1. Introduction
Grunda Inc. ("we", "our", "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Grunda service ("the Service").
2. Information We Collect
Information You Provide
- Account data: name, email, phone number, business name
- Quote data: job descriptions, client info, line items, pricing
- Payment data: processed securely by Stripe (we never store card numbers)
- Communications: messages you send to us
Information Collected Automatically
- Device information (browser type, OS, screen size)
- Usage data (pages visited, features used)
- IP address and approximate location
- Performance metrics via Vercel Analytics
3. How We Use Your Information
- Provide, maintain, and improve the Service
- Process transactions and send related information
- Send you quotes, confirmations, and notifications
- Generate AI-powered suggestions based on your job descriptions
- Monitor usage patterns to improve features
- Detect, prevent, and address technical issues
4. AI Data Usage
When you use AI-powered features (quote suggestions, smart templates), your job descriptions are sent to OpenAI for processing. We do not use your data to train AI models. OpenAI processes data under their
API data usage policy, which states that API data is not used for model training.
5. Data Sharing
We do not sell your personal data. We share data only with:
- Supabase: database and authentication provider
- Stripe: payment processing
- Resend: transactional email delivery
- OpenAI: AI-powered suggestions
- Vercel: hosting and analytics
6. Data Security
We implement industry-standard security measures including encrypted data transmission (TLS/SSL), secure authentication, and row-level security on our database. However, no method of transmission over the Internet is 100% secure.
7. Data Retention
We retain your data for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.
8. Your Rights
You have the right to:
- Access: request a copy of your personal data
- Correct: update inaccurate information
- Delete: request deletion of your account and data
- Export: download your data in a portable format
- Opt-out: unsubscribe from marketing emails
9. Cookies
We use essential cookies for authentication and session management. We use Vercel Analytics for performance monitoring (no personal data tracking). We do not use third-party advertising cookies.
10. Children's Privacy
The Service is not intended for use by anyone under 18 years of age. We do not knowingly collect personal data from children.
11. International Data Transfers
Your data may be transferred to and processed in the United States, where our service providers are located. By using the Service, you consent to this transfer.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 30 days before they take effect.