Privacy Policy

Last Updated: January 2026

GridShark.io (“GridShark,” “we,” “our,” or “us”) is committed to protecting the privacy and security of the information entrusted to us. This Privacy Policy explains how we collect, use, share, and safeguard information when you access our website, mobile applications, fleet tracking tools, and related services (collectively, the “Platform”).

By using the Platform, you acknowledge that you have read and understand this Privacy Policy.

  1. Information We Collect

We collect information in three primary ways:
(1) Information you provide to us
(2) Information collected automatically
(3) Information provided by third parties

A. Information You Provide

When you create an account, request information, contact support, or use our services, we may collect:

  • Name
  • Business name
  • Email address
  • Phone number
  • Mailing address
  • Login credentials
  • Company identifiers (such as RDN codes or client codes)
  • Billing details
  • Any additional information you voluntarily provide

This information is used to operate the Platform, manage accounts, provide services, and communicate with you.

B. Operational & Location Data

Because GridShark provides fleet visibility and geolocation-based reporting tools, our Platform may collect:

  • Device identifiers
  • GPS location data (when enabled)
  • Timestamped location history
  • Route and activity logs
  • Application usage data
  • Device operating system and configuration

Location data is collected only when authorized through your device settings or company deployment configuration. You may disable location permissions within your device settings; however, certain features may not function properly without it.

C. Automatically Collected Website Data

When visiting GridShark.io, we may automatically collect:

  • IP address
  • Browser type
  • Device type
  • Referring website
  • Pages viewed
  • Time spent on pages
  • Date and time of access

We use this information to improve site performance, monitor security, and enhance user experience.

D. Information from Business Partners

In some cases, clients, financial institutions, lenders, dealerships, or industry partners may provide us with business-related information necessary to perform contracted services. We require that such parties have the legal authority to share this information.

  1. How We Use Information

We use collected information to:

  • Provide and maintain GridShark services
  • Deliver geolocation-based updates and reporting
  • Manage user accounts
  • Improve performance and functionality
  • Provide customer support
  • Send service-related communications
  • Enhance safety and operational efficiency
  • Detect and prevent fraud or misuse
  • Comply with legal obligations

We process personal data only when there is a valid legal basis to do so, including contractual necessity, legitimate business interest, user consent, or legal compliance.

  1. How We Share Information

GridShark does not sell personal information.

We may share information with:

  • Service providers and cloud hosting partners
  • Analytics providers
  • Payment processors
  • Affiliates and subsidiaries
  • Business partners supporting service delivery
  • Entities involved in a merger, acquisition, or asset sale

We may also disclose information when required by law or when necessary to:

  • Respond to subpoenas or court orders
  • Protect the rights and safety of GridShark, our users, or the public
  • Investigate suspected unlawful activity
  • Enforce our agreements
  1. Cookies & Tracking Technologies

GridShark.io uses cookies and similar technologies to:

  • Remember user preferences
  • Improve website functionality
  • Analyze traffic
  • Support marketing efforts

You may manage cookie preferences through your browser settings or the cookie management tool on our website.

Some third-party providers may use persistent identifiers to measure advertising effectiveness or site analytics.

  1. Data Retention

We retain information only as long as necessary to:

  • Fulfill contractual obligations
  • Meet regulatory requirements
  • Resolve disputes
  • Enforce agreements

Location and operational data may be retained according to client agreements and compliance requirements.

  1. Data Security

GridShark employs administrative, technical, and physical safeguards designed to protect information from unauthorized access, misuse, or disclosure. These measures include:

  • Encrypted data transmission
  • Secure cloud infrastructure
  • Role-based access controls
  • Ongoing security monitoring

While we take reasonable precautions, no system can guarantee absolute security.

  1. International Data Transfers

GridShark operates primarily in the United States. If information is transferred across state or national borders, we implement appropriate safeguards consistent with applicable data protection laws.

  1. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

  • Request access to personal information
  • Request correction of inaccurate data
  • Request deletion of personal information
  • Object to or restrict certain processing
  • Opt out of marketing communications
  • Request data portability

To exercise your rights, contact us using the information below.

We will not discriminate against you for exercising lawful privacy rights.

