Data & Privacy
What GrackerAI stores, how long we keep it, and how to control it.
What We Store
Customer-provided data:
- Account info (name, email)
- Monitors, prompts, brands, and workspace settings you create
- Team member info
Generated data:
- AI responses captured against your prompts
- Citation data
- Usage analytics within GrackerAI
Operational data:
- Login history
- API usage logs
- Audit logs
Data Residency
| Option | Availability | |---|---| | US (default) | All plans | | EU residency | Scale and Enterprise plans | | Multi-region | Enterprise only |
To request EU residency, contact privacy@gracker.ai.
Retention
| Data Type | Retention Period | |---|---| | Account info | While account is active + 30 days post-deletion | | Monitors and prompts | While account is active + 30 days post-deletion | | AI responses | 24 months by default - configurable on Scale and Enterprise | | Citation data | 24 months by default - configurable on Scale and Enterprise | | Audit logs | 12 months | | Operational logs | 90 days |
Your Deletion Rights
You can delete at any time:
| What | How | |---|---| | Individual records (prompts, monitors, responses) | Delete from within the dashboard | | Specific data categories | Submit a request to privacy@gracker.ai | | Entire account | Not self-serve today - submit a request to privacy@gracker.ai |
Hard deletion completes within 30 days. Backup copies are purged within 90 days.
Subprocessors
| Subprocessor | Purpose | |---|---| | AWS | Hosting and storage | | OpenAI, Google, Microsoft, Perplexity, xAI, Anthropic, DeepSeek | AI model APIs (for response capture only) | | Stripe | Payment processing | | Sentry | Error monitoring (PII-redacted before logging) |
For the full subprocessor list, contact support@gracker.ai.
DPA & Privacy Policy
- Data Processing Agreement - available for all customers; contact support@gracker.ai to request a copy
- Privacy Policy - gracker.ai/privacy
- DPO contact - privacy@gracker.ai
Customer Rights (GDPR / CCPA)
We honour these rights regardless of your location:
- Right to access
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to data portability
- Right to object or restrict processing
