Privacy Policy
This page explains what we collect, why we collect it, and what you can do about it. The short version: we only gather what we need to run GranetraAI well, we don't sell your data, and you stay in control of it.
1. What we collect
There are three kinds of information that pass through us:
- What you give us. Your name and email when you sign up, your password (stored hashed, never in the clear), and anything you choose to upload to train your chatbot.
- What we get from sign-in providers. If you log in with Google or GitHub, we receive your basic profile and email from them so we can create your account. We don't see your password for those services.
- What we collect automatically. Basic usage and device details — things like your IP address, browser, and which features you use — so we can keep the service secure and figure out what to improve.
2. Why we use it
We use your information to:
- Run your account and power your chatbot.
- Keep the service secure and catch abuse or fraud.
- Reply when you contact us for support.
- Send you important account and service messages. We'll only send marketing email if you've opted in, and you can opt out anytime.
- Understand how the product is used so we can make it better.
3. The AI part
Content you upload is used to answer your customers' questions through your chatbot. We may send that content to AI providers we work with purely to generate those answers. We don't use your content to train models that other customers benefit from, and we don't sell it to anyone.
4. Who we share it with
We don't sell your personal data. We share it only with service providers that help us operate — for example hosting, our database (Supabase), and email delivery (Resend) — and only so they can do that job for us. We may also share information if the law requires it, or to protect our users and the service. If GranetraAI is ever involved in a merger or acquisition, we'll let you know before your data moves to a new owner.
5. How long we keep it
We hold onto your data for as long as your account is active, plus a reasonable window after that for legal, accounting, and security reasons. When you ask us to delete your account, we remove your personal data within a reasonable period, except for anything we're legally required to keep.
6. Keeping it safe
We protect your data with encryption in transit, hashed passwords, and access controls so only the people who need it can reach it. No system is completely bulletproof, but we take security seriously and act quickly if something goes wrong. If a breach ever affects you, we'll tell you as the law requires.
7. Your choices
Depending on where you live, you may have the right to see the data we hold about you, correct it, export it, or ask us to delete it. You can do most of this from your account settings, or email us and we'll help. You can also unsubscribe from marketing email using the link in any of those messages.
8. Cookies
We use a small number of cookies to keep you signed in and to understand how the site is used. You can clear or block cookies in your browser, though some parts of the service may not work as well if you do.
9. Changes to this policy
If we update this policy in a meaningful way, we'll let you know before the change takes effect. The date at the top always tells you when it was last revised.
10. Contact us
Want to reach us about your privacy, or exercise any of the rights above? Email privacy@granetra.ai and we'll take care of it. You can also review our Terms of Service.