Back to home

Privacy policy

Last updated: October 24, 2026

This Privacy Policy applies from the date we notify you of it in the app or by email.

This version is for customers of Grace Technology.

Grace Technology sells GateKipas in these countries: Cameroon, Gabon, Congo - Brazzaville, Chad, Central African Republic, and Equatorial Guinea. LawTekno LLC sells it in every other country.

Read the LawTekno LLC version

1. Who we are and our role

Grace Technology provides GateKipas. This policy explains what personal information GateKipas processes, why, with whom it is shared and the choices available. Business-managed data. When a business uses GateKipas to manage visitors, employees, residents, students and guardians, congregants, event attendees or contacts, that business is the controller of that data and we process it on its instructions to provide the Service. People whose data a business manages should contact that business first. A Data Processing Addendum is available to business customers on request at privacy@gatekipas.com. Our own data. For account, website and support data, Grace Technology is the controller.

2. Account, website and support data

We collect the details of business accounts and their users, such as name, email, phone, business name, location, role, language and settings. Customers of Grace Technology pay in FCFA, offline: our team records each payment on the account (amount, date, period covered and reference) and issues a receipt. No card details are collected. We collect support messages and anything you choose to send us. On our website we record, for our own first-party analytics and security, a browser identifier, pages and actions, referral and campaign information, device and browser data, approximate network information and times. If you accept optional marketing cookies, the Meta Pixel may receive eligible public-page visits and a confirmed new-business registration event; we do not put names, email addresses, phone numbers or business identifiers in Pixel events. Some forms use a bot check. If you choose to sign in with Google, Google tells us your name and email address.

3. Data businesses manage in GateKipas

Depending on the features a business uses, it may enter or collect through GateKipas: - visitors: name, contact details, host, purpose, check-in and check-out times, custom-field answers, signatures and agreements; - employees: name, contact and department details, schedules, time entries, attendance, leave, pay settings and payroll figures; - estates: residents and households, guest passes, gate logs, banned-list entries and photos the estate adds, for example of a recurring pass holder; - churches: congregation, family and child records, attendance and related notes and photos; - schools: students, classes, guardians, authorised pickup people, release and pickup records, notes and photos; - events: attendees, registrations and check-ins; - CRM: contacts, their consent records and return signals, such as when a known contact visits again; - phone alerts: for residents who turn on push alerts, the push address their browser gives, with its security keys, and a short device label such as "Android · Chrome"; - support access: the record of a support session a business grants to our team, which lets our team view that business's account for a limited time. The business decides what to collect and is responsible for giving its people the notices and obtaining the consents its law requires.

4. No biometric identifiers

GateKipas does not collect or store fingerprints, face geometry or any other biometric identifier. With device sign-in, the fingerprint or face check happens on the person's own device; GateKipas stores only the credential identifier, the public key, technical details of the device and the consent record. Photos in GateKipas are not used for face recognition.

5. How we use information

We use information to provide, secure and support the Service; to run check-in, time and attendance, payroll figures, notifications, reports, billing and account administration; to run the AI features a business uses; to measure use of our website with our own first-party analytics; with consent, to measure our advertising through the Meta Pixel; to prevent misuse; and to comply with the law. We do not use business-managed data to advertise GateKipas, and we do not sell personal information or customer contact lists.

6. Messages

We send service emails to account users, and GateKipas marketing emails with a way to opt out. The Service also sends the emails a business's features call for, such as host notifications, invitations and receipts. Business messaging by SMS, WhatsApp and phone alerts is available when the business enables it; the business chooses its recipients and content and must hold the consents its law and the channel require. Opt-outs are recorded and honoured.

7. Service providers and sharing

We share information with service providers that help us run the Service, only for that purpose: - Supabase: database, authentication and file storage; - Vercel: application hosting; - Resend: email; - Twilio: SMS; - Meta: WhatsApp messages when a business enables them, and the Meta Pixel with marketing consent; - Anthropic: the AI model behind the AI features. When a feature runs we send only what it needs, such as names, times, visit purposes, host and location names and counts, and for the contact form the name, email address and message submitted. Visitor email addresses and phone numbers are not sent, and we do not keep a copy of the text sent; - Google: sign-in with Google, when a user chooses it; - Cloudflare: the bot check on some forms; - Sentry: error monitoring, with personal details removed before errors are sent; - the push services of browser makers (for example Apple, Google, Mozilla and Microsoft): delivery of phone alerts. Payments to Grace Technology are made offline and recorded by our team; no card processor receives payment details. We may also disclose information to the business customer and its authorised users, to professional advisers, to a successor in a merger or acquisition, or to authorities where the law requires or allows it.

8. Security and breaches

We use reasonable administrative, technical and organisational measures to protect information, including access controls, separation of each business's data, encryption in transit and monitoring. No system is completely secure. If we confirm a breach affecting a business's data, we notify the affected business without undue delay, and the authorities where the law requires.

9. Retention

We keep information only as long as needed for the purposes in this policy. Defaults: - trial accounts: if the business does not subscribe, we may delete the account and its data 30 days after the trial ends; - after termination: an administrator may ask for an export within 30 days; after that we may delete the account data; - visitor records: kept according to the business's retention settings; after the period, personal details are removed or the record is deleted, as those settings and our systems provide; - logs and backups: removed on their normal cycles. Records may be kept longer where the law, a dispute or a legal hold requires.

10. Cookies and similar technologies

We use essential cookies and browser storage for sign-in, security and operation of the Service, and a first-party browser identifier for our website analytics. The optional Meta Pixel loads only on eligible public and sign-up pages and only after you accept marketing cookies; we store that choice in your browser. You can change it with the Marketing cookies link in the website footer. Global Privacy Control and Do Not Track signals turn the Meta Pixel off. Browser settings can block cookies, which may affect the Service.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your information, or to object to or restrict certain uses. For data a business manages, contact that business first; we help it respond. For account, website and support data, contact privacy@gatekipas.com. We may need to verify your identity, and we may keep information where the law requires or allows.

12. Children and students

Our website is not directed to children under 13. Schools, churches and other customers may manage children's records in GateKipas; they are responsible for the notices and consents their law requires before entering children's information. We do not use children's or students' information for advertising. If you believe a child's information was entered improperly, contact the business concerned and privacy@gatekipas.com.

13. International transfers

Grace Technology operates from Cameroon. Information is hosted by our service providers outside Cameroon, in the United States or the European Union. These transfers rely on the safeguards the applicable law requires. The business confirms that it has given its people the notice its law requires for such hosting.

14. Cameroon

We process personal information in accordance with Cameroon's law on the protection of personal data and the other laws that apply. To exercise your rights or ask a question, contact privacy@gatekipas.com.

15. Changes to this policy

We may update this policy. We will post the new version with its date and, for material changes, notify businesses by email or in the app, and obtain consent where the law requires it.

16. Contact

Privacy questions and requests: privacy@gatekipas.com. General support: support@gatekipas.com. Grace Technology provides the Service.