Legal
POC baseline — not full legal compliance.
Privacy Policy
Grati is a recognition platform for frontline service workers. This policy describes what we collect and why during the POC.
What we collect
- Profile information you provide: first name, role/title, short bio, and an optional photo.
- Recognitions submitted by customers: chosen praise tags, optional short message, optional recommendation, and any customer-provided display name added to that message.
- Tip destinations you configure: provider (e.g. PayPal) and a public handle/username — never payment card data.
- Authentication identifiers from Microsoft Entra External ID (a stable subject id and display name).
Why we collect it
- To operate the public profile, recognition feed, and share/QR flows.
- To show approved recognition messages, including any customer-provided display name attached to the message, on public and private recognition surfaces.
- To review submitted recognition content manually and through automated or AI-assisted safety checks before or after it appears publicly.
- To display tip destinations as outbound links so customers can tip you directly.
Third parties
- Microsoft Entra External ID — handles sign-in and identity.
- Microsoft Azure — hosts the application and stores data.
- PayPal — receives the customer when they choose to tip. Grati sends no data to PayPal; the customer follows an outbound link with the worker's public handle.
What we do not do
- No analytics, marketing, or advertising trackers.
- No selling or sharing of your data.
- No collection of payment card data — tips go directly through PayPal.
This is a proof-of-concept. Data may be reset or migrated as we iterate. If consent or data-handling changes, this section will be updated before the change ships.
Terms of Service
By using Grati you agree to the following.
- Grati is positive-only. Do not submit content that is negative, harassing, harmful, deceptive, or that targets a person or business in a damaging way.
- Submitted recognitions, including optional messages and customer-provided display names, may be displayed publicly on the worker's profile if approved.
- Submitted recognitions may be reviewed by Grati, by the worker receiving the recognition, and by automated or AI-assisted safety checks.
- Tips are handled entirely by PayPal. Grati does not process, store, or have access to payment card data.
- You are responsible for the content you submit and for ensuring you have permission to share it.
- Grati may remove content that violates these terms or is otherwise inappropriate.
- Grati is provided "as is" during the POC, with no guarantees of uptime, retention, or fitness for any particular purpose.
- These terms may change. Continued use after a change means you accept the updated terms.