Privacy Policy
Your privacy is important to us. Learn how we collect, use, and protect your information.
Quick Navigation
Scope of this Policy
This policy applies to Gracelist domain, i.e., http://www.gracelist.co (the "Site" or "Platform"), which is operated and owned by Piana IT Solutions Private Limited. This policy shall also apply to the mobile version of the Site and mobile applications.
Overview
Piana IT Solutions Private Limited (hereinafter referred to as Company or Piana) is committed to protecting the privacy of its users, and strives to provide a safe, secure user experience. This Privacy Statement sets forth the online data collection and usage policies and practices that apply to this Platform.
By using this Platform or application, you agree to the collection, use and transfer of your data as described in this Privacy Policy.
You may revoke your consent to this policy. To revoke your consent, please contact us at info@gracelist.co
Cross-Domain Application Usage
The GracelistApp is a unified service owned and operated by Piana IT Solutions Private Limited. To provide a seamless experience, this application is authorized to operate and process data across our affiliated domains, including:
When you use GracelistApp on any of these domains to post to your Facebook Page, your data is handled according to this central Privacy Policy.
Information We Collect and Retain
We collect information about you when you use our sites and applications. We receive and store this information when you enter it on our Platform or application, send it to us, or provide it to us in any other way.
We collect information when you choose to give it to us:
- Your contact information such as name, email address, phone number and postal address
- Event registrations and other form submissions
- Purchases made on site
- Information imported by you from third party applications
- Your race, ethnicity, or gender, if you choose to provide it
- Information about your business, such as company name, size, and business type
Information Automatically Collected
We gather certain information automatically when you visit our site. This information includes:
Activity Data
Your activity on Gracelist, including events, programs, and projects you list, search, or view
Technical Data
Your IP address, ISP, browser type, device ID, and operating system
How Information is Used
Service Provision
Providing our services and responding to queries
User Experience
Operating and improving the platform, fostering positive user experience
Security
Detecting and preventing fraud, enforcing terms of service
Security & Data Protection
SSL Encryption
When you purchase products from Gracelist, your personal details and credit card information are encrypted using Secure Socket Layer (SSL) technology before transmission.
Database Security
The Gracelist database is located in India with technical and organizational measures designed to secure your personal information from unauthorized access.
Interaction with Third-Party Platforms
When you choose to connect a third-party publishing channel, we may use the Meta Graph API to help you publish content from your account to a Page you manage.
Permissions Requested
When you authorize a supported third-party publishing connection, we may request permissions such as:
pages_manage_postsPublish content to your Pages
pages_read_engagementRead engagement data from your Pages
pages_show_listView list of Pages you manage
These permissions allow us to view a list of Pages you manage and publish content only to the Page or Pages you specifically select.
Data We Collect
We may receive and store platform data from the connected provider, including:
- Page ID
- Page Access Tokens
- Page name
We do not collect or store your social login password or other direct login credentials.
Purpose of Processing
We process this data solely to facilitate the automated or manual posting of your content to the Page you choose, based on your direction.
User Control & Consent
We will only post content to a connected Page with your express consent for that connection. You can manage or revoke these permissions at any time through the business integration settings provided by the third-party platform you used to connect.
Integration with GracelistApp
Our website integrates with GracelistApp (a service by gracelist.co) to allow you to post articles directly to your Facebook Page and to obtain analytics of these article posts initiated by you. By using this feature, you authorize the app to access necessary Facebook permissions as detailed in this Privacy Policy.
Data Access & Privacy
- GracelistApp only accesses data necessary for publishing and analytics of user-initiated posts.
- No personal user data is sold or shared with third parties.
- Data is used strictly for content publishing and performance tracking.
- Users maintain full control over which Pages are connected and which posts are published.
- Engagement data is limited to posts created via the app.
Analytics & Insights
GracelistApp uses read_insights to retrieve aggregated performance metrics such as post reach and impressions for posts published via the app.
These insights are mapped to the corresponding blog content and displayed to the user within a consolidated analytics dashboard. This helps users understand the performance of their content across platforms.
The app only accesses insights for posts created via GracelistApp and does not use this data for advertising, profiling, or sharing with third parties.
Platform Data Management
All Facebook "Platform Data" collected during this process is managed by gracelist.co in accordance with our established data protection standards. This includes Page Access Tokens, Page IDs, and related connection information.
Data Deletion and Revocation of Permissions
GracelistApp respects your privacy and provides multiple ways to manage or delete the "Platform Data" (data obtained from Facebook) associated with your account.
1. Manual Data Deletion Request
You may request the deletion of all Facebook Platform Data stored by GracelistApp at any time. To do so:
- Email Us:Send an email to info@gracelist.co with the subject line "Facebook Data Deletion Request."
- Details Required:Please include your registered email address and the name of the Facebook Page(s) you wish to disconnect.
- Timeline:We will process your request and delete all associated Page Access Tokens and Page IDs from our database within 30 business days, providing you with a confirmation once complete.
2. Facebook Data Deletion Instructions (App Settings)
In accordance with Meta's policies, you can trigger a formal data deletion request directly through Facebook:
- Go to your Facebook Account's Settings & Privacy → Settings.
- In the left panel, scroll down to the Your Activity section and click on Business Integrations (this may also appear under Security and Login depending on your account type).
- Find GracelistApp and click the Remove button.
- Once removed, click on View Removed Apps and Websites, then select GracelistApp and click Send Request to delete your authorized data.
We will receive an automated notification and purge your data according to Meta's standard protocol.
3. Revocation of Access
If you wish to stop the app from posting without deleting historical data, you can simply click "Disconnect" in the Social Accounts section of your dashboard on any of our authorized domains (helpitrain.com, gracelist.co, yesitrains.com, or returntogreen.in). This will immediately invalidate the active Page Access Token.
Compliance & Document Management Data Processing
For organizations using our platform for document management, compliance tracking, and CSR project collaboration, additional data processing terms apply. These cover the handling of organizational documents, financial records, certificates, and sensitive compliance data.
Data Processor Relationship
We operate as a Data Processor under the Digital Personal Data Protection Act, 2023. Your organization acts as the Data Controller and Data Owner of all uploaded documents and information.
Document Authenticity Disclaimer
We do not verify the authenticity, accuracy, or completeness of uploaded documents. Responsibility for document authenticity rests solely with the uploading Data Controller.
For complete details on data handling, security practices, user rights, DPDP Act compliance, and liability terms:
View Full Compliance PolicyHave Questions About Our Privacy Policy?
We're here to help. Get in touch with us using any of the methods below.
© 2026 Piana IT Solutions Private Limited. All rights reserved.
Registered Office: A-2 East of Kailash, New Delhi - 110065
This privacy policy was last updated on the date of implementation.
We may update this policy from time to time, and we'll notify you of any material changes.