Privacy posture.

When you create a workspace we store the minimum we need to run it: your email address, your display name, the workspaces you belong to, and your role (admin or finance) in each.

As you use the product, you create content: applications, tasks, comments, uploaded documents, financial models, and Advisor conversations. We store that content so you can keep working on it. It belongs to the workspace that created it.

Your data lives in a Supabase Postgres project we host in the US. Every table that stores workspace content has row-level security policies. A teammate sees only what their workspace permits — never another workspace’s rows.

Uploaded documents are stored in Supabase Storage buckets, scoped to your workspace. Avatars are public; everything else requires a signed URL.

The Advisor reads your active applications, document scores, tasks, and timeline before it answers — so the reply is grounded in your actual workspace.

We send those reads to our model provider (currently OpenAI) for inference only. Our provider contract prohibits training on customer prompts and outputs. We do not retain inputs or outputs beyond the request lifecycle.

We do not sell your data. We do not feed it into ad networks. We do not use it to train our own models.

We send transactional emails through Brevo: invite acceptances, task assignments, @mention notifications, status changes, and removal notifications. Brevo processes email content for delivery only.

We do not send marketing emails to your workspace teammates without their consent.

Export everything you’ve created at any time as JSON and xlsx. Delete documents permanently from the Vault. Remove teammates from your workspace.

If you cancel, your workspace is held for 30 days, then permanently deleted along with every document you uploaded. To delete sooner, email contact@gruve.events.

Reach out to contact@gruve.events for anything — corrections, deletions, complaints, audit requests.