Pryvory Logo SenderRay Global Trust & Legal Center ● 12-Country Statutory Compliance Active
● 100% Globally Compliant (v5.0) Chrome Web Store Limited Use Certified Sec-GPC & DNT Honored

Global Privacy, Cookie Policy, Terms of Service & Statutory Compliance

Operated by GR Investments LLC (a Delaware Limited Liability Company). Engineered from day one with 100% On-Device RAM Inspection, Zero Email-Body Storage, and Zero Ad-Tracking Cookies to exceed the strictest privacy laws across 12 international jurisdictions.

📥 Export or Delete My Pryvory Settings 🧹 Open Easy Gmail Cleaner

🌍 1. Global Data Protection & Anti-Spam Compliance Matrix

How Pryvory satisfies statutory requirements across North America, Europe, Latin America, Asia-Pacific, and Africa.

Jurisdiction / Region Governing Protection & Anti-Spam Acts Lawful Basis & Architectural Safeguard Statutory User Rights Supported Status
🇺🇸 United States
Federal + 19 States		 CCPA / CPRA (CA), VCDPA (VA), CPA (CO), CTDPA (CT), TDPSA (TX), CAN-SPAM, 47 U.S.C. § 230(c)(2) Zero Sale/Sharing of PII; honors Sec-GPC: 1 header; Good-Samaritan filtering safe harbor Cal. Civ. Code § 1798.105 1-Click Deletion, Opt-Out, Non-Discrimination ● 100% COMPLIANT
🇪🇺 European Union (EEA) & 🇬🇧 UK EU GDPR (Reg. 2016/679), UK GDPR & DPA 2018, ePrivacy Directive / PECR, EU AI Act Art. 50 Art. 6(1)(a) Consent + GDPR Recital 49 Cybersecurity Legitimate Interest; EU/UK SCCs (Module 2) Arts. 15–22 Access, Rectification, Art. 17 Right to Erasure, Art. 20 JSON Portability ● 100% COMPLIANT
🇨🇦 Canada & Quebec PIPEDA, Quebec Law 25 (Bill 64), CASL (Anti-Spam) Express opt-in consent gate; Privacy-by-Default local storage PIPEDA Principle 4.9 Access & Law 25 Right to De-indexation / Cessation ● 100% COMPLIANT
🇧🇷 Brazil LGPD (Law No. 13.709/2018, Arts. 7, 18, 33) Data minimization; cryptographic SR-TG-HMAC anonymization LGPD Art. 18(IV) & (VI) Blocking, Anonymization & Elimination ● 100% COMPLIANT
🇮🇳 India DPDP Act 2023 (§§ 6, 11, 12, 13) & CERT-In Itemized consent notice; Designated Grievance Officer (dpo@pryvory.com, 7-day SLA) DPDP § 12 Correction & Erasure; § 6(4) Instant Consent Withdrawal ● 100% COMPLIANT
🇦🇺 Australia & 🇳🇿 New Zealand Australia Privacy Act 1988 (APPs 1–13), Spam Act 2003, NZ Privacy Act 2020 Transparent cross-border safeguard (APP 8); functional unsubscribe enforcement APP 12/13 & NZ IPP 6/7 Access, Correction & Erasure ● 100% COMPLIANT
🇸🇬 Singapore, 🇯🇵 Japan & 🇰🇷 South Korea Singapore PDPA (§ 26), Japan APPI (Art. 35), South Korea PIPA (Art. 36) Strict purpose limitation; zero secondary marketing or broker sharing Immediate Cessation of Use & Destruction of Personal Data ● 100% COMPLIANT
🇨🇭 Switzerland & 🇿🇦 South Africa Swiss FADP (nFADP Art. 32), South Africa POPIA (§ 24) Privacy-by-Design & Privacy-by-Default (nFADP Art. 7) Right to Deletion, Destruction & Objection to Processing ● 100% COMPLIANT
🔒 Part 1 — Global Privacy Policy

