Introduction
Grasppy helps users import, organize, analyze, and reuse AI conversations and development context. This Privacy Policy explains what information we collect, how we use it, how we share it, and what choices and rights you have.
Information We Collect
We collect account and profile information, content you provide or import, generated and derived data, payment and subscription metadata, usage and log data, support messages, email delivery data, and essential preference/security data.
Content may include conversations, JSONL exports, markdown exports, uploaded files, documents, workspaces, artifacts, plans, prompts, skills, notes, summaries, entities, links, topics, and other analysis results.
If you subscribe to the Repo Radar newsletter without holding a Grasppy account, we collect only what that subscription needs. See Repo Radar Newsletter below.
Cookies and Analytics
For launch, Grasppy uses Plausible Analytics and Rybbit Analytics for public website measurement. We use essential storage for authentication, security, preferences, and notices where applicable.
If Grasppy later adds Facebook Pixel or other non-essential tracking, we will update the policy and consent flow before enabling that tracking.
How We Use Information
- Provide, maintain, secure, and support Grasppy.
- Import, parse, enrich, analyze, organize, and display your content.
- Operate AI processing and model-provider integrations.
- Manage accounts, authentication, plans, trials, subscriptions, and billing.
- Send transactional and permitted marketing emails.
- Detect fraud, abuse, security incidents, and policy violations.
- Improve reliability, usability, and product quality.
- Comply with legal, accounting, tax, and regulatory obligations.
Legal Bases for Processing
Where a legal basis is required, we process personal information based on contract performance, legitimate interests, consent where required, and legal obligations.
AI Processing and Subprocessors
Grasppy may use third-party providers for AI processing, hosting, storage, payments, email, analytics, and infrastructure.
| Provider | Purpose |
|---|---|
| Anthropic | AI model processing |
| OpenAI | AI model processing |
| DeepSeek | AI model processing where selected or configured |
| OpenRouter | AI model routing where selected or configured |
| Cloudflare R2 | Object storage |
| Hetzner | Server and database infrastructure |
| Netlify | Website hosting and serverless functions |
| Stripe | Payments and subscription processing |
| EmailIt | Transactional and marketing email delivery |
| Plausible | Cookieless public-site analytics |
| Rybbit | Public-site analytics |
How We Share Information
We share information only as needed to provide and operate Grasppy, comply with law, protect users and the service, complete business transactions, or with your direction. We do not sell personal information.
Data Retention
We retain account and content data while your account is active or as needed to provide the service. If account deletion is requested, the planned model is a 14-day soft-delete grace period before hard deletion from primary systems.
Object storage deletion and backup expiration may follow separate operational windows. Audit logs, security records, payment records, tax records, abuse-prevention records, and legal records may be retained where necessary.
Your Privacy Rights
Depending on your location, you may have rights to access, receive a portable copy, correct, delete, object to or restrict processing, opt out of marketing, opt out of sale/share if applicable, limit certain sensitive information uses, and appeal certain decisions.
To exercise rights, contact support@grasppy.com. If account settings provide self-serve export, correction, or deletion controls, you may also use those controls.
California Privacy Notice
California residents may have rights under the CCPA/CPRA, including the right to know, access, correct, delete, opt out of sale/share, limit certain sensitive personal information uses, and not be discriminated against for exercising rights.
European and UK Users
Users in the EEA, UK, or similar jurisdictions may have GDPR-style rights, including access, rectification, erasure, portability, restriction, objection, and rights related to automated decision-making.
Automated Decision-Making
Grasppy may use automated systems to detect abuse, fraud, security risk, or policy violations. We do not intend to make solely automated decisions with legal or similarly significant effects without providing required rights and disclosures.
Security
Grasppy uses technical and organizational safeguards such as HTTPS/TLS, password hashing, access controls, logging, and infrastructure security measures. No service can guarantee perfect security.
Children
Grasppy is not directed to children under 13. We do not knowingly collect personal information from children under 13.
International Transfers
Grasppy may process and store information in the United States, the European Union, and other locations where our providers operate. Where required, we use appropriate safeguards for international transfers.
Marketing and Transactional Emails
Transactional emails are sent as needed to operate the service. Marketing emails, including the Repo Radar newsletter, are sent only to people who asked for them and confirmed by clicking a link. Every one carries an unsubscribe link that works in a single click, without logging in.
Repo Radar Newsletter
Repo Radar is a free daily email. You do not need a Grasppy account to receive it, and subscribing does not create one.
When you subscribe we store your email address, the date and time you subscribed, the date and time you confirmed, and the IP address you subscribed from. The IP address is kept only as a record that the subscription was requested. It is not used to identify you or to build a profile.
Subscribing takes two steps. You enter your address, then you confirm by clicking a link we email to you. Nobody is added to the list without that confirmation.
We use the address for one purpose: to send the Repo Radar edition. We do not sell it, share it, or use it to advertise anything else. Delivery is handled by EmailIt, listed in the subprocessor table above.
Every edition carries an unsubscribe link. One click removes you, with no login and no questions. We keep a record that you unsubscribed, so that you are not added again by mistake. That record holds your address and the date, and nothing else. If you would rather it was deleted completely, write to support@grasppy.com.
Changes and Contact
We may update this Privacy Policy from time to time. Questions or privacy requests: support@grasppy.com
Grasppy Labs LLC
2108 N St Ste N
Sacramento, CA 95816, USA