Privacy Policy

ShowGrid (“ShowGrid”, “we”, “us”) is a production task-orchestration service operated by Sigma-1 Environments. This Privacy Policy explains what information we collect when you use the ShowGrid website and application (the “Service”), how we use it, and the choices you have. It applies to the marketing site, the signup flow, and every tenant subdomain (your-show.showgrid.io).

If you access ShowGrid as a member of a production created by someone else, that production’s administrators are the controllers of the data in their workspace; we process it on their behalf.

We collect only what the Service needs to work:

• Account information — your name, email address, and a hashed password (we never store passwords in plain text). If you sign in with a magic link, we store the email address the link was sent to.
• Production content — the projects, stages/sets, days, tasks, dependencies, assignments, sign-offs, messages, and any files or notes you or your crew add to a workspace.
• Profile details you choose to add — such as an avatar image, role title, capabilities, or contact notes.
• Technical data — basic log and device information (IP address, browser type, timestamps) generated automatically to operate and secure the Service.

We do not intentionally collect special-category personal data, and we ask that you not put sensitive personal information (government IDs, health data, payment card numbers) into free-text fields.

We use the information above to:

• provide, maintain, and secure the Service and your workspace;
• authenticate you and keep sessions scoped to the correct production;
• send transactional email (magic links, invitations, password resets, notifications you opt into);
• diagnose problems, prevent abuse, and improve reliability and performance; and
• comply with legal obligations.

We do not sell your personal information, and we do not use your production content to train machine-learning models.

ShowGrid uses a small number of strictly necessary cookies to keep you signed in (session cookies are host-only, so a session on one production is never valid on another). We use your browser’s local storage to remember interface preferences such as your light/ dark theme, density, and view settings. We do not use advertising or cross-site tracking cookies.

We rely on a short list of reputable infrastructure providers to run ShowGrid. They process data only as needed to provide their service to us:

• Vercel — application hosting, edge network, and file storage (Blob).
• Supabase — managed PostgreSQL database hosting.
• Cloudflare — DNS and network routing for subdomains.
• Resend — transactional email delivery.

Some of these providers may process data on servers located outside your country. Where that happens, we rely on appropriate safeguards for the transfer.

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases:

• Performance of a contract — to provide the Service you or your production signed up for.
• Legitimate interests — to secure, maintain, and improve the Service and prevent abuse, balanced against your rights.
• Consent — where you opt in (for example, push notifications or marketing email); you can withdraw consent at any time.
• Legal obligation — where the law requires us to process or retain data.

For most production content we act as a processor on behalf of the production’s administrators (the controller); for your account and the operation of the Service we act as a controller.

We keep your information for as long as your account or production is active, and for a reasonable period afterward to meet legal, accounting, or security needs. When you delete your account or a production is deleted, we remove the associated content from our active systems promptly (generally within a few days).

Residual copies may persist in encrypted, access-controlled backups for up to 30 days before they age out and are overwritten; we do not restore deleted data from backups except to recover from a system failure. The demo workspace is disposable and is reset to stock content periodically.

Depending on where you live, you may have the right to access, correct, export (portability), and delete your personal information, and to object to or restrict certain processing.

You can exercise the core rights yourself, at no cost, from My Settings → Your data & account: Export my data downloads a machine-readable copy, and Delete my account permanently erases it (see below). You can update most profile information directly in the app.

For anything else, contact privacy@showgrid.io and we will respond within the time your law requires (generally 30 days). We will not discriminate against you for exercising these rights. If your data lives inside a production run by someone else, we may direct your request to that production’s administrator (the controller).

Delete my account in My Settings permanently removes your profile, sign-in credentials, memberships, task assignments, and the comments and messages you posted. If you are the sole owner of a production, that production and all of its data are deleted with your account. To protect other people’s work, you cannot delete your account while you own a production that still has other crew — hand it off or remove the crew first.

Deletion is immediate and irreversible on our active systems and is confirmed with a type-to-confirm step; backup copies age out as described under Data retention. Export your data first if you want a copy.

European Economic Area & United Kingdom (GDPR / UK GDPR). You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right not to be subject to solely automated decisions with legal effects (we make none). Where we rely on consent you may withdraw it at any time. You may lodge a complaint with your local supervisory authority, though we hope you’ll contact us first.

California (CCPA / CPRA). You have the right to know what personal information we collect and how it’s used and shared, to access and delete it, to correct inaccuracies, and to limit the use of sensitive personal information. We do not sell or “share” (for cross-context behavioral advertising) your personal information, and have not in the preceding 12 months. We do not discriminate against you for exercising your rights. Authorized agents may submit requests on your behalf with proof of authorization.

Canada (PIPEDA and provincial laws). We collect, use, and disclose personal information with your knowledge and consent (express or implied) for the purposes described here. You may access and request correction of your personal information and may challenge our handling of it by contacting us; you may also complain to the Office of the Privacy Commissioner of Canada.

We and our service providers may process and store your information in Canada, the United States, and other countries where our providers operate, which may have different data- protection laws than yours. Where we transfer personal data out of the EEA, UK, or another region that restricts transfers, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum), or another lawful transfer mechanism.

We use industry-standard measures to protect your data, including encryption in transit, hashed passwords, tenant isolation, and role-based access controls. No method of transmission or storage is perfectly secure, however, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential.

ShowGrid is a workplace tool and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective” date above and, where appropriate, notify you in the app or by email. Your continued use of the Service after a change takes effect means you accept the revised policy.

Questions about privacy? Email privacy@showgrid.io. ShowGrid is operated by Sigma-1 Environments.