Privacy policy

Groundwork is a product discovery workspace. It is run by Gayanjith Loku Pathirage, who is responsible for your personal data under this policy. Questions or requests: gayanjith@gmail.com.

What we collect

• Your account: your name, email address and, if you sign in with Google, your Google profile photo. We receive these from Google or from the email you sign in with. We never see your Google password.
• What you put in a workspace: insights, customer quotes, hypotheses, experiments, results, findings and requirements, and the workspace's name, products and product areas.
• Membership: which workspaces you belong to, your role in each, and the invite links owners create.
• Keys a workspace adds: a Groq or Linear API key, stored encrypted and never shown again.
• Usage counts: how many AI requests each workspace makes per day, so we can apply the free daily limit.

We don't use advertising or third-party analytics, and we don't sell or rent your data.

How we use it

• To sign you in and keep you signed in.
• To show each workspace to its members only, with the access their role allows.
• To run the AI features you choose to use.
• To send issues to Linear when a workspace member asks.
• To keep the service secure and working.

The legal basis is providing the service you asked for (performance of a contract) and, for security and abuse prevention, our legitimate interest in keeping the service safe.

AI features

When you use an AI feature, the text you entered and the workspace items it's about are sent to Groq, Inc. to generate the answer. Nothing is sent to Groq unless someone in the workspace uses an AI feature. Please don't put sensitive personal data, such as health records, into a workspace.

Who processes data for us

• Supabase stores the database and handles sign-in.
• Vercel hosts the application.
• Groq runs the AI features, as described above.
• Google, if you choose to sign in with Google.
• Linear, only for workspaces that connect it, and only for the requirements members send there.

Some of these providers may process data outside your country, including in the United States, under their own data protection safeguards.

Cookies and browser storage

We use cookies only to keep you signed in. Your browser also remembers which workspace you last opened. There are no tracking or advertising cookies.

How long we keep it

Workspace content is kept until a workspace member deletes it, or an owner deletes the whole workspace, which removes everything in it. Your account is kept until you ask us to delete it. AI usage counts are kept as daily totals per workspace.

Your rights

You can ask us to give you a copy of your personal data, correct it, delete it, or restrict or object to how we use it. Email gayanjith@gmail.com and we'll reply within 30 days. You can also complain to your local data protection authority.

Changes

If we change this policy, we'll update the date at the top. For significant changes, we'll tell signed-in users in the app.