Privacy Policy

Last updated August 25, 2026

This policy explains what Gruvle Drop ("Gruvle", "we") collects when you use gruvledrop.space, why, and who else sees it. It's written to match what the product actually does, not a generic template.

What we collect

• Account information: your email address and authentication credentials, managed by Supabase Auth. We never see or store your password — Supabase handles that.
• Files you upload: stored privately in Supabase Storage. Only you can access them directly; a Drop only exposes what you explicitly choose to share.
• Extracted content: text is extracted from your files and split into chunks, which are converted into numeric embeddings for search and stored in our database alongside the source text.
• Questions asked on your Drops: the text of questions visitors ask is stored so you can see "what people are asking" in your analytics. We do not log the AI's full answers beyond what's needed to serve the response.
• Leads: if a visitor submits an email/message through a Drop's call-to-action, that's stored and shown to you, the Drop's owner — not used by us for any other purpose.
• Usage analytics: product usage events (page views, feature usage like uploads or upgrades) via PostHog. We do not send your document content to PostHog.
• Payment status: if you subscribe to a paid plan, Razorpay processes the payment. We store only your subscription status and plan — never your card number, UPI ID, or other payment credentials.

Who else processes your data

To provide the product, some data is sent to these processors, only as needed:

• Supabase — database, authentication, and file storage.
• Groq — receives the relevant document excerpts and a visitor's question to generate an answer. It does not receive your whole document, only the retrieved snippets.
• HuggingFace — receives document text and questions to generate embeddings (numeric representations used for search).
• Razorpay — processes subscription payments.
• Resend — sends transactional email (signup confirmation, password reset, lead notifications).
• PostHog — product usage analytics.

We do not sell your data, and we do not use your document content to train any model.

AI processing and grounding

When someone asks a question on a Drop, only the most relevant excerpts of your document are sent to the AI provider along with the question — not the entire file. Answers are grounded in that content; the system is explicitly instructed not to follow instructions embedded in document text and not to reveal internal configuration.

Retention and deletion

Deleting a file removes its storage object, extracted text, and embeddings, and revokes any Drops built from it. Revoking a Drop disables public access immediately. To request full account deletion, email us at support@gruvledrop.space — we don't yet have a self-serve "delete my account" button in the product, so this is handled manually for now.

Cookies

We use cookies for authentication (to keep you signed in) and PostHog analytics cookies to understand product usage. We don't use third-party advertising cookies.

Your rights

You can request a copy of your data, correction of inaccurate data, or deletion of your account and associated data by emailing support@gruvledrop.space.

Changes

We'll update the date at the top of this page when this policy changes materially.

Contact

Questions about this policy: support@gruvledrop.space