GRAVL Privacy Policy
Last Updated: September 22, 2025
This Privacy Policy describes how GRAVL, Inc. (“GRAVL,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards information in connection with our platform, website, and related services (together, the “Platform”). This Privacy Policy applies to all visitors, Buyers, and Sellers who access or use the Platform.
By using the Platform, you consent to the practices described in this Privacy Policy. If you do not agree, you must not use the Platform. This Privacy Policy is incorporated by reference into the GRAVL Buyer Terms of Use and GRAVL Seller Terms of Use.
1. Information We Collect
We may collect the following categories of information:
- Personal Information: Name, email address, institutional affiliation, payment details, billing and shipping addresses, and account credentials.
- Platform Usage Information: Account activity, orders placed, services listed, communications through the Platform, browser and device details, IP address, and cookies.
- Service Data: Scientific data, research results, and deliverables produced by Sellers and provided to Buyers. Service Data remains the property of the relevant Buyer and/or Seller; GRAVL makes no ownership claim.
- Metadata: Operational information generated through use of the Platform, including but not limited to instruments, workflows, turnaround times, quality-control metrics, transaction volumes, and demand signals. Metadata excludes Service Data and underlying research results. GRAVL may use Metadata as described in Section 4.
2. How We Collect Information
- Directly from you when you register, submit forms, list services, or place orders.
- Automatically through cookies, log files, and analytics when you use the Platform.
- From third parties such as payment processors, institutional partners, or integrations you enable.
3. How We Use Information
We use information for purposes including:
- Facilitating orders, payments, payouts, refunds, and dispute resolution.
- Providing, maintaining, and improving the Platform.
- Supporting compliance with applicable laws, regulations, KYC/AML, and tax reporting.
- Communicating with you regarding your account, transactions, and Platform updates.
- Developing analytics, benchmarks, and new product features.
- Marketing our services to you, consistent with your preferences and applicable law.
4. Role-Specific Disclosures
For Buyers:
- GRAVL processes payments through Stripe Connect (or its successors). Stripe may collect and process payment and financial data subject to its own privacy policy.
- Buyers retain ownership of all Service Data resulting from Seller services.
- GRAVL may use Metadata derived from Buyer orders to improve Platform operations and analytics.
For Sellers:
- Seller listings, service descriptions, turnaround times, and pricing are made available to Buyers through the Platform.
- GRAVL processes Seller payouts through Stripe Connect (or its successors). Seller may be required to provide KYC/AML and tax reporting information.
- Sellers retain ownership of Service Data generated for Buyers.
- GRAVL may collect and use Metadata from Seller activity to operate and enhance the Platform.
5. How We Share Information
We may disclose information to:
- Service Providers: Including Stripe, hosting, analytics, cloud storage, and integration providers.
- Institutional Partners: To the extent necessary to process or fulfill Buyer orders.
- Legal and Regulatory Authorities: As required to comply with law, enforce our agreements, or protect GRAVL, our users, or third parties.
We do not sell personal information.
6. Data Retention
We retain information for as long as necessary to provide services, fulfill legal obligations, resolve disputes, and enforce our agreements.
- Service Data retention is determined by Buyers and Sellers in accordance with institutional and funder requirements.
- Metadata may be retained by GRAVL in anonymized or aggregated form for analytics and benchmarking.
7. Cookies and Tracking
The Platform uses cookies and similar technologies to enable functionality and analyze usage. You may configure your browser to block cookies, but some Platform features may not function properly.
8. Security
GRAVL implements administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction. No system is completely secure, and we cannot guarantee absolute security of your information.
9. International Transfers
If you access the Platform from outside the United States, your information may be transferred to and processed in the United States. We apply safeguards consistent with applicable data protection laws, including GDPR standard contractual clauses where appropriate.
10. Your Rights
Depending on your jurisdiction, you may have rights to:
- Access, correct, or delete your information.
- Object to or restrict certain processing.
- Request portability of your information.
- Opt-out of marketing communications.
Requests should be submitted to privacy@gravl.io. We may need to verify your identity before fulfilling requests.
11. Children’s Privacy
The Platform is not directed to children under 16. We do not knowingly collect information from children. If we become aware of such collection, we will delete it.
12. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be posted on our website and indicated by the “Last Updated” date. Your continued use of the Platform after changes take effect constitutes acceptance of the revised policy.
13. Contact Us
For questions or requests regarding this Privacy Policy, contact:
GRAVL, Inc.
55 Court Street, 2nd Floor
Boston, MA 02109
United States
