How we look after your data
This page is maintained by Grange Labs to answer common security and privacy questions about grangelabs.com and the work we do for clients. It describes the controls we currently run — it is not a third-party audit or certification.
Who runs this site
grangelabs.com is operated by Grange Labs. For any security or privacy question, email business@grangelabs.com.
Authentication & access
Access to the admin area of the site (post drafting, lead inbox) is restricted to named Grange Labs accounts. Sign-in is brokered through our backend provider with email and password; role-based access controls gate every admin action server-side, and database row-level security is enabled on every user-data table.
Hosting & platform
The website is built with TanStack Start on Lovable Cloud. Application logic runs in a serverless edge runtime; the database, authentication and file storage are provided by a managed Postgres backend. Connections to the database use TLS in transit, and secrets (API keys, service tokens) are stored in the platform secret store — never in the codebase.
What data we collect
We only collect what we need to reply to you or deliver a piece of work:
- Hire & contact forms — name, email, company, role, budget and the brief you send us.
- AI readiness audit — the answers you submit and an email address if you ask for the report.
- Newsletter — your email address and how you subscribed.
We don't sell personal data, and we don't share form submissions with third parties outside the subprocessors needed to deliver the service (hosting, transactional email).
Cookies & analytics
The site uses only the cookies needed for sign-in to work. We do not run advertising trackers.
Retention & deletion
We keep contact and hire-request data for as long as it's useful to the conversation, and remove it on request. To ask for a copy or deletion of your data, email business@grangelabs.com.
Reporting a vulnerability
If you believe you've found a security issue, please email business@grangelabs.com with steps to reproduce. We acknowledge reports within a few working days.
Shared responsibility
Grange Labs is responsible for how this site and our client deliverables are built and operated. Our hosting and backend platform is responsible for the underlying infrastructure. Visitors and clients are responsible for keeping their own account credentials safe and for the content they submit through forms.