Privacy at NordGryd.
Information we collect
We collect three categories of information: account information you provide when registering a tenant; operational data your team enters into the platform (assets, tickets, work orders, photos, signatures); and telemetry from your sensor integrations.
We do not buy data from third parties. We do not enrich your records from external sources without your explicit instruction.
How we use it
Operational data is used to deliver the service to you. Aggregated, de-identified usage statistics are used to improve the product. We do not train external machine-learning models on your operational data.
Sharing & disclosure
We do not sell, rent, or trade your data. We share data with sub-processors only as necessary to deliver the service (cloud hosting, email delivery, payment processing). A full list is available at nordgryd.com/subprocessors.
Your rights — GDPR / NDPR / DPA
If you are based in the EU, Nigeria, Kenya, South Africa, or Brazil, you have the right to access, correct, delete, port, or restrict the processing of your personal data. Submit requests via privacy@nordgryd.com.
For tenants in regulated sectors, we also support BYOK encryption keys and on-prem deployment under our Enterprise plan.
Data retention
Operational data is retained for the life of the tenant subscription plus 30 days. Audit logs are retained per the plan tier (30 days · 1 year · 7 years). Deleted records are purged within 30 days from cold storage.
Security
Data is encrypted at rest (AES-256) and in transit (TLS 1.2+). We maintain SOC 2 Type II compliance. Penetration tests are conducted annually by a third party.
International transfers
Data is processed in the region you select at onboarding. Cross-border transfers are governed by Standard Contractual Clauses where applicable.
Cookies
The marketing site uses strictly necessary cookies (session, CSRF) and analytics cookies (opt-in). The web application does not use third-party tracking cookies.
Contact
Data Protection Officer: dpo@nordgryd.com
Postal: Nordaxiz Technology Limited, Attn: DPO, 12 Adeola Odeku St, Victoria Island, Lagos.