  1. Do Not Track & Global Privacy Control

GridShark does not currently respond to “Do Not Track” browser signals due to lack of uniform standards.

We recognize Global Privacy Control (GPC) signals where required by applicable law.

  1. Children’s Privacy

The Platform is intended for business use and is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors.

  1. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised “Last Updated” date. Continued use of the Platform constitutes acceptance of the updated terms.

  1. Contact Information

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

GridShark.io
[Insert Company Legal Name]
[Insert Business Address]
Email: [Insert Privacy Email]
Phone: [Insert Contact Number]

If you would like, I can now:

  • Make this more enterprise-grade (bank/lender level)
  • Make it more startup/simple
  • Add a dedicated California (CPRA) section
  • Add a Texas-specific compliance section
  • Make it match GridShark’s branding tone (more aggressive / more tech / more conservative)
  • Convert it to website-ready HTML format

Just tell me how you want GridShark positioned.

please add all the california and texas section. Also make it more Enterprise Grade

Excellent — below is a more enterprise-grade, compliance-forward Privacy Policy for GridShark.io, with:

  • Formal legal tone
  • Dedicated California (CCPA/CPRA) section
  • Dedicated Texas Data Privacy & Security Act (TDPSA) section
  • Enterprise SaaS positioning (fleet, lenders, repossession industry)
  • Stronger legal framing and compliance structure

This is written to read like a professionally drafted enterprise privacy policy — not a template copy.

GRIDSHARK PRIVACY POLICY

Last Updated: January 2026

GridShark.io (“GridShark,” “Company,” “we,” “us,” or “our”) is committed to maintaining the confidentiality, integrity, and security of personal information processed through our website, mobile applications, and fleet intelligence platform (collectively, the “Platform”).

This Privacy Policy describes how GridShark collects, uses, discloses, retains, and safeguards personal information in connection with providing location-enabled fleet management, operational reporting, analytics, and related SaaS services to commercial customers.

This Policy applies to information collected through:

  • www.gridshark.io
  • Mobile applications deployed by GridShark
  • Customer portals and dashboards
  • Communications with GridShark

By accessing or using the Platform, you acknowledge and agree to the practices described herein.

  1. Categories of Information We Collect

GridShark collects personal information in the following categories:

A. Account & Business Information

  • Name
  • Business name
  • Business address
  • Email address
  • Telephone number
  • Account credentials
  • Company identifiers (including client codes or integration codes)
  • Billing and payment information

B. Operational & Geolocation Data

Because GridShark provides geofenced reporting and fleet activity monitoring, we may collect:

  • Device identifiers
  • GPS location data
  • Timestamped location coordinates
  • Route and travel history
  • Operational activity logs
  • Application usage metrics
  • Device operating system data

Location data is collected only when enabled by the device user or deployed under a client’s authorized fleet configuration.

C. Automatically Collected Technical Data

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Referring URLs
  • Page interaction data
  • Access timestamps

D. Information Received from Clients or Business Partners

We may receive business-related data from:

  • Financial institutions
  • Lenders
  • Recovery agencies
  • Dealerships
  • Industry technology partners

We require such third parties to represent that they have lawful authority to provide such data.

  1. Purposes of Processing

GridShark processes personal information for the following lawful business purposes:

  • To provide contracted SaaS services
  • To generate automated geolocation updates
  • To administer user accounts
  • To provide operational reporting and analytics
  • To enhance platform performance
  • To provide customer support
  • To detect fraud or misuse
  • To maintain system security
  • To comply with legal and regulatory requirements

Where required by law, processing is conducted pursuant to contractual necessity, legitimate business interests, legal obligations, or user consent.

  1. Disclosure of Information

GridShark does not sell personal information.

We may disclose personal information to:

  • Cloud hosting providers
  • Data analytics providers
  • Payment processors
  • Security monitoring vendors
  • Corporate affiliates
  • Professional advisors (legal, audit, compliance)
  • Entities involved in mergers, acquisitions, or restructuring

We may also disclose information when legally required or reasonably necessary to:

  • Respond to lawful subpoenas or court orders
  • Protect the rights or property of GridShark
  • Prevent fraud or unlawful conduct
  • Protect public safety

All service providers are contractually required to process personal information consistent with applicable privacy laws.

