventory
• Availability
• Wholesale information
• Pickup and delivery information
• Product categories
• Other product information

Product information that a business chooses to publish may be publicly visible.

If you purchase or sell through Grano, we may collect information associated with the transaction, including:

• Buyer information
• Seller information
• Products purchased
• Order quantity
• Order amount
• Order status
• Pickup information
• Delivery information
• Transaction date
• Refunds
• Cancellations
• Related communications

Payment card information may be processed by third-party payment processors.

Where payment processing is provided by a third party, Grano may not receive or store your complete payment card number.

Grano may provide messaging, inquiries, and communication features.

Depending on how you use these features, we may collect:

• Messages
• Inquiries
• Attachments
• Recipient information
• Sender information
• Dates and times
• Business requests
• Other communications submitted through Grano

We use this information to provide communication functionality, facilitate business relationships, prevent abuse, and maintain the security of the platform.

Grano allows businesses to create business relationships through features such as Our Local Network.

Businesses may identify other businesses that:

• They source from
• They supply
• They work with

Businesses may also associate specific products with these relationships.

Once a relationship is accepted and designated as public, information about that relationship may appear publicly on the participating businesses' profiles.

For example:

Businesses can manage the visibility of eligible relationships through their account settings.

The purpose of this feature is to help users understand and discover the local businesses that make up their food ecosystem.

If you submit a review, we may collect:

• Review content
• Rating
• Business or product reviewed
• Date of review
• Your public profile name
• Other information associated with the review

Reviews may be publicly visible.

Do not include sensitive personal information in a public review.

Businesses may create events through Grano.

Event information may include:

• Event name
• Date and time
• Location
• Description
• Business hosting the event
• Photos
• Links
• Other event information

Public event information may be visible to anyone visiting Grano.

Grano may collect location information in several ways.

You may voluntarily provide:

• Business address
• Pickup location
• Event location
• Delivery area
• General business location

Where permitted and necessary for certain features, Grano may also collect approximate or precise device location if you grant permission.

You can control device location permissions through your device settings.

We may use location information to:

• Show nearby businesses
• Show local producers
• Display relevant events
• Improve search results
• Facilitate pickup or delivery
• Provide location-based features

We do not require precise location information for basic account functionality unless specifically necessary for a feature.

When you use Grano, we may automatically collect information such as:

• IP address
• Browser type
• Device type
• Operating system
• Pages visited
• Referring pages
• Time spent on pages
• Approximate location
• Search activity
• Interactions with features
• Error and diagnostic information

This information helps us operate, secure, and improve Grano.

Grano may use cookies, local storage, pixels, and similar technologies.

These technologies may be used to:

• Keep you signed in
• Remember preferences
• Maintain security
• Understand how users interact with Grano
• Improve performance
• Analyze traffic
• Measure marketing effectiveness

You may be able to control cookies through your browser settings.

Disabling certain cookies may affect the functionality of Grano.

We may use information we collect to:

Provide Grano

• Create and manage accounts
• Display profiles
• Process orders
• Facilitate payments
• Connect businesses
• Provide messaging
• Facilitate wholesale transactions
• Display products
• Manage events
• Provide customer support

Improve Grano

• Analyze platform usage
• Improve search
• Improve recommendations
• Develop new features
• Understand how businesses and consumers use Grano
• Troubleshoot technical issues

Protect Grano

• Detect fraud
• Prevent abuse
• Protect accounts
• Investigate suspicious activity
• Enforce our Terms
• Maintain platform security

Communicate with you

We may send:

• Account notifications
• Order updates
• Business inquiries
• Network invitations
• Security alerts
• Service announcements
• Other transactional communications

Where required by law, we will obtain appropriate consent before sending marketing communications.

We do not sell your personal information simply because you use Grano.

We may share information in the following circumstances.

A. Public Information

Information you intentionally publish may be publicly available.

This may include:

• Business name
• Business profile
• Business story
• Business location
• Products
• Events
• Public reviews
• Public network relationships
• Business contact information you choose to publish
• Public photos
• Social links

Before publishing information, consider whether you want it to be publicly accessible.

B. Other Grano Users

Information may be shared with other users when necessary to provide Grano's features.

For example:

A restaurant may see information about a producer when contacting that producer about wholesale products.

A producer may see information associated with a restaurant inquiry.

