Privacy policy

Last updated 11 Nov 2026

This policy covers gravexlabs.dev. GravexLabs ("we") is based in Accra, Ghana, and handles personal data in line with Ghana's Data Protection Act, 2012 (Act 843).

What we collect

When you send the brief form

  • Your name
  • Your email address
  • Your phone number, if you give one
  • What you need (the option you pick)
  • Whatever you write in the brief

When you visit a page

  • The page you opened
  • The site that referred you, if there was one
  • Your screen width
  • A random ID that your browser keeps for the current tab only

We do not store your IP address with these visit records, and the ID is deleted when you close the tab. It cannot identify you or follow you across visits.

When you comment on or upvote a writeup

  • The comment you write and the name you give, if any. Both are public.
  • A random ID kept in your browser, so an upvote counts once and you can take it back

You do not need an account, and we do not ask for your email address to comment.

Through Google's tag

The site loads Google's tag so we can measure visits and see whether our ads lead to enquiries. Google receives technical data such as your IP address, browser and device details, and may set cookies. Google handles that data under its own privacy policy. See the cookie policy for details and how to opt out.

Through our hosting provider

Our hosting provider, Vercel, keeps standard server logs, which include IP addresses, to run and protect the site.

Why we use it

Data Purpose
Brief form details To reply to you, scope your project and send you a proposal
Visit records To see which pages are read and where visitors come from
Comments and upvotes To show the discussion and the vote count on each writeup
Google tag data To measure visits and ad performance
Server logs To keep the site running and secure

We do not sell personal data, and we do not send marketing email to people who have only sent an enquiry.

Where it goes

  • Enquiries are stored in our database, which is hosted by Supabase, and emailed to our inbox. The email is sent through Resend and received in Gmail (Google).
  • Visit records, comments and upvotes are stored in the same database.
  • Google receives the data its tag collects.

These providers may store data outside Ghana.

How long we keep it

  • Enquiries: up to 24 months after our last contact with you, or for the length of the project and any legal retention period if you become a client.
  • Visit records: up to 24 months.
  • Comments and upvotes: until the writeup is removed or you ask us to delete them. We may hide or delete comments that are spam or abusive.
  • Server logs: as set by our hosting provider.

Your rights

You can ask us to:

  • Tell you what data we hold about you and give you a copy
  • Correct it
  • Delete it
  • Stop using it

Email hello@gravexlabs.dev and we will respond within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Commission of Ghana.

Client data from security tests

During a penetration test we may see personal data held in your systems. We access only what the test needs, we do not copy it out beyond the evidence required for the report, and we delete that evidence once the engagement and any retest are finished, unless you ask us to keep it. This is covered in more detail in each engagement's authorisation.

Children

This site is for businesses. We do not knowingly collect data from anyone under 18.

Changes

We will update this page if what we collect changes. The date at the top shows the latest version.

Contact

hello@gravexlabs.dev · +233 54 548 2961 · Accra, Ghana