Privacy policy

What we collect

• Your account. Your email address and password (stored hashed by our authentication provider), and anything you add to your profile: a name, a headline, a GitHub handle and an avatar. If you sign in with Google, we receive your name, email address and profile photo from Google.
• Your work on tasks. The code you write in a task’s workspace, saved snapshots of it so you can resume, the tests you run and their results, and each submission with the checks it passed or failed.
• Workspace activity. While a task is open we record events such as starting and leaving the task, running tests, submitting, asking Pair, copying, cutting or pasting inside the editor, and switching away from the workspace tab or window and back. For copy, cut and paste we record that it happened and how many characters it involved, not the text itself. We do not record keystrokes, your screen, your camera or your microphone.
• Pair conversations. The messages you send to Pair, the AI assistant inside the workspace, and its replies.
• Technical data. IP addresses and request logs, used to keep the service secure and to apply usage limits. Your browser stores a few preferences locally (theme, saved tasks, Pair settings) and the cookies that keep you signed in. We do not use advertising or cross-site tracking cookies.
• Site visits. When you open a public page we count the visit: the page, the site or campaign link that brought you, your country and city (worked out from your IP address, which is then discarded), and your device type, browser and operating system. This sets no cookies and stores nothing in your browser, so visits are not linked to you or your account, and we cannot tell whether two visits came from the same person. Do Not Track turns it off.
• How you found us. If you sign up through someone’s invite link or enter their referral code, we record that they referred you. They see only how many people joined with their code; our team sees who joined and whether they have completed a task. If you arrive through a campaign link, we record its tags (for example the newsletter or post it came from) and the page you landed on, once, against your account.

How we use it

• To run the service: start your workspace, run your code and tests, evaluate submissions, and show you your results and history.
• To improve Groundwork. A small team can review sessions in an internal area (the timeline of events above, your code changes and Pair conversations) to find bugs, see where tasks are unclear, and make them better.
• To prevent abuse and enforce limits on how many workspaces and Pair messages one account can use.
• To contact you about your account, for example to confirm your email or reset your password.

We do not sell your data, and we do not use it for advertising. Groundwork does not score or rank you against other people.

Who processes it for us

• Supabase stores your account, work history and events, and handles sign-in.
• E2B runs each task’s isolated workspace, where your code and tests execute.
• AI model providers generate Pair’s replies (currently Groq, with Google as a fallback). Your message, the conversation so far, the task description and relevant parts of your code are sent to them for that purpose. When the Google fallback answers, Google may keep that content and use it to improve its products, including through human review.
• PostHog counts site visits for us, as described above.
• Our hosting providers serve the website and API and keep standard request logs.
• Google, only if you choose to sign in with Google.

How long we keep it

We keep your account and work history while your account exists so that you can return to it. Saved code from an unfinished task stays until you discard it or delete your account. If you delete your account, we delete your data within 30 days, except where the law requires us to keep a record.

Your choices and rights

You can update your profile in Settings at any time. You can ask us for a copy of your data, to correct it, or to delete your account and everything in it by writing to davidokunoye003@gmail.com. Depending on where you live you may have further rights, including the right to complain to your data protection authority.

Children

Groundwork is not meant for anyone under 16, and we do not knowingly collect data from them.

Changes

If we change this policy in a way that matters, we will update the date at the top and tell signed-in users before the change takes effect.

Contact

Questions about privacy: davidokunoye003@gmail.com.