A business may see information associated with an accepted Local Network relationship.

C. Service Providers

We may share information with companies that help us operate Grano, including providers for:

• Hosting
• Database services
• Authentication
• Payments
• Email
• Messaging
• Analytics
• Security
• Customer support
• Infrastructure
• File storage

These providers are permitted to use information only as necessary to provide services to Grano or as otherwise permitted by applicable law.

D. Legal Requirements

We may disclose information when reasonably necessary to:

• Comply with applicable law
• Respond to legal requests
• Protect the rights or safety of Grano
• Protect users
• Investigate fraud or abuse
• Enforce our Terms

E. Business Transfers

If Grano is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

Business verification documents are treated differently from public business profile information.

Grano does not make uploaded licenses, permits, insurance documents, or similar verification documents publicly available simply because they were uploaded.

We use those documents for legitimate business verification and platform operations.

We may share information from those documents with service providers or third parties where reasonably necessary for verification, security, legal compliance, or operation of the Services.

We retain information for as long as reasonably necessary to:

• Provide the Services
• Maintain accounts
• Complete transactions
• Maintain business records
• Resolve disputes
• Prevent fraud
• Maintain security
• Comply with legal obligations

Retention periods may vary depending on the type of information and how it is used.

When information is no longer reasonably necessary, we may delete, anonymize, or securely dispose of it, subject to legal and operational requirements.

Depending on the features available, you may be able to:

• Edit your account information
• Edit your business profile
• Delete or archive products
• Manage public information
• Manage network relationships
• Change communication preferences
• Delete your account

Some information may remain in our records where required for legal, security, fraud prevention, transaction, or legitimate business purposes.

Businesses can manage the visibility of eligible Local Network relationships.

A business relationship may be:

Public

Visible on the business profile.

Private

Visible to participating businesses but not displayed publicly.

A pending network invitation is not displayed as a confirmed public relationship until accepted.

We use reasonable administrative, technical, and organizational safeguards designed to protect information.

These measures may include:

• Access controls
• Authentication
• Encryption where appropriate
• Secure hosting
• Monitoring
• Security updates
• Restricted access to sensitive information

However, no internet transmission or storage system can be guaranteed to be completely secure.

You are responsible for protecting your account credentials and should notify us if you believe your account has been compromised.

Grano is not intended for children under 13.

We do not knowingly collect personal information from children under 13.

If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete it.

Grano may contain links to third-party websites, including:

• Business websites
• Social media
• Payment providers
• Event websites
• Other external services

We are not responsible for the privacy practices of third-party websites.

We encourage you to review their privacy policies before providing personal information.

Grano may use third-party services to provide certain functionality.

These may include:

• Payment processing
• Hosting
• Authentication
• Analytics
• Email
• Maps
• File storage
• Security

Those services may collect or process information according to their own privacy policies.

Depending on where you live, you may have rights regarding your personal information.

These may include the right to:

• Know what personal information we collect.
• Request access to personal information.
• Request correction of inaccurate information.
• Request deletion of certain information.
• Request a copy of certain information.
• Opt out of certain forms of data processing.
• Withdraw consent where processing is based on consent.
• Appeal certain privacy decisions.

The availability of these rights depends on applicable law.

To exercise a privacy right, contact us using the information below.

We may need to verify your identity before completing certain requests.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act and other applicable California privacy laws.

Subject to applicable exceptions, California residents may have rights to:

• Know what personal information is collected.
• Access personal information.
• Request deletion.
• Request correction.
• Opt out of certain sales or sharing of personal information.
• Limit certain uses of sensitive personal information where applicable.
• Receive equal treatment when exercising privacy rights.

Grano does not sell personal information for monetary consideration.

If our data practices change in a way that constitutes a sale or sharing under applicable law, we will update this Privacy Policy and provide any legally required opt-out mechanisms.

Grano is based in Illinois and may collect information from Illinois residents.

We process personal information in accordance with applicable Illinois law.

Illinois residents may contact us regarding questions or requests concerning their personal information using the contact information below.

Grano may be accessed from outside the United States.

If you access Grano from another country, your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate. Privacy laws in those jurisdictions may differ from those in your country.

We may update this Privacy Policy from time to time.

If we make material changes, we may provide notice through Grano or by other reasonable means. The "Last Updated" date at the top of this policy indicates when it was most recently revised.