PridlyPrivacy policy
Last updated 19 October 2026. Pridly is operated by GridlyPaper, India ("we"). Contact: support@gridlypaper.com.
The short version: we hold as little as possible. We do not store your shop's orders, products or customers. We keep your sign-in email, your shop address, your shop's Webservice key (encrypted) and a log of the changes you approved.
What we collect and why
| Account | Your email address, plan, usage counts (how many changes per month) and sign-in events. To let you sign in and to apply plan limits. |
|---|---|
| Connected shops | The shop address, currency, timezone and the PrestaShop Webservice key. The key is encrypted at rest (AES-256-GCM) and is never shown to you, to the AI or in our logs. To read and change your shop on your behalf. |
| Change log | For each change you approve: which shop, which products or order, the old and new values (for example old and new price or text), and a short description. To let you undo changes and see history. |
| Your preferences | Whether you want summary and low-stock emails (off by default), your saved writing styles, and any changes you scheduled for later (the time and a short description). To do what you asked, when you asked. |
| Support messages | What you send through the support form or by email: your email address, the shop address and change number if you add them, and your message. To answer you and fix problems. |
| Billing | Handled by our payment provider, our merchant of record. We receive your plan and subscription status, never your card number. |
What we do not store
When you ask a question, we fetch the answer live from your shop and hand it to your AI app. We keep a copy only in memory for up to 5 minutes to make repeat questions fast, then it is gone. We don't build profiles, sell data, show ads or use third-party advertising or analytics trackers.
Customer personal data
Lists show customers' names shortened (for example "Anna K."). Full names, emails and addresses are returned only when you ask about a specific order or customer. That information is passed to the AI app you are using (Claude or ChatGPT) as part of your conversation, and is then handled under that provider's own terms and privacy policy. If you serve customers in the EU, you remain the controller of your customers' data; please make sure your own privacy notice covers the use of AI assistants.
Who else handles data
- Hosting and infrastructure providers: secure servers, databases and network services that run Pridly.
- Email provider: sends our emails to you: sign-in links and, if you turn them on, summaries, low-stock alerts and results of scheduled changes (these contain shop figures such as sales totals and product names).
- Payment provider: our merchant of record. It takes payments and handles sales tax and VAT.
- Anthropic / OpenAI: the AI app you choose to use Pridly in.
Cookies
One essential cookie keeps you signed in. We don't use marketing or analytics cookies.
How long we keep things
Sign-in links expire after 15 minutes. Access tokens last one hour, refresh tokens 30 days. Everything else is kept while your account exists and deleted when you delete it. Encrypted backups are kept for up to 30 days and then overwritten.
Your rights
You can see, correct or delete your data at any time. Deleting your account is self-service (see Delete your data) or email us. If you are in the EU/UK (GDPR) or India (DPDP Act) you may also complain to your data protection authority.
Security
All traffic uses HTTPS. Shop keys are encrypted. Sign-in uses one-time links, and AI-app access uses short-lived tokens. We will tell affected users promptly if a breach affects them.
Children
Pridly is for business use and not directed at children.
Changes
If we change this policy in a meaningful way we will update the date above and tell account holders by email.