Privacy policy

Draft, last updated [date]. [Have counsel review; replace bracketed items.]

This policy explains what [legal entity name] collects when you use Ground and why. For data you upload to be synthesized, we act as your processor under our Data Processing Addendum; this policy covers the account data we control.

What we collect

• Account: name, email, password hash or Google/SSO identity, organization memberships, two-factor settings.
• Usage and security: an activity log of uploads, exports, downloads, sharing and security changes, with IP address and browser, kept for a year.
• Product analytics: which pages and features you use and how they perform (for example rows exported, credits used, time taken), through PostHog, to improve Ground. Never the contents of your data, your column names or your requests; session recordings mask all text and inputs.
• Uploaded data: processed only to analyze it and generate synthetic data for you. Never used to train AI models, never sold.

Who processes it

Hosting and infrastructure providers (Vercel, Railway, Neon, Cloudflare) and, for AI-written text columns, Anthropic: Claude sees only short, scrubbed examples of text columns when you allow it, never your uploaded files. GPU engines run on Modal: when they are on for a dataset (the default; you can turn them off per dataset), the modeled columns of your upload, never identifiers, personal data or free text, are sent to Ground's own Modal workspace to train models that run there, through short-lived links; Modal keeps nothing once a job ends. In private mode, AIM runs there too, and text columns go there only if you turn on private fine-tuning. Product analytics through PostHog. Transactional email through Resend if enabled. The current list is in our subprocessor list. [Link the published list.]

Retention

• Raw uploads: deleted after 30 days by default, or when you delete them.
• Copies of your rows made for training (for example on the GPU service): deleted with the raw upload.
• Models, reports and generated files: until you delete the dataset or account. Deleted datasets stay in the trash for 30 days by default, restorable, then everything is purged.
• Activity log: one year; IP addresses are removed when you delete your account.

Your rights

You can see your activity and delete your account and all its data at any time in Account settings. To exercise access, correction or other rights under GDPR, UK GDPR or CCPA, email support@ground.dev.

Transfers and security

Data is processed in [regions]. Transfers outside the EEA/UK rely on Standard Contractual Clauses. Security measures are summarized on our security page.

Contact

[Legal entity, address, DPO or privacy contact]. support@ground.dev