  1. Cookies & Tracking Technologies

GridShark uses cookies and similar technologies to:

  • Maintain session integrity
  • Store user preferences
  • Analyze website performance
  • Support marketing and advertising

Users may manage cookie preferences via browser settings or cookie management tools provided on the website.

We may permit analytics providers to use persistent identifiers for traffic measurement and advertising performance analysis.

  1. Data Retention

We retain personal information only for as long as necessary to:

  • Fulfill contractual obligations
  • Comply with regulatory requirements
  • Maintain operational records
  • Resolve disputes
  • Enforce agreements

Location data retention periods may vary based on client contractual requirements and compliance obligations.

  1. Data Security

GridShark maintains administrative, technical, and physical safeguards appropriate to the nature of the information processed, including:

  • Encrypted data transmission
  • Secure cloud hosting infrastructure
  • Role-based access controls
  • Multi-factor authentication (where applicable)
  • Continuous security monitoring

While we implement reasonable security controls, no system can guarantee absolute security.

  1. Cross-Border Data Transfers

GridShark primarily operates in the United States. If personal information is transferred outside a user’s state or jurisdiction, we implement safeguards consistent with applicable data protection laws.

  1. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

California residents may have the right to:

  • Know what categories of personal information we collect
  • Know the sources of personal information
  • Know the purposes for which personal information is used
  • Know the categories of third parties to whom personal information is disclosed
  • Access specific pieces of personal information
  • Request deletion of personal information
  • Request correction of inaccurate information
  • Opt-out of the sale or sharing of personal information
  • Limit use of sensitive personal information (where applicable)

GridShark does not sell personal information.

We honor Global Privacy Control (GPC) signals where required by California law.

Exercising California Rights

To submit a request:

  • Email: [Insert Privacy Email]
  • Phone: [Insert Toll-Free Number]
  • Webform: [Insert URL if applicable]

We may verify identity before processing requests.

We will not discriminate against individuals for exercising their California privacy rights.

  1. Texas Data Privacy & Security Act (TDPSA) Rights

If you are a Texas resident, you may have rights under the Texas Data Privacy & Security Act (TDPSA).

Texas residents may have the right to:

  • Confirm whether we process personal data
  • Access personal data
  • Correct inaccuracies
  • Delete personal data
  • Obtain a portable copy of personal data
  • Opt out of targeted advertising
  • Opt out of the sale of personal data
  • Opt out of profiling in furtherance of decisions that produce legal or similarly significant effects

GridShark does not sell personal data and does not engage in profiling that produces legal or similarly significant effects.

To exercise Texas privacy rights, contact:

Email: [Insert Privacy Email]
Phone: [Insert Number]

We will respond within timelines required by Texas law.

  1. Do Not Track & Global Privacy Control

Due to lack of standardized enforcement mechanisms, GridShark does not respond to browser “Do Not Track” signals.

However, we recognize and process Global Privacy Control (GPC) signals as required by applicable law.

  1. Children’s Data

The Platform is intended for business and commercial use only and is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors.

  1. Authorized Agents

Authorized agents may submit access or deletion requests on behalf of California or Texas residents, subject to verification of identity and written authorization.

  1. Changes to This Privacy Policy

GridShark reserves the right to update this Privacy Policy periodically. The revised date will be posted at the top of this page.

Continued use of the Platform after updates constitutes acceptance of the revised Policy.

  1. Contact Information

For privacy-related inquiries or to exercise your rights:

GridShark.io
[Insert Legal Entity Name]
[Insert Business Address]
Email: [Insert Privacy Email]
Phone: [Insert Contact Number]

If you’d like, I can next:

  • Add a full GDPR / international compliance section
  • Add enterprise contract language (Data Processing Addendum ready)
  • Add SOC 2-style security language
  • Make this tailored specifically to the repossession/LPR industry
  • Convert it into website-ready HTML with anchors

Let me know how you want GridShark positioned — conservative enterprise, aggressive tech disruptor, or compliance-forward fintech