Last Updated: Oct 19, 2026 ·
Grandis IT, Inc. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website grandisit.com, use our IT support and managed services, or otherwise engage with us.
As a Managed Service Provider (MSP), we act as both a Data Controller (for our own business operations) and a Data Processor (managing IT environments on behalf of our clients).
1. Information We Collect
We collect information that identifies, relates to, describes, or could reasonably be linked to you. The type of data we collect depends on your relationship with us.
A. Information You Provide to Us (Data Controller)
When you interact with our website, request a quote, or contact us for support, we may collect:
- Contact Information: Name, email address, phone number, mobile number, company name, and job title.
- Account Information: Billing address and client portal account details. Payment card information is collected and processed by our third-party payment processor; we do not store full payment card numbers on our systems.
- Communications: Records of emails, SMS/text messages, support tickets, chats, and phone calls.
B. Information Collected Through Our Services (Data Processor)
In the course of providing managed IT, cybersecurity, and cloud services to our clients, we deploy software (such as RMM, EDR, and PSA tools) that may collect data from client networks and endpoints. This includes:
- Device and Network Data: IP addresses, MAC addresses, device types, operating systems, software inventory, and hardware performance metrics.
- Security Data: Event logs, threat alerts, firewall logs, and network traffic data used strictly to identify and mitigate cyber threats.
- User Data (Client Employees): Directory account information (such as Microsoft Entra ID or Active Directory usernames), email addresses, and login timestamps necessary for provisioning and supporting user accounts.
2. How We Use Your Information
We use the collected information for the following business purposes:
- Service Delivery: To monitor, manage, and secure client IT infrastructure, software, and networks.
- Customer Support: To troubleshoot issues, respond to helpdesk tickets, and provide technical assistance.
- Business Operations: To process payments, manage billing, and maintain client accounts.
- Communication: To send service updates, security advisories, administrative notices, and SMS support notifications.
- Improvement: To analyze our own business operations and service performance in order to improve our offerings. Where client data is used for this purpose, it is used only in aggregated, de-identified form that does not identify any client or individual.
Note: Data collected from client IT environments (Processor Data) is used only to provide and secure IT services for that specific client, except in the aggregated, de-identified form described above. We do not use client network data for our own marketing purposes.
3. Cookies and Website Analytics
Our website uses cookies and similar technologies to keep the site working, remember your preferences, and understand how visitors use the site. We may use third-party analytics services (such as Google Analytics) that collect information such as your IP address, browser type, pages visited, and time spent on the site.
Information you submit through website forms (such as a contact or quote request form) is used to respond to your inquiry and is handled as described in this policy.
You can control or disable cookies through your browser settings. Disabling cookies may affect how parts of the website function.
4. SMS/Text Messaging Communications
If you elect to provide us with your mobile phone number, you may receive SMS/text messages related to support tickets, account alerts, and service updates. By providing your mobile number, you acknowledge and agree to the following:
- Consent: You are explicitly consenting to receive SMS/text messages from Grandis IT, Inc. Consent to receive text messages is not a condition of purchasing any of our services.
- Message Frequency: Message frequency varies based on your account activity and open support requests.
- Opt-Out: You may opt out of receiving future SMS messages at any time by replying STOP to any message you receive from us.
- Help: For more information or assistance with our text messaging services, reply HELP or contact us using the details in Section 13.
- Rates: Message and data rates may apply depending on your mobile carrier and plan. Carriers are not liable for delayed or undelivered messages.
- No Third-Party Sharing: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
5. How We Share Your Information
We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:
- Third-Party Service Providers: We share data with trusted vendors who assist us in operating our business and providing services (e.g., cloud hosting providers, cybersecurity vendors, payment processors, and helpdesk software). These vendors are contractually obligated to protect your data.
- Legal Compliance: We may disclose information if required by law, subpoena, or other legal processes, or to protect the rights, property, and safety of our company, our clients, or others.
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, user information may be transferred as a business asset.
All of the categories above exclude text messaging originator opt-in data and consent, which is never shared with third parties, as described in Section 4.
6. Data Security
We implement administrative, technical, and physical security measures designed to protect your personal information and our clients' IT environments. These measures include:
- Industry-standard encryption for data in transit and at rest, where supported.
- Multi-Factor Authentication (MFA) and Role-Based Access Control (RBAC) for all personnel accessing client systems.
- Security monitoring and endpoint protection.
While we take reasonable steps to secure your data, no method of transmission over the internet or electronic storage is 100% secure.
7. Security Incident Notification
If we become aware of a security incident affecting personal information we maintain, we will notify affected individuals and clients as required by applicable law, including the New York SHIELD Act, and in accordance with the terms of our Master Services Agreement (MSA). For incidents involving client environments, we will notify the client so that it can meet its own notification obligations.
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Data collected on behalf of clients is retained according to the terms of our Master Services Agreement (MSA) and the client's specific data retention policies.
9. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that we correct inaccurate or incomplete data.
- Deletion: Request the deletion of your personal data (subject to legal and contractual constraints).
- Opt-Out: Unsubscribe from our marketing emails by clicking the "unsubscribe" link, or opt out of SMS messages by replying STOP.
How to submit a request: Email tac@grandisit.com or call 845.288.2248. To protect your information, we will verify your identity before acting on a request. We will respond within 45 days, and will let you know if we need additional time.
If you are an employee of one of our clients and wish to exercise these rights, please contact your employer (our client) directly, as they are the Data Controller of your information. We will assist our clients in responding to such requests as required by our agreements with them.
10. Children's Privacy
Our website and services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
11. Third-Party Links
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or the content of those third-party sites. We encourage you to read the privacy policies of any site you visit.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Grandis IT, Inc.
2 Summit Ct Ste 101, Fishkill, NY 12524
Email: tac@grandisit.com
Phone: 845.288.2248