Privacy Policy

Last updated October 8, 2026

What we collect

• Waitlist: your email and, if you choose, company, role and how many agents you run.
• Accounts: name, email and a salted scrypt hash of your password. We never store your password.
• Workspace content: pages, decisions, records and activity that you and your agents create.
• API keys: stored only as SHA-256 hashes; we show a key once, at creation.

How we use it

To run the service, contact you about your waitlist spot or account, and keep the service secure. That's it. We don't sell data and we don't use your content to train models.

Sub-processors

• Vercel — hosting and storage.
• Anthropic or OpenAI, only if you add your own AI key: your question and the matching workspace excerpts (or the contract text you submit for extraction) are sent to that provider under your account, per request. Groundtruth doesn't use them to train models.

Claude and other AI agents you connect

When you connect Claude (or another MCP client) to a workspace, we receive the tool calls it makes on your behalf, such as a search query or a page to create, and return results from that one workspace. We don't receive your conversations with the agent, and we don't read the agent's memory or files. The connection is an access token stored only as a hash; revoke it any time in Settings & API → API keys. Writes made through a connection are logged in the workspace's activity feed and labelled as agent edits.

Retention

• Workspace content is kept for as long as the workspace exists. Each page keeps its last 10 versions; the activity log keeps the latest 1,000 entries.
• Account and workspace data is deleted within 30 days of a deletion request, including from backups we control.
• Waitlist entries are kept until you join or ask to be removed.
• Revoked API keys and connections stop working immediately; their hashed records stay in the workspace's key list for audit.
• Our hosting provider keeps request logs for a short period under its own retention policy.

Cookies

One strictly-necessary, httpOnly session cookie when you log in. No tracking or advertising cookies.

Your rights

Email privacy@groundtruthhq.tech to access, export or delete your data, or to be removed from the waitlist.