Privacy-by-Design, Chrome Web Store "Limited Use" & GDPR Disclosures

1. 100% On-Device RAM Inspection (Chrome Extension): All inspection of Gmail message headers (Received-SPF, Authentication-Results, Date, Reply-To), visible sender names, links, QR codes, and email bodies inside the Chrome Extension occurs 100% locally in your browser's volatile memory (RAM). GR Investments LLC never transmits or stores your private email bodies on external servers.
2. Least-Privilege Gmail Sync & Zero Data Selling: When you connect a Gmail mailbox on the Web Dashboard, Pryvory inspects header metadata (gmail.metadata & gmail.settings.basic) and creates native Gmail filter rules. We never sell, rent, or share user data with data brokers or market-research firms (unlike legacy tools owned by consumer panel trackers), and we never train AI models on your emails.
3. Lawful Basis for ThreatGraph™ Spammer Database (GDPR Recital 49): Our ThreatGraph™ database processes network security indicators (phishing domains, Spamhaus DROP botnet IPv4 CIDRs, disposable burner domains, and verified scam call-center numbers) under GDPR Art. 6(1)(f) and Recital 49 (Network & Information Security Legitimate Interest) and 47 U.S.C. § 230(c)(2). All indicators are salted and hashed using SR-TG-HMAC.
4. Cross-Border Transfers (EU/UK SCCs) & EU AI Act Art. 50 Transparency: Cloud sync operations via Cloudflare D1 are protected by the EU Standard Contractual Clauses (Commission Decision 2021/914, Module 2) and the UK IDTA. Pursuant to EU AI Act Art. 50, all Pryvory Risk Scores (0–100) and Cryptographic Auth Grades (A+ to F) are explainable, deterministic heuristic outputs with full user override.
5. Data Protection & Grievance Officer (India DPDP Act § 13 & GDPR Art. 37): Contact our Data Protection & Grievance Officer at dpo@pryvory.com. All inquiries and statutory requests receive a response within 24 hours (and full resolution within 7 business days).
⚖️ Part 3 — Terms of Service & Limitation of Liability

GR Investments LLC (Delaware) Terms of Service & International Consumer Protections

1. Advisory Decision-Support Utility ("No Guarantee"): Pryvory is an automated heuristic and informational decision-support tool. No cybersecurity tool can detect 100% of scams, wire fraud, or phishing attacks. A score of "Low Risk" or "Auth Grade A+" does not guarantee a sender's legitimacy. Always verify wire/ACH changes and financial requests verbally via a trusted out-of-band phone number and your Family SafeWord.
2. Good-Samaritan Filtering Immunity (47 U.S.C. § 230(c)(2) & EU DSA Art. 6): Threat scores represent automated technical risk assessments. Domain owners may request a free 24-hour false-positive review at pryvory.com/dispute.
3. Disclaimer of Warranties ("AS-IS") & $25 Liability Cap: Provided "AS-IS" without warranties. To the maximum extent permitted by law, GR Investments LLC's total cumulative liability shall not exceed the greater of the amount you paid in the preceding 12 months or $25.00 USD.
4. Governing Law, Delaware AAA Arbitration & International Consumer Forum Carve-Out: Governed by the laws of the State of Delaware with binding individual AAA arbitration and class-action waiver. International Consumer Carve-Out: If you are a consumer residing in the EEA, UK, Switzerland, Canada/Quebec, Brazil, Australia, or India where mandatory statutory consumer laws (e.g., EU Directive 93/13/EEC, UK Consumer Rights Act 2015, GDPR Art. 79) prohibit pre-dispute foreign arbitration, you retain all mandatory local statutory rights and forum protections in your country of residence.
📥 Part 4 — Instant Self-Serve DSAR & Right-to-Be-Forgotten Center

Exercise Your GDPR Art. 15/17/20, CCPA, LGPD & India DPDP Rights in 1 Click

Download a complete machine-readable JSON archive of your local and synced Pryvory data (Right to Portability), or permanently purge all local storage and cloud vault records (Right to Erasure).