Privacy notice

Who we are

Groundforth Inc operates Groundforth from Elephant Hill Estate, Karu, Abuja, Nigeria. Contact us at hello@groundforth.com.

We act as a data controller for website inquiries, account administration, and service operations. We act as a data processor for customer workspace content processed on the customer's instructions. If your organization controls your workspace, contact its administrator about that content; we can help route your request.

Information we use

Contact information includes your name, work email, optional organization, request category, and message. Account and workspace information includes identity, membership, permissions, selected sources, project work, communications, versions, and operational records. We also use technical information needed to deliver and protect the service, such as request and security logs.

Customer content is encrypted in transit and through Azure-managed encryption at rest. Our policy is that team access to your core workspace data is not routine. Encryption at rest protects stored media; it is not end-to-end encryption, so authorized service processing can access content when required to provide features you request.

Why we use it

We use information to respond to inquiries, provide accounts and workspaces, process the project sources and knowledge you select, support collaboration and human review, handle support requests, and protect the service. We do not use customer workspace content to train our AI models.

If a support issue cannot be resolved without inspecting your workspace content, our policy is to explain the access required and ask for your explicit permission before a member of our team accesses that content.

Depending on the activity and applicable law, our basis is performing an agreement, complying with legal obligations, our legitimate interests in running and securing the service, or your consent where required. Where we rely on consent, you may withdraw it without affecting earlier lawful processing.

Providers and sharing

We use service providers for infrastructure, identity, communications, AI processing, and service monitoring. They receive information needed for their role. Workspace content is shared with the people authorized by your organization and with providers involved in the requested processing.

We may also disclose information when legally required or necessary to protect rights and safety. Processing locations depend on the services involved; we do not promise that all processing occurs in Nigeria. Contact us for provider, transfer, or data-processing agreement questions.

Retention and deletion

We retain information while needed to provide the service or respond to your request. Deleted customer content is retained for up to 30 days after deletion for recovery and cleanup, then removed. We may retain records required by law or needed for a security investigation, dispute, or legal hold for that specific purpose.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may also complain to the relevant data protection authority, including the Nigeria Data Protection Commission.

Use Privacy/data requests or email us. We may verify your identity and authority before acting. Please do not send passwords, authentication codes, full financial details, or sensitive project content.

Cookies and changes

Essential session technologies support account access and security. Marketing analytics are not enabled on this site. We will update the effective date when this notice changes and communicate material changes as appropriate.