Privacy policy

This policy explains how Grunda (“we”, “us”) collects and uses personal data when you visit grunda.ai, contact us, or use the Grunda application. We keep it short and specific: what we collect, why, who we share it with, and the rights you have. See also our cookie policy and, for customer CRM data, our data processing agreement.

What we collect

• Information you give us. When you book a demo or contact us, we collect your name, work email, company, and anything you write in the message field.
• Usage data. With your consent where required, we use cookies and similar technologies to understand how visitors use the site and to measure our marketing. See the cookies section below for exactly what runs.
• Technical data. Our hosting provider processes IP addresses, browser type, and request logs to serve the site securely and reliably.

How we use it

• To respond to demo requests and sales enquiries.
• To operate, secure, and improve the website and the product.
• To measure which pages and campaigns lead to enquiries.
• To show relevant advertising and build remarketing audiences, only where you have consented.

Our legal bases under the GDPR are consent (cookies and marketing technologies), legitimate interest (following up on business enquiries, securing the service), and contract (providing the Grunda app to customers).

Cookies and tracking

If you visit from the EEA, the United Kingdom, or Switzerland, no marketing or analytics cookies are set until you accept them in the consent banner. If you decline, your visit is measured anonymously without cookies or identifiers. Your choice is stored in your browser and you can change it at any time:

Open cookie settings

Technologies we use, and what they do:

• Google Tag Manager loads the tools below. It sets no cookies itself.
• Google Analytics 4 measures visits, pages, and conversions. Without consent it receives only anonymous, cookieless signals.
• Google Ads measures whether our ads lead to enquiries and, with consent, supports remarketing.
• LinkedIn Insight Tag measures LinkedIn campaigns and supports remarketing. It only runs with consent.
• HubSpot is our CRM. With consent, it connects your page views to your contact record when you submit a form. Form submissions themselves go to HubSpot regardless, since that is how we receive and answer your enquiry.

Who we share data with

We never sell personal data. We share it only with the processors that run our service: Google (analytics and advertising), LinkedIn (advertising), HubSpot (CRM), and our hosting and infrastructure providers. Each processes data under a data processing agreement. Where data leaves the EEA, transfers rely on the EU–US Data Privacy Framework or standard contractual clauses.

The Grunda app

Customers connect their own CRM and business systems to the Grunda app. For that data we act as a processor on the customer's behalf, under our data processing agreement. This policy covers our own marketing site and sales process; it does not change how we handle customer CRM data.

Retention

We keep sales enquiries for as long as there is an active conversation or a legitimate business interest in following up. Analytics data is retained for 14 months. You can ask us to delete your data at any time.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data, object to or restrict our processing, request a copy in a portable format, and withdraw consent at any time without affecting prior processing. You can also lodge a complaint with your local data protection authority.

Contact

For any privacy question or request, reach us through the contact page and we will respond promptly.

Changes

If we change this policy, we will update it here and adjust the date at the top. For significant changes we will make the update clearly visible on the site.