Privacy Policy

Last Updated: December 12, 2024

1. Introduction

GrindBoss ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (the "Service").

Please read this Privacy Policy carefully. By using the Service, you consent to the collection and use of your information as described in this policy.

2. Information We Collect

We collect the following types of information:

  • Account Information: Name, email address, and password when you register for an account.
  • Billing Information: Payment card details and billing address, processed securely through Stripe. We do not store your full card number.
  • Content Data: Text and other content you input into our AI tools to generate emails. This is processed to provide the Service and is not used to train AI models.
  • Usage Data: Log files, device information, IP address, browser type, pages visited, and time spent on pages.
  • Cookies and Tracking: We use cookies and similar technologies as described in our Cookie Policy.

3. How We Use Your Information

We use your information to:

  • Provide, operate, and maintain our Service.
  • Process payments and manage your account.
  • Communicate with you about updates, support, and promotional offers (you may opt out).
  • Analyze usage patterns to improve user experience.
  • Detect, prevent, and address technical issues or fraud.
  • Comply with legal obligations.

4. Third-Party Service Providers

We share your information with trusted third parties solely to operate our Service:

  • Payment Processing: Stripe (PCI-compliant)
  • AI Providers: OpenAI, Anthropic, Google (to generate email content)
  • Authentication: Supabase
  • Analytics: Google Analytics (when implemented)
  • Email: Resend (for transactional emails)

We do not sell your personal information to third parties.

5. AI Data Usage

When you use our AI generation tools, your input data is sent to third-party AI providers to generate the response. Your content is not used to train AI models. We retain generated content only to provide the Service and allow you to access your history.

6. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or business purposes (e.g., transaction records for tax compliance).

7. Data Security

We implement industry-standard security measures including 256-bit SSL encryption, secure authentication, and regular security audits. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights to:

  • Access, correct, or delete your personal information.
  • Object to or restrict certain processing.
  • Request data portability.
  • Withdraw consent at any time.

To exercise these rights, please contact us.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You may request disclosure of the categories and specific pieces of personal information we collected about you.
  • Right to Delete: You may request deletion of your personal information.
  • Right to Opt-Out: We do not sell personal information, so this right does not apply.
  • Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, please contact us.

10. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date. Your continued use of the Service after changes constitutes acceptance.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us here.