Privacy Policy

Gruup ("we", "our", "us") is committed to protecting your privacy. This policy describes what data we collect, how we use it, and your rights regarding that data.

Gruup is an early-stage product. Our data practices may evolve as the product grows, and we will update this policy accordingly.

Account data:

• Email address (used for login and notifications)
• Full name (optional, used for display in the app)
• Profile photo (optional, uploaded by you)
• Password (hashed, never stored in plaintext)

Workspace data:

• Messages you send and receive
• Files and images you upload
• Workspace and channel names you create
• Tasks you create or are assigned

Usage data:

• Pages visited and features used (via Vercel Analytics — anonymized)
• Browser type and device type
• IP address (not stored persistently)

• To provide and operate the Service
• To authenticate you and secure your account
• To send notifications related to your activity (e.g. task assignments, mentions)
• To power AI features (your messages may be sent to Anthropic's API to generate agent responses — see Section 5)
• To improve the product via anonymized analytics

We do not sell your data. We do not use your content to train AI models. We do not share your personal data with third parties for marketing purposes.

Your data is stored in Supabase (PostgreSQL database hosted on AWS), and files are stored in Supabase Storage. Both are located in the US (us-east-1). We rely on Supabase's security measures, which include encryption at rest and in transit.

The product is deployed on Vercel. Page visit analytics are processed by Vercel Analytics with no personally identifiable information stored.

Gruup uses Anthropic's API to power AI agent features. When you interact with an AI agent, your message and recent conversation context are sent to Anthropic's servers to generate a response. This is subject to Anthropic's Privacy Policy.

You can disable AI agent responses by removing the agent from your workspace.

We use cookies solely for session authentication (set by Supabase Auth). We do not use advertising cookies or third-party tracking cookies. Vercel Analytics uses a privacy-friendly, cookieless approach for page-level analytics.

We retain your data for as long as your account is active. You can request deletion of your account and all associated data at any time by contacting us at hello@gruup.so. We will process deletion requests within 30 days.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data (via Settings → Profile)
• Request deletion of your account and data
• Export your data (contact us)

To exercise any of these rights, contact us at hello@gruup.so.

The Service is not directed to children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have collected data from a child under 16, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the effective date above and, where appropriate, sending an email notification. Continued use of the Service after changes constitutes acceptance.

Questions or concerns about this Privacy Policy? hello@gruup.so