Privacy Policy

1. Information We Collect

• Account details: your name, email address and password (stored only as a secure hash), or your basic Google profile if you sign in with Google.
• Billing details: your plan and the state of your subscription. Your card details are collected and held by Stripe; we never receive your full card number.
• Content you give us: what you add to Brain AI (notes, files and website addresses), your chats with AI employees, and the tasks, automations and drafts you create.
• Data from apps you connect: when you connect a service such as Gmail, Google Calendar or a social media account, the data your AI employees need to do what you ask, such as the emails they read or draft.
• Usage and device data: pages visited, features used, errors, and your browser and device type.

2. How We Use Your Information

We use your information to provide, maintain and improve Gronta; to generate your AI employees' work; to process payments; to send service messages, such as receipts and account emails; to answer support requests; to keep Gronta secure and prevent fraud; and to meet our legal obligations.

3. Service Providers We Share Data With

We do not sell your personal information. We share it only with the providers that help us run Gronta, each for its own purpose:

• Stripe: processes payments. Stripe handles your card details under its own privacy policy.
• OpenAI: generates your AI employees' replies and images, and searches your Brain AI knowledge. Your messages and the relevant knowledge are sent to OpenAI to do this.
• Composio: connects the apps you choose to connect, such as Gmail, and carries out the actions your AI employees take in them. It holds the access permissions for those apps.
• Google: signing in with Google, and the Google services you connect.
• Email delivery: Resend, or a similar provider, sends our account and service emails.
• Sentry: monitors errors. It may record a replay of a session where an error happens, and of a small sample of other sessions, with the text on screen and anything you type hidden.
• Analytics and ad measurement: Google Analytics and Tag Manager, PostHog, Microsoft Clarity and the Meta Pixel, only if you accept analytics cookies. See our Cookie Policy.

Each provider may use your information only to provide its service to us. We may also disclose information when the law requires it.

4. Google User Data

When you connect a Google service, Gronta uses only the Google data it needs for the features you turn on, such as reading, sorting and drafting email. Gronta's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for advertising, we don't sell it, and we don't use it to train AI models. You can disconnect a Google service at any time from the Integrations page in the app.

5. Data Security

Everything sent to and from Gronta is encrypted with HTTPS, passwords are stored only as secure hashes, card payments are handled entirely by Stripe (see Payment Security), and access controls keep each workspace's data separate. No system is completely secure, so please tell us at support@gronta.com straight away if you think your account has been misused.

6. Data Retention and Deletion

We keep your information while your account is open. You can delete your account at any time from Settings → Security → Delete Account. Your account and the information stored with it are then deleted straight away and can't be recovered, and any paid subscription is cancelled. We keep only what the law requires us to, such as records of payments.

7. Your Rights

Depending on where you live, including under India's Digital Personal Data Protection Act and the EU and UK GDPR, you have the right to access, correct, delete and export your personal information, to withdraw your consent, and to object to or restrict some processing. You can download your data yourself from Settings → Data, and change your cookie choices at any time with Cookie preferences. For anything else, email privacy@gronta.com; we respond within 30 days. You can also complain to your local data protection authority.

8. Grievance Officer

If you have a concern about how we handle your personal information, contact our Grievance Officer at privacy@gronta.com. We respond within 30 days.

9. Cookies

We use essential cookies to keep you signed in and, only if you agree, analytics cookies to understand how Gronta is used. Our Cookie Policy explains each one and how to change your choice.

10. International Transfers

Our providers, including Stripe, OpenAI and Sentry, may process your information in countries other than your own, such as the United States. Where they do, we rely on the safeguards they provide, such as standard contractual clauses.

11. Children

Gronta is not for anyone under 18, and we don't knowingly collect information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the date above. Continued use of our services after changes constitutes acceptance.

13. Data Controller

Gronta Technologies Ltd is the data controller for your personal information.

Registered Address: 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom

Email: support@gronta.com