Privacy Policy
Last updated: 8 July 2026
Who we are
Gravient Systems Ltd is incorporated in Auckland, New Zealand. We build software for companies becoming AI-native. This policy explains what personal information we handle when you visit gravient.ai, greatvibe.ai where it serves Gravient marketing content, or contact us.
What we collect
If you contact us, we may collect your name, email address, company, role, and message content. The website may also create server logs containing IP address, browser type, device information, request paths, referring pages, and timestamps. We use these logs for security, debugging, and operating the site.
What we do not collect
The Gravient marketing site does not provide the greatVibe application, does not run AI work, and does not collect product workspace content, model API keys, files, code, or AI session payloads.
Cookies and tracking
The current marketing site does not use advertising cookies, analytics cookies, or third-party tracking cookies. It does not need a cookie consent banner while it uses only essential delivery technologies. If we later add analytics, forms, or non-essential cookies, we will update this policy before relying on them.
How we use information
We use information to respond to enquiries, operate and improve the website, understand interest in Gravient and greatVibe, maintain security, prevent abuse, comply with legal obligations, and keep business records connected with enquiries and communications.
Third parties and infrastructure
The public site may use infrastructure providers such as Cloudflare for DNS, CDN, and edge security, Amazon Web Services for hosting, and Google Fonts for font delivery. These providers may process connection metadata needed to deliver the site. If you email us, your email provider and ours process the message.
How we share information
We do not sell personal information. We may share information with service providers who help operate hosting, security, email, analytics if added, and support. We may also share information if required by law, to protect our rights, or to protect users and services.
Overseas processing
We operate from New Zealand and Australia. Service providers may process personal information in other countries where they or their subprocessors operate. We take reasonable steps to use providers with privacy and security commitments appropriate for the information they handle. Where transfers from the European Economic Area, the United Kingdom, or Switzerland occur, we rely on adequacy decisions, the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism.
Your rights
Depending on where you live, you may have rights to access, correct, delete, object to, restrict, or receive a copy of personal information we hold about you. New Zealand users have rights under the Privacy Act 2020, including access and correction rights. Australian users have rights under the Privacy Act 1988 (Cth) and may complain to the Office of the Australian Information Commissioner if a privacy issue is not resolved with us first. EEA users may have rights under the GDPR, including access, erasure, portability, objection, restriction, and complaint rights. We do not make decisions about you based solely on automated processing. To exercise rights, email privacy@gravient.ai.
Data breach notification
If we become aware of a privacy breach that is reasonably likely to cause serious harm, we will notify affected individuals and relevant regulators where required by law, including the Office of the Privacy Commissioner in New Zealand or the Office of the Australian Information Commissioner in Australia where applicable.
Children
The website is intended for people aged 16 or older. We do not knowingly collect personal information from anyone under 16. If you believe we have, contact us and we will delete it where required.
Retention
We keep information only for as long as reasonably needed for the purposes described above, unless a longer period is required for law, security, dispute resolution, or legitimate business records.
Security
We use reasonable technical and organisational measures to protect information. No internet service is completely secure, so we cannot guarantee absolute security.
Lawful basis
For people in the European Economic Area, our lawful bases are legitimate interests for operating, securing, improving, and promoting the site; taking steps at your request before a contract where you contact us about products or services; and legal obligation where records must be kept or disclosures are required by law. We do not currently rely on consent for marketing-site personal information.
EU representative
Gravient Systems Ltd is based in New Zealand and does not have an establishment in the European Union. We have not appointed an EU representative at this stage. If our processing changes in a way that requires a representative under GDPR Article 27, we will appoint one and update this policy.
Changes to this policy
We may update this policy from time to time. The updated version will be posted on this page with a new last updated date.
Contact
Privacy Officer: David Jenkinson. Privacy questions can be sent to privacy@gravient.ai or hello@gravient.ai. Gravient Systems Ltd is based in Auckland, New Zealand.