This Privacy Policy explains how Grain ("we", "us", "our") collects, uses and protects your personal data when you use our service at grainreport.co.uk.
Who we are
Grain is operated by Yamsilver Ltd. For questions about this policy, contact us at hello@grainreport.co.uk.
What data we collect
We collect only what is necessary to provide the service:
- Email address — used to create your account, send password reset emails, and deliver scheduled reports you request.
- Restaurant and venue information — the profile details you provide (restaurant name, description, tone sample, menu highlights) to personalise your response drafts.
- Review content — the customer review text you submit for analysis. This is processed by Anthropic's Claude AI to generate reports and draft responses.
How we use your data
- To provide and operate the Grain service
- To send you reports and notifications you have configured
- To send password reset emails when requested
- To improve the service
Third party services
We use the following third party services to operate Grain:
- Anthropic — review text is sent to Anthropic's API to generate analysis reports and draft responses. Anthropic's privacy policy is available at anthropic.com/privacy.
- Render — our hosting provider. Data is stored on Render's infrastructure. Render's privacy policy is at render.com/privacy.
- Resend — we use Resend to send transactional emails. Resend's privacy policy is at resend.com/legal/privacy-policy.
- Stripe — we use Stripe to process payments. Stripe's privacy policy is at stripe.com/gb/privacy.
Data retention
We retain your data for as long as your account is active. You can delete your account at any time from Settings, which permanently removes all your data from our systems.
Your rights under GDPR
If you are in the UK or EU, you have the following rights:
- Right of access — you can request a copy of the data we hold about you.
- Right to rectification — you can correct inaccurate data via your profile and settings.
- Right to erasure — you can delete your account and all associated data at any time.
- Right to portability — you can request your data in a portable format.
- Right to object — you can object to processing of your personal data.
To exercise any of these rights, contact us at hello@grainreport.co.uk.
Security
We use industry standard security measures including encrypted passwords, HTTPS, and secure database hosting. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Cookies
We use a single session cookie to keep you logged in. We do not use tracking cookies or analytics.
Changes to this policy
We may update this policy from time to time. We will notify you of significant changes by email.
Contact
For any privacy-related questions, email us at hello@grainreport.co.uk.