GridzHelp LLC Master Privacy Policy

Version GL-PRIVACY-1.0
Effective date: October 5, 2026

Who we are and what this policy covers

GridzHelp LLC is a Pennsylvania company operating under the registered DBAs Work Made Plain and Public Made Plain. Work Made Plain is our commercial services brand. Public Made Plain is our public-sector services and procurement education brand. Both are operated by the same legal entity.

This policy explains how we handle personal information through gridzhelpllc.com, workmadeplain.com, publicmadeplain.com and the Work Made Plain applications for onboarding, contact cards, appointments, people, sales, support, church workflows, gift cards, conference services and platform operations. A service may be available only to authorized users or in a clearly identified demonstration or TEST environment. Inclusion in this policy does not mean that every service is available in Production.

When we host or process information for a customer, that customer may determine what is collected and how it is used. Its notices and our customer agreement also apply. This policy does not replace the customer's responsibilities to its employees, attendees, clients, residents or other users.

Information we handle

We receive names, organization details, email addresses, phone numbers, service-area information, project descriptions and correspondence when you contact us or request services. Customer accounts and workspaces also contain identity and organization access information, service settings, tasks, support requests and related activity records.

Depending on the services a customer uses, we handle contacts and sales activity; employee directory, onboarding and policy acknowledgment records; appointments and scheduling information; event rosters, badge details and approved contact-card information; and customer-authorized church follow-up or care information. Some of these records can be sensitive. We handle only the service-specific information supplied or authorized for the relevant workflow.

For invoicing and payment workflows, we handle invoice, transaction-status and reconciliation information. Gift-card workflows may include purchaser and recipient names and emails, personal messages, gift-card references and balance or activity records. Payment entry is directed to an approved hosted processor. Do not put card numbers, banking credentials, passwords, identity-document images or other sensitive credentials in an ordinary inquiry or support message. Business onboarding can include registration identifiers and masked verification information through designated steps.

Published digital contact cards and event materials contain the information specifically selected and approved for public display. Private account information is not automatically approved for public publication.

How we use information

We use information to respond to inquiries; define and deliver agreed services; establish authorized account access; manage customer workflows and support; produce requested schedules, badges, cards, reports and documents; track invoices and verified payment results; maintain business and audit records; investigate problems; and protect our systems and users. Information received for a customer workflow is used for that workflow and related support, administration and agreed service delivery.

An inquiry permits us to respond about that inquiry. It does not by itself enroll you in unrelated marketing, activate a paid service or authorize publication of your information. Organization membership and service access do not by themselves authorize disclosure to another customer, an event sponsor or a business partner.

Customer-controlled information

If an employer, church, event organizer, business or government organization uses our services, it generally decides which people and records belong in its workspace and which users may access them. Contact that organization first about its own decisions, notices or records. We assist with requests concerning information we hold for it, subject to its lawful instructions and applicable legal requirements. We remain responsible for information we use for our own business purposes, such as customer billing, security and our direct communications.

Providers and other disclosures

We use Supabase for shared application, database and authentication infrastructure and Google Drive for business documents and implementation records. Approved Nuvei/Paya hosted payment services handle applicable payment-entry and processing steps. AMS provides managed website hosting, and Resend supports secure sign-in email delivery. Other contracted email services may support service-specific communications. Some applications load software libraries from external content-delivery services, including jsDelivr and esm.sh; these services receive the connection information needed to serve those resources. A particular customer's own systems or selected third-party services may receive information when needed for its approved workflow.

Providers receive information relevant to their role. We share customer records with authorized organization users and delivery personnel as needed for the service. We may disclose information when required by law or valid legal process, to protect rights or safety, or to investigate misuse. Public-sector records may be subject to lawful agency disclosure obligations. We do not promise confidentiality where the law requires disclosure.

Public cards, exports and printed materials

Information approved for a public card or public event material can be viewed, downloaded, saved, printed or shared by others. A QR code may lead to that public information. Withdrawing publication can stop future display through our controlled service, but it cannot retrieve copies already saved, exported or printed by others. An event roster or badge request does not by itself authorize unrelated sponsor marketing or a public attendee directory.

Website technologies and communications

Our applications use browser storage to support sign-in, sessions, workspace selection and service operation. The conference demonstration also stores demonstration activity in your browser. Requests to our systems or external service resources involve connection information such as an IP address and browser request details. Application activity records include the service actions and communications needed for the workflow. The information involved depends on the service and its configuration. You can clear browser storage through your browser settings; doing so may sign you out or reset remembered settings. Third-party services you choose to open have their own technology and privacy practices.

Service messages may include secure sign-in links, support replies, scheduling information and invoice or payment updates. Keep your contact information current. If you receive an optional promotional message, use its unsubscribe method or contact us. Stopping promotional messages does not necessarily stop messages necessary to an active service.

Service providers and locations

Information may be processed in the locations used by our contracted providers and the systems agreed for a customer service. This policy does not promise a particular storage country. A contractual location restriction must be agreed and verified for the affected service before data is transferred.

Retention and security

Retention depends on the record's purpose, the applicable customer agreement and legal, accounting, security, audit and dispute requirements. We do not promise one retention period for every record or immediate deletion from every backup. Closing an account does not necessarily remove invoices, required audit evidence, legal-hold records or copies controlled by a customer or third party. Contact us about a particular record or service, and we will explain the applicable handling.

Our system uses organization access controls and service permissions. No online service is completely secure. Report a suspected disclosure or access problem promptly using the contact below. Do not include passwords or access codes in the report.

Your questions and requests

Email support@workmadeplain.com with “Privacy request” in the subject. This GridzHelp LLC contact serves both Work Made Plain and Public Made Plain. Identify the service, organization and request without sending unnecessary sensitive information. You may ask about access, correction, deletion, publication removal or other rights that apply to your information.

We may verify your identity and authority, route a customer-controlled request to the appropriate organization and retain information that must be preserved. Available rights and response requirements depend on the applicable law and our role. We will explain the handling of your request rather than promise a right or outcome that does not apply.

Sensitive information and younger users

Our public business inquiry and account-management services are intended for adults acting for themselves or their organizations. Customer workflows may include information about younger people or sensitive care matters. Those workflows require appropriate customer authorization and service-specific handling. Do not submit regulated or highly sensitive data outside an expressly agreed service and approved intake method.

Changes

We identify this policy by version and effective date and retain prior versions. Changes will be posted with a new effective date. We will provide additional notice or obtain permission when required for a material change. A website update does not by itself amend a signed customer agreement or authorize a new use that requires additional approval.