Privacy Policy
Last updated
This policy explains what personal data Gravta LLC, a Delaware limited liability company (“Gravta”, “we”) collects when you visit gravta.com or use the forms and free tools on it, and what we do with it. Questions go to contact@gravta.com.
Gravta is the controller of this data. Our business address is 800 N King Street, Suite 304 #3616, Wilmington, DE 19801, United States.
What we collect
What you send us. When you fill in a form (contact, free creative audit, TV spot analysis, trailer review, AI agent requests), we collect what you type: usually your name, work email, company, website, and details about your brand, ads, budget or challenge. If you share a link to an ad or a spot, we collect that link.
Job applications. If you introduce yourself on our careers page, we collect your name, email, LinkedIn profile link, anything you write, and your CV if you attach one. The CV is emailed to our team; it isn’t stored on our website’s systems.
Where your visit came from. With each form, we also send the first page you landed on, the referring site, campaign tags (UTM parameters) and ad click IDs (from Google, Meta or LinkedIn), if the link you followed had them. This is kept in your browser for the length of your visit only (session storage). In the EEA, the UK and Switzerland, it’s only kept once you accept cookies; until then, a form only sends what it knows from the page you’re on.
How you use the site. We use Google Analytics to understand which pages are visited and how forms perform. It uses cookies and collects data such as pages viewed, approximate location, device and browser, and referral source.
Spam protection. Our forms use Cloudflare Turnstile to tell people from bots. It processes technical signals from your browser, such as your IP address.
Saved results. Some free tools keep your results in your browser (local storage) so you can see them again when you come back. This stays on your device.
Why we use it
| Purpose | Data | Legal basis (EU/UK) |
|---|---|---|
| Answering your request and delivering a free tool | Form details | Steps you asked for before a contract, or our legitimate interest in answering business enquiries |
| Considering you for current or future roles | Application details, CV | Steps you asked for before a contract, or our legitimate interest in hiring |
| Following up about our services | Name, work email, company | Legitimate interest in business-to-business marketing. You can opt out at any time |
| Knowing which pages and campaigns bring enquiries | Visit source, analytics | Consent in the EEA, UK and Switzerland, otherwise legitimate interest |
| Keeping the forms free of spam and abuse | Turnstile signals, IP address | Legitimate interest in security |
We don’t sell your personal data and we don’t share it for cross-context behavioral advertising.
Who processes it for us
- Amazon Web Services hosts the site, receives form submissions, stores them and sends notification emails (in the United States, Northern Virginia region).
- Google (Google Analytics) measures site usage.
- Cloudflare (Turnstile) protects the forms from spam.
These providers process data on our behalf and under their own data processing terms. Some are based in the United States. Where data leaves the EU or UK, we rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.
How long we keep it
We keep form submissions for as long as we need them to answer you and to keep a record of the business relationship, and no longer than 24 months after our last contact, unless you become a client. Job applications, including CVs, are kept for no longer than 24 months, so we can reach you if a role comes up. Google Analytics data is kept for 14 months. You can ask us to delete your data sooner.
Your rights
Depending on where you live, you can ask us to access, correct, delete or export your data, to restrict or object to how we use it, and to withdraw consent. California residents have the right to know, delete and correct their data, and to not be discriminated against for exercising these rights.
To make a request, email contact@gravta.com. We’ll answer within 30 days. If you’re in the EU or UK and unhappy with our answer, you can complain to your local data protection authority.
Cookies
Google Analytics sets cookies (named _ga and _ga_*) that last up to two years. In the EEA, the UK and Switzerland, our cookie panel asks you first: these cookies are only set, and where your visit came from is only kept, once you accept. Elsewhere, they’re on unless you decline. You can change your choice at any time with “Cookie settings” at the bottom of every page, block or delete cookies in your browser, or use Google’s opt-out add-on. Your choice is saved in your browser (local storage). Cloudflare Turnstile may set a short-lived cookie needed for spam protection, which doesn’t need consent.
Children
The site is for businesses and isn’t meant for anyone under 16. We don’t knowingly collect data from children.
Changes
If we change this policy, we’ll update the date at the top of this page.