Privacy Policy for gre.to
At gre.to (accessible via https://gre.to), we process personal data to provide digital name cards, browser calling, messaging, and related services. This policy explains what we collect, why, and how you can control it.
Questions: support@gre.to.
Information We Collect
- Account data — email, password hash (if you use password login), display name, username, profile bio, optional contact email/phone/photo.
- Sign-in with Google, Facebook, or X — provider account id, name, email, and profile picture when those providers supply them.
- Communications metadata — inbox messages, voicemail audio you receive, and recent call events (who called, mode, outcome, time). Live call/chat media is peer-to-peer (WebRTC) when possible and is not stored as call recordings by us.
- Technical data — IP address (abuse prevention / signup limits), session cookies, Web Push / FCM device tokens if you enable alerts, and basic server logs.
- Analytics — Google Analytics 4 on public (logged-out) pages only, and only after you accept the cookie banner.
- Translation — optional GTranslate / Google Translate widget, loaded only after you accept the same cookie banner; that third party may process page content for translation.
How We Use Your Information
- Create and operate your account and public name card
- Authenticate you (password, Google, or Facebook)
- Deliver calls, live chat signaling, inbox messages, voicemail, and “recent calls” history
- Send optional push notifications for calls and messages
- Prevent abuse, spam, and fraud
- Understand aggregate product usage (analytics)
- Send transactional email such as password reset when mail is configured
Sharing Your Information
We do not sell your personal information. We use processors that help run the service (hosting, CDN, email delivery if configured, Google Analytics, Google/Facebook login, push providers, and optional translation). Peers you call or message may see the identity you present (name, @username, or guest name).
Data Retention and Deletion
We keep account data while your account is active and as needed for security and legal obligations. Inbox messages, voicemail audio, and recent-call events are retained for about 90 days, then deleted automatically. You can delete your account anytime under Profile & Settings — this removes your profile, messages, voicemail, call history, and login for that account. You can also delete some data without deleting your account (inbox, voicemails, call history, and/or profile card fields) under Profile & Settings → Delete some data (keep account).
Facebook users can also remove the app under Facebook Settings → Apps and Websites, or use Facebook’s data deletion request.
Step-by-step instructions and email request:
Request account & data deletion
(https://gre.to/data-deletion).
Cookies and Similar Technologies
We use essential cookies for login/session and CSRF protection. If you use push alerts, your browser stores a push subscription.
Optional Analytics and translation scripts load only after you accept the cookie banner; we store that choice in a cookie (gr.cookieConsent) so it applies across gre.to. Those third parties may set their own cookies when loaded.
Your Rights (EEA/UK)
Depending on applicable law, you may request access, correction, deletion, or restriction of processing, and you may lodge a complaint with your local supervisory authority (in Estonia: Andmekaitse Inspektsioon). Contact us at support@gre.to.
Changes
We may update this policy by posting a new version on this page with a revised “Last updated” date.
Contact
- Website: https://gre.to
- Email: support@gre.to
Delete account
To delete your account and associated data, or to delete some data while keeping your account: https://gre.to/data-deletion