Your numbers stay yours.

What is available now

The fictional sample tour is public. Account access, imports, report downloads and enquiry submission remain locked while the authentication and email services are being connected. No email is collected or sent by the unavailable sign-in flow.

Your business data

When import access is enabled, selecting a CSV or pasting a table loads it into the current browser tab. Calculations, charts and rule-based findings run locally. The dataset is not automatically uploaded. Refreshing, closing the tab, signing out or choosing Clear data removes the in-memory dataset.

Saving a private report is a separate action. Its contents are encrypted on your device using AES-256-GCM with a key derived from your private passphrase using PBKDF2-SHA-256. Each saved report uses a random salt and nonce. Only the encrypted envelope, account owner and timestamp are stored remotely. Report titles and numbers are inside the encrypted contents.

Accounts, email and identity

Sign-in providers process the account email, authentication events and technical metadata. This is not absolute anonymity. An email notification contains an account link, not business figures or a PDF attachment. The PDF is created after you unlock the report in your browser. Any PDF you download is an ordinary readable file: protect it on your device and share it deliberately.

Your report passphrase is different from your email login. groun cannot recover a forgotten report passphrase. Do not put business data or passphrases in a service enquiry.

Service enquiries

A project enquiry is intentionally shared with the groun team for a response. It can include your name, contact email, business name, website and project description. The form requires separate consent and account verification. It does not subscribe you to marketing, create a paid engagement or share your private report. While account access is unavailable, form answers stay in the tab and are not submitted.

AI processing

The current analytics workspace uses calculations and documented rules, not a language model. No raw or aggregated data is sent to an external AI model. Live AI synthesis and CRM connections need a separate, disclosed data flow before release. Aggregating data alone does not guarantee anonymity, and server-side encryption alone does not mean a server cannot read it.

Website infrastructure

Cloudflare serves this website and may process IP addresses, request metadata and security events. The application does not add advertising trackers. When account features are enabled, Supabase handles authentication and encrypted report storage. Report notification delivery uses a separately configured mail provider.

The dedicated Groun database is provisioned in Singapore (ap-southeast-1). Account registration remains unavailable until production sign-in providers and operational requirements are ready.

Provider information: Cloudflare and Supabase.

Retention, deletion and limits

You can delete saved reports from your account. This removes them from active report storage; provider backup retention must be specified before cloud access is launched. Local PDF files remain until you delete them through your device. Authentication metadata is separate from report contents.

Client-side encryption protects stored report contents, but not a compromised device, a malicious browser extension or modified application code. Account metadata and enquiries remain readable to the relevant service providers and authorised operators. We do not promise unconditional zero-access security or absolute anonymity.

Before public account launch

The legal operator and contact, production data region, processor list, retention periods, account-deletion procedure and support coverage must be published before accepting real customer accounts or enquiries. This preview notice is not a substitute for those operational commitments.