Policy

Privacy policy

How we collect, use, and protect information from this site.

Effective date: April 30, 2026. Last updated: October 10, 2026.

Who we are

Grunion runs this website. This policy covers personal information we collect through grunion.ai, the forms on the site, and the email or calendar links attached to it.

If you have a privacy question, write to kyle@grunion.ai.

What we collect

We collect three kinds of information.

1. Information you send us directly. If you fill out a contact form, request a venture brief, book time with us, or email us, we collect the details you send. That usually includes your name, work email, company, role, and message.

2. Technical request data. When you load a page, your browser sends standard request data such as IP address, user agent, referrer, and the URL you requested. We keep that data for site operations, abuse prevention, and security.

3. Delivery and scheduling data. If you ask for a brief or book a call, the provider that delivers that request sees the data needed to complete it.

At launch, the public site does not run third-party analytics scripts or third-party error-monitoring scripts. If that changes, we will update this page before the change ships.

We do not ask for medical, biometric, political, religious, or similar sensitive data through this site. Do not send that kind of information here.

Chat with Grunion

Chat is an AI guide. When you send a message, the conversation context is sent to Anthropic to generate a reply. Do not include sensitive records, passwords, or private customer information.

The Grunion chat server does not save conversation text. Conversation context remains in the current browser page until you refresh, leave, or select Start fresh. Anthropic processes messages under its API terms and data policies.

To control abuse and cost, Grunion stores a daily hashed visitor identifier, request timestamps, and API usage costs for up to 35 days. The identifier is derived from request network information. These records do not include message text.

Booking opens Google Calendar. Choose and confirm a time there; the chat does not read your calendar or confirm bookings.

Why we collect it

  • To reply to your message.
  • To send the brief or follow-up material you asked for.
  • To run and secure the site.
  • To detect spam, abuse, or misuse.
  • To meet legal obligations.

We do not sell personal information. We do not rent it. We do not use it to train third-party models.

If a local law requires us to name a legal basis, we rely on:

  • Consent for marketing emails when you opt in, and for attribution and analytics when you select Accept in the cookie banner.
  • Legitimate interest for site security, spam control, and day-to-day site operation.
  • Contract when you ask us to send something or respond to a request.
  • Legal obligation when the law requires recordkeeping or disclosure.

How long we keep it

  • Form submissions and email threads: while the conversation is active, then up to 24 months after the last contact.
  • Venture-brief requests and scheduling records: up to 24 months after the last contact.
  • Server logs: 30 days.
  • Marketing opt-ins: until you unsubscribe or we shut the list down.

If you ask us to delete your information sooner, we will, unless the law requires us to keep it.

Service providers

We keep the stack small.

  • Hosting and site delivery: Railway for the public site and chat server.
  • Scheduling: Google Calendar appointment pages when you book a call.
  • AI chat: Anthropic processes chat messages and conversation context to generate replies.
  • Form and email delivery: the live provider behind the contact or brief-request flow when you send us a message.

We do not run ad tech. We do not run third-party analytics or third-party error monitoring on the public site at launch.

If we add a provider that changes what we collect, we will update this page before that change ships.

We may also disclose information if the law requires it or if we need to protect our rights, property, or safety.

Where data is processed

We and our service providers operate in the United States. Some providers may process data in other regions that support their service. When a provider handles cross-border transfers, we rely on the contractual protections that provider offers for that transfer.

Your rights

Depending on where you live, you may have the right to:

  • Ask what we have about you.
  • Ask us to correct it.
  • Ask us to delete it.
  • Ask us to export it.
  • Object to or restrict some uses.
  • Withdraw marketing consent.
  • Complain to your local privacy regulator.

To make a request, write to kyle@grunion.ai. We reply within 30 days. We may ask you to verify your identity first.

Cookies

  • Strictly necessary: a first-party cookie that stores your consent choice for 12 months. To limit chat abuse, we keep the daily hashed visitor identifier described in Chat with Grunion on our server, not in a cookie.
  • Attribution and analytics, opt-in only: a first-party record of which link brought you to the site, kept for the current browser session, and first-party analytics that count page visits. Neither runs until you select Accept in the cookie banner.
  • Marketing: none. We run no third-party ads or trackers.

To change your choice, select Cookie settings in the site footer. You can also block cookies in your browser.

Children

This site is not for people under 16. We do not knowingly collect information from anyone under 16. If you think we did, write to kyle@grunion.ai and we will delete it.

Security

We use access controls, encryption in transit, and limited access to submissions. No system is perfect. If we learn about a breach that requires notice, we will notify the affected people and the relevant authorities as the law requires.

Changes to this policy

If we make a material change, we will update the date at the top of this page and publish the new version here.

Contact