Privacy Policy

Grounded Labs is the App Vault, a collection of AI apps for businesses, operated by Grounded Labs FZCO (Dubai, United Arab Emirates). This policy explains what data we handle when you use groundedlabs.io, why we handle it, and what we do with it. We keep it plain, because that is how we write everything.

What we collect from you

• Your email address. That is your account. Sign-in works with one-time codes, so we never store a password.
• Your keys and connections. To do their jobs, Grounded Labs's apps store the credentials you give them: your Anthropic and OpenAI API keys, the client ID and secret of your own Google app plus the access it grants, your Shopify store address and the private app token you create, and the Telegram chat where Grounded Labs talks to you. All secrets are encrypted at rest.
• Your settings. Store name, refund cap, how each case type should be handled, your email voice, and anything you tell Grounded Labs about your business.
• Purchase details. Payments are handled by Stripe. We never see or store your card number. We keep a record of your purchase.
• Basic technical logs. Standard request logs used to run and secure the service.
• Waitlist email. If you join the early-access list on groundedlabs.io, we store the email you enter, to contact you about Grounded Labs and nothing else.

What we process on your behalf

Grounded Labs's apps work on your business's behalf, so they also process your customers' data as part of doing their jobs:

• Support emails. The Support Engine reads new emails in the inbox you connect to work out which ones are customer support and what the customer needs. We store the thread reference, the customer's name and email address, a one line summary of what they asked, and the replies that were sent. Full email bodies are processed in the moment but are not kept in our database.
• Order details. When a customer writes in, the app looks up the matching order in your Shopify store: what was bought, whether it shipped, tracking, and the amount paid. Refunds and order notes it makes are recorded in an action log so you always have a trail.

Google user data

You connect Gmail through your own private Google app, and you can revoke that access at any time from your Google account. Grounded Labs uses Gmail access only to read incoming support emails, apply labels that keep the inbox organised, and send replies you have approved or configured it to send. Grounded Labs's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We never sell Google user data, never use it for advertising, and never let humans read it except with your permission, for security, or to comply with law.

AI processing, on your keys

To classify emails and draft replies, the content of a support email and the matching order details are sent to Anthropic's Claude API using your own API key, under your own agreement with Anthropic. Anthropic does not train models on this data under standard API terms. We do not train AI models on your data either.

We do not sell your data or your customers' data. We do not use it for advertising.

Cookies and analytics

Any advertising measurement on groundedlabs.io only runs after you accept it in a cookie banner. The app itself sets no tracking cookies.

Where your data lives

Account and app data is stored with Supabase (hosted in London, UK). The service runs on Vercel. Payments run through Stripe.

Deleting your data

Disconnecting Gmail, Shopify or Telegram removes Grounded Labs's access immediately, and you can also revoke access from the Google, Shopify or Telegram side, or rotate your API keys with the provider, at any time. To delete your account and everything stored with it, message us and it is done within 30 days.

Contact

Anything about privacy: hello@groundedlabs.io.

This policy is governed by the laws of Dubai, United Arab Emirates. If we make meaningful changes we will update the date at the top and, for anything significant, email you.