Privacy Policy

1. Introduction & Scope

Grayscale Interactive (“Grayscale”, “we”, “us”) builds custom immersive systems — VR training, AR, and interactive 3D — for automotive and industrial teams. This Privacy Policy explains what information we collect, why we collect it, who we share it with, and the choices you have.

Our business is building systems for our clients, not monetizing personal data. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

This policy covers grayscaleinteractive.com, our Spanish-language pages, and our booking pages at book.grayscaleinteractive.com. It does not cover third-party sites we link to.

2. Information We Collect

We collect four kinds of information.

• Information you give us: When you request a consultation or contact us, we collect your name, email address, organization, role, the capability you are interested in, your use cases, any project notes you write, and your preferred language. Providing this is voluntary, but without it we cannot respond to you.
• Booking information: If you schedule a call, our booking page records the meeting type you selected, the time slot, and the contact details you enter for that meeting.
• Technical and usage information: Our servers and analytics record your IP address, an approximate location derived from it (country, region, and in some cases city), browser and device type, pages viewed, referring page, and how you interact with the site.
• Anti-spam signals: Our contact form includes a hidden field and measures how long the form took to complete, so we can reject automated submissions. These signals are used only to filter spam.

We do not intentionally collect special categories of personal data such as health, biometric, or financial account information, and we ask that you not include them in free-text fields.

3. How We Use Your Information

We use the information above to:

• Respond to your enquiry, prepare a scope, and schedule and hold consultations.
• Send you a confirmation of your enquiry and follow up about your project.
• Understand how the site is used so we can improve its content, structure, and performance.
• Measure which campaigns and pages lead to enquiries, where you have consented to analytics and advertising.
• Detect and prevent spam, abuse, and security incidents.
• Meet our legal, accounting, and record-keeping obligations.

4. Cookies & Similar Technologies

We use a small number of cookies and equivalent browser storage. Strictly necessary storage — such as remembering your language and your cookie choice — is always active, because the site cannot work without it.

Analytics and advertising are off by default. On your first visit every analytics and advertising category is set to denied until you choose. Nothing in those categories loads unless you press Accept.

You can change your decision at any time by clearing this site’s data in your browser, which makes the consent banner appear again on your next visit.

5. Analytics & Advertising

Where you accept analytics, we use the following services. Each loads only after consent.

• Google Analytics: tells us which pages and features are used, and how visitors reach the site. Processed in the United States. IP addresses are anonymised.
• Google Tag Manager and Google Ads: used to measure whether an advertising campaign led to an enquiry. We use Google Consent Mode, so these tags default to denied and are granted only after you accept.
• Enhanced conversions: when you request a booking, your email address is converted into an irreversible code (a SHA-256 hash) in your browser and only that code is sent to Google Ads, so it can tell whether an ad led to your request. Your email address itself is never sent.

If you decline, analytics capture stays switched off and the advertising categories remain denied.

6. Service Providers We Share Data With

We do not sell your personal information. We share it only with the providers that operate parts of this service on our behalf, and only as far as each needs it:

• Google Cloud and Firebase: hosting, file storage, our contact-form backend, and the database where enquiries are stored.
• Resend: delivers the notification email to our team and the confirmation email to you.
• Google: analytics, tag management and advertising measurement, subject to your consent.
• freeipapi.com and ipinfo.io: receive your IP address so we can resolve an approximate location for an enquiry. We send only the IP address, and we receive no other information about you from them.

We may also disclose information where the law requires it, or to establish or defend legal claims.

7. International Data Transfers

Grayscale Interactive is based in Querétaro, Mexico, and several of the providers above process data in the United States. Your information may therefore be transferred outside your country of residence, including outside the European Economic Area and the United Kingdom.

Where such a transfer is subject to the GDPR, we rely on the European Commission’s Standard Contractual Clauses or an equivalent safeguard offered by the provider.

8. Legal Bases for Processing

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following bases:

• Consent: for analytics and advertising, and for optional marketing messages. You may withdraw it at any time.
• Steps prior to a contract: to respond to your enquiry and prepare a proposal at your request.
• Legitimate interests: to secure the site, prevent spam, and understand demand for our services in a way that does not override your rights.
• Legal obligation: where we must retain records for tax or accounting purposes.

9. Your Privacy Rights

Depending on where you live, you have some or all of the following rights:

• Access: ask what personal data we hold about you and receive a copy.
• Rectification: ask us to correct data that is inaccurate or incomplete.
• Erasure: ask us to delete your personal data where we have no overriding reason to keep it.
• Objection and restriction: object to processing based on our legitimate interests, or ask us to limit how we use your data.
• Portability: receive the data you gave us in a structured, machine-readable format.
• Withdraw consent: turn analytics and advertising off at any time, without affecting processing already carried out.

If you are in Mexico, these correspond to your ARCO rights — Acceso, Rectificación, Cancelación y Oposición — under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares.

If you are a California resident, you have the right to know, delete, and correct your personal information, and not to be discriminated against for exercising those rights. We do not sell or share personal information as the CCPA and CPRA define those terms.

To exercise any of these rights, email info@grayscaleinteractive.com. We will verify your request and respond within the period required by the law that applies to you. You may also complain to your local data protection authority.

10. Data Security

We take reasonable and appropriate measures to protect your information:

• Encryption in transit: the site and our form endpoint are served over HTTPS.
• Managed infrastructure: enquiries are stored in Google Cloud and Firebase, with access limited to the people at Grayscale who need it.
• Secret management: API keys and credentials are held in a managed secret store rather than in our source code.
• Abuse prevention: automated submissions are filtered before they reach our systems.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data and poses a risk to you, we will notify you and the relevant authority as the law requires.

11. Data Retention

We keep enquiry and booking information for as long as we need it to respond to you, deliver any project that follows, and meet our legal and accounting obligations. Once it is no longer needed for those purposes, we delete or anonymize it.

Analytics data is retained according to the retention settings of each analytics provider. You can ask us to delete your enquiry at any time using the contact address below.

12. Children’s Privacy

This site is intended for businesses and is not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

13. Changes to This Policy

We may update this policy as our services or the tools we use change. When we do, we will revise the date at the top of this page. If a change materially affects how we use your personal data, we will make that clear on the site.

14. Contact Us

If you have questions about this policy or want to exercise your privacy rights, contact us at info@grayscaleinteractive.com. You can also write to us at Grayscale Interactive, Querétaro, Mexico.