This Privacy Policy explains how GrindLeader LLC ("we," "us," or "our") collects, uses, and protects information when you use GrindLeader ("the Service"). By using the Service, you agree to the practices described here.
Account Information: When you create an account: name, email address, business name, phone number, and billing information.
Business Data You Enter: Customer records, job details, invoices, notes, photos, and documents that you upload or create within the Service. This data belongs to you — see Section 4 of our Terms of Service.
Usage Data: Log data including IP address, browser type, pages visited, and feature usage. We use this to operate and improve the Service.
Payment Information: Payment is processed by Stripe. We do not store credit card numbers. We receive only a transaction token and last-four-digits from Stripe.
We use the information we collect to:
We do not sell your information or your customers' information to any third party, ever.
When you use GrindLeader, you store personal information about your customers (names, addresses, phone numbers, emails). You are the data controller of that information. We process it only on your behalf to provide the Service. You are responsible for:
We share data with the following third parties only as necessary to operate the Service:
| Service | Purpose | Their Privacy Policy |
|---|---|---|
| Stripe | Payment processing | stripe.com/privacy |
| Authentication (sign-in) | policies.google.com/privacy | |
| Twilio | SMS messaging | twilio.com/legal/privacy |
| Cloudflare | Hosting, storage, CDN | cloudflare.com/privacypolicy |
| Resend | Transactional email | resend.com/legal/privacy-policy |
We do not share your data with any other third parties except as required by law.
Your data is stored on Cloudflare's infrastructure, including D1 (database) and R2 (file storage). Cloudflare operates data centers with industry-standard security practices.
We implement reasonable technical and organizational measures to protect your data, including HTTPS encryption in transit, access controls limiting who can access production data, and regular security reviews.
No system is 100% secure. In the event of a data breach that affects your account, we will notify you as required by applicable law.
We retain your account data for as long as your account is active. After account termination, we retain Your Data for 30 days to allow for export, then permanently delete it. Log and usage data may be retained for up to 12 months.
GrindLeader uses session cookies to keep you logged in. We do not use third-party tracking cookies or advertising cookies. You may disable cookies in your browser, though this will prevent login from functioning.
You have the right to:
To exercise any of these rights, contact us at [email protected].
GrindLeader is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notice. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.