GRAYPOINT / PRIVACY
Privacy notice.
This notice covers the graypoint website and initial inquiries. It does not replace the data-handling terms agreed for an assessment.
WEBSITE PRIVACY
Information you provide.
When you contact us, we receive your name, email address, selected inquiry topic, and the message you submit. We use this information to respond, discuss an engagement, and keep track of the conversation. Please do not include credentials or confidential assessment evidence.
Submitting an inquiry does not subscribe you to a mailing list. This site does not use advertising trackers or analytics cookies.
Processing and retention.
The website and contact service use Amazon Web Services. Form records are stored in the United States, encrypted at rest, and accessible through restricted AWS permissions. A copy is sent to our inquiry mailbox so we can respond.
Form records are scheduled to expire after 30 days. Automatic removal may occur after that date. Email correspondence is separate and may be retained for the ongoing conversation, an engagement, or applicable recordkeeping requirements. Contact us if you would like us to review or delete your inquiry information.
The contact service uses a temporary hashed network address to limit repeated submissions. Rate-limit records are scheduled to expire after two days. Infrastructure providers process network and request information to deliver and protect the service. Application error logs do not include the content of your inquiry and are retained for 14 days.
Questions and requests.
Email hello@graypoint.io to ask about this notice, correct your information, or request deletion. We may need to verify the request and explain any information that must be retained.
Assessment evidence, access permissions, and deliverable retention are covered by your engagement agreement. Read about the assessment access process.
Last updated: September 27, 2026.