GRAND LEGAL FRAMEWORK OVERVIEW

Last updated: 9 March 2026

This page explains how Grand’s legal documents fit together and when each one applies. It is provided for transparency and clarity only. It does not form part of any agreement and does not replace or modify any legally binding terms.

How Grand’s agreements work

Grand is a modular software platform. You only agree to the legal terms that apply to:

• the platform itself, and
• the specific products you choose to enable

Not every document applies to every customer, and not every document applies at the same time.

The core legal documents

1. Platform Terms & Conditions

Applies to: All users

The Platform Terms govern:

• access to the Grand platform
• account usage and security
• platform-level functionality, including AI and automation
• billing authority and payment mechanics
• general limitations, disclaimers, and liability
• confidentiality, indemnification, and general legal provisions

You agree to the Platform Terms when you create an account. Acceptance is by active checkbox at registration.

2. Product-Specific Terms

Applies to: Only when a product is enabled

Each Grand product has its own Product Terms. Currently available:

• Profile Product Terms — governs the Profile business intelligence and monitoring product

Additional Product Terms will be published as new products launch (for example, for payments, lending, insurance, or marketplace features).

Product Terms govern:

• what the product does
• how it may be used
• product-specific risks and limitations
• pricing, usage, and billing mechanics for that product

You agree to Product Terms digitally in-app when you first enable or use the relevant product. If you do not enable a product, its Product Terms do not apply to you.

3. Third-Party Data Notices

Applies to: Users of products that incorporate third-party data

Certain products (including Profile) incorporate data from third-party providers. Those providers may require specific attributions, disclaimers, or usage restrictions to be passed through to end users.

The Third-Party Data Notices page sets out these requirements and is incorporated by reference into the relevant Product Terms. It may be updated from time to time as data partnerships change.

4. Data Processing Addendum (DPA)

Applies to: Only where Grand acts as a data processor

In some products, Grand processes personal data on behalf of a customer — for example, where a customer uses Grand to collect or verify information about third parties.

In those cases:

• the customer is the data controller
• Grand acts as a data processor
• the Data Processing Addendum applies

The DPA:

• satisfies GDPR Article 28 requirements
• applies only to processing carried out on customer instructions
• does not apply to Grand’s independent analytics, intelligence, or monitoring

The DPA is incorporated by reference into the relevant Product Terms and applies automatically when required.

5. Privacy & Data Protection Policy

Applies to: All visitors and users

The Privacy Policy explains how Grand processes personal data when acting as:

• a data controller, or
• an independent or separate controller

It covers:

• data collected through the website and platform
• independently sourced data
• analytics, monitoring, and platform operations
• use of data to improve AI models and platform performance

6. Cookie Policy

Applies to: Website and app users

The Cookie Policy explains:

• what cookies and similar technologies are used
• why they are used
• how consent is captured and managed

Cookie preferences are managed through Grand’s cookie consent tool.

How acceptance works

• Platform Terms are accepted by active checkbox when you create an account
• Product Terms are accepted when you first enable a product in-app
• The DPA applies automatically where a product involves processor-type data handling
• Third-Party Data Notices apply to products that incorporate third-party data and are incorporated by reference into the relevant Product Terms
• Privacy and Cookie policies apply based on use of the website or platform

You are not required to accept terms that do not apply to the products you use.

What this page is (and is not)

This page:

• explains how Grand’s legal framework is structured
• helps customers, partners, and regulators understand scope and applicability

This page:

• is not a contract
• does not create new rights or obligations
• does not override any legally binding terms

In the event of any conflict, the relevant legally binding document governs.

Frequently asked questions

Which legal documents apply to me?

All users agree to the Platform Terms. Additional documents apply only if and when you enable specific products.

Do I have to agree to all Product Terms?

No. You only agree to the Product Terms for the products you actively enable.

When do I accept Product Terms?

Product Terms are accepted digitally in-app when you first enable or start using a product.

Is the Data Processing Addendum mandatory?

Only where a product involves Grand processing personal data on your behalf. It does not apply platform-wide.

Is Grand always a data processor?

No. Depending on the product and context, Grand may act as a data processor, an independent controller, or a separate controller.

Does the DPA apply to analytics or AI outputs?

No. The DPA does not apply to analytics, intelligence, monitoring, inferred data, scores, signals, or AI-generated outputs created by Grand.

Are AI-generated outputs guaranteed to be accurate?

No. AI-assisted outputs are probabilistic and may be incomplete or change over time. They support decision-making but do not replace human judgement.

Does Grand make decisions on my behalf?

No. Grand provides tools and capabilities. Customers decide how to configure and use them and remain responsible for decisions and actions.

Can I rely on Grand outputs for regulatory or legal decisions?

Grand outputs are informational and analytical. They are not authoritative records, approvals, or determinations.

Can I share Grand outputs with third parties?

In some cases, yes, depending on the product and your agreement. No third party acquires rights against Grand by receiving or relying on shared outputs.

How does pricing and billing work?

Pricing is published on the website or in-app at the time of purchase. Fees apply only to enabled products and may be subscription-based, credit-based, or usage-based.

Are credits refundable or transferable?

No. Credits are a prepaid right to access features. They are not money and are non-refundable except where required by law.

Do credits expire?

Yes. Expiry rules may vary by product or plan and are shown at the time of purchase or use.

Can pricing or credit costs change?

Yes. Pricing and usage mechanics may change prospectively for new purchases or renewals.

What happens if a payment fails?

Grand may retry payment, apply dunning processes, or suspend access to the affected product.

Does Grand offer invoicing or pro-rata billing?

In some cases. These arrangements are discretionary and may change or be withdrawn.

Can Grand change or remove features?

Yes. Grand may modify, reweight, replace, or remove features, models, or signals as the platform evolves.

Is this page legally binding?

No. This page is explanatory only. The legally binding documents are the Platform Terms, Product Terms, DPA, Privacy Policy, and Cookie Policy.

Find the full legal documents

• Platform Terms & Conditions — heygrand.com/legal/platform-terms
• Profile Product Terms — heygrand.com/legal/profile-terms
• Third-Party Data Notices — heygrand.com/legal/data-notices
• Data Processing Addendum — heygrand.com/legal/dpa
• Privacy & Data Protection Policy — heygrand.com/legal/privacy
• Cookie Policy — heygrand.com/legal/cookies

Questions

If you have questions about how Grand’s legal framework applies to your use of the platform, contact:

legal@heygrand.com