Privacy Policy
Effective September 2, 2026
Who we are
Groundwork is operated by Groundwork Web Services LLC. This policy explains what we collect, how we use it, and your choices.
What we collect
- Account data - your email and, if you sign in with Google, your basic profile, via our authentication provider.
- Usage data - the leads you save, notes, statuses, and feature usage counts (e.g. drafts, lookups, scans) used to enforce quotas.
- Payment data - handled by Stripe. We store your subscription status and a customer identifier, not your card details.
- Connected accounts - if you connect a Google account to send outreach, we store the connected address and the OAuth tokens needed to send on your instruction, and, where you grant read access, we read replies to your outreach so the app can match them to the right lead. If you connect Telegram for notifications, we store your Telegram chat ID. You can disconnect a Google account at any time from your account settings; to unlink Telegram, write to david@groundworkscan.com or delete your account.
- Technical data - your IP address, recorded against short-lived rate-limit counters so paid endpoints cannot be scripted for abuse.
- Business data - information about local businesses (names, addresses, ratings, public contact details) sourced from Google and other providers. See Business contacts below for how we treat contact details that identify a person.
How we use it
To provide and improve the Service: authenticate you, run scoring and AI features, enforce plan limits, process payments, and provide support. We do not sell your personal information.
Service providers we share with
We share data with providers that help us run the Service: Vercel (application hosting), Supabase (database and authentication), Inngest (background job processing), Stripe (payments), Anthropic (AI features), Google (business data via Places, page scoring via PageSpeed, and the Gmail API when you connect an account), Hunter.io and Outscraper (business contact lookups you request), Pexels (stock photography for generated site previews), and Telegram (notifications, only if you connect it). Each processes data under its own terms.
Cookies
We use cookies strictly to keep you signed in and to operate the Service. We do not use third-party advertising cookies.
Google API Services Limited Use
Groundwork's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Gmail data we access on your instruction is used only to send the outreach you send and to match replies to your leads. We do not use it for advertising, we do not sell it, and we do not use it to train AI models.
Business contacts
To find and evaluate local businesses we hold public business records from Google and Outscraper, and work contact details from Hunter.io and Outscraper. Some of those details identify a person rather than a company. When a Groundwork user builds a preview or offer page for a business, we also record when that page is opened, so the user knows their pitch was seen. We do not use any of it for advertising, and we do not sell it.
If you own or work at a business that appears in Groundwork and you want it removed, use our removal page. No account is needed, and we suppress every matching record without asking you to prove ownership. You can also write to david@groundworkscan.com.
If you own or work at a business that appears in Groundwork and you want it removed, use our removal page. No account is needed, and we suppress every matching record without asking you to prove ownership. You can also write to david@groundworkscan.com.
Retention
We keep account and usage data while your account is active. Cached business data from Google is refreshed and not retained beyond what its terms allow. Rate-limit counters expire on their own short window. You can delete your account at any time from your account settings, which removes your saved leads and personal data, and you can disconnect a linked Google account separately without deleting the account itself.
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data. You can export or delete your data from account settings, or contact us at david@groundworkscan.com.
Children
The Service is not directed to anyone under 18, and we do not knowingly collect their data.
Changes
We may update this policy and will provide reasonable notice of material changes.
Contact
Questions or requests: david@groundworkscan.com.