Privacy Policy

Who this covers

This policy explains how we handle personal information in two settings: when a company uses the Grati5 recognition platform for its employees, and when anyone visits this website or contacts us through it.

When a company subscribes to Grati5, that company is the controller of its employees' data and we process it on its behalf under a data processing agreement. Employees with questions about how their employer uses Grati5 should contact their HR team first.

Information in the platform

Profile details provided by your employer or HR system: name, work email, team, manager, location and start date.
Recognitions you send and receive, including the message, company value, points and visibility setting.
Reward balances, redemptions and delivery details needed to fulfil a reward.
Answers you give to the AI message assistant while drafting a recognition.
Technical logs such as sign-in times, device type and IP address, used for security and support.

What we never collect

We do not read chat channels, direct messages, email, documents or any communication outside the recognitions you choose to send through Grati5. We do not track activity, keystrokes or screen time, and we do not create individual engagement scores, rankings or predictions about individual employees.

How information is used

To deliver recognitions to the people and channels the sender chooses.
To calculate points and fulfil rewards through reward partners.
To suggest wording when you ask the AI message assistant for help.
To produce team-level insights, with groups below the minimum group size merged into a parent group.
To keep the service secure, provide support and meet legal obligations.

AI processing

Drafting assistance and theme summaries are processed by enterprise AI providers acting as our sub-processors. Their terms prohibit using customer data to train their models and limit retention to what is needed to complete each request. Your employer can switch AI features off at any time.

Website and contact forms

When you book a demo or sign up on this website, we collect the details you enter, such as your name, work email, company, role and company size, and use them to respond, set up your workspace and send your login details. We use a basic session cookie to verify form submissions and prevent spam. We do not sell this information or use it for third-party advertising.

Security and retention

Data is encrypted in transit and at rest, and access is limited by role. Platform data is kept for as long as your employer's subscription is active, then deleted from production systems within 30 days of the contract ending, and from backups on their normal rotation. Enquiries from this website are kept for as long as needed to respond and follow up.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, or to object to certain processing. Employees can view and download their own recognition and reward history from their profile. For anything else, write to us through the contact page and we will respond within the time required by applicable law.

Changes to this policy

If we make material changes to how we handle personal information, we will notify customer administrators in advance and update this page.