Privacy policy

Beepgrid operates the Beepgrid website and managed service. This policy explains how we use personal information when you visit our website or use a hosted workspace. Questions or privacy requests can be sent to support@beepgrid.com.

Information we process

When you sign in with Google, we receive your account identifier, name and verified email address. Basic Google sign-in does not grant access to your Gmail, Drive or organization directory. Email sign-in uses your email address and a short-lived verification code.

We store account and workspace membership, configuration, conversations, messages, approval decisions and uploaded files to provide the service. We also process operational information such as request timestamps, connection and delivery status, and security logs to troubleshoot problems, protect the service and measure usage. If you contact us, we use the information you provide to respond.

How information is shared

Messages and files are available to recipients and workspace members according to configured access permissions. Workspace administrators manage membership and access. Agents and integrations you connect may receive the content you send to them.

When Coordinator is enabled, relevant authorized conversation and agent context is sent to the model provider configured for that workspace. Your connected model and channel providers process information under their own terms and privacy policies.

Our hosted app uses Fly.io infrastructure and a Supabase-hosted PostgreSQL database. Cloudflare hosts this public website. Resend delivers transactional emails, including sign-in codes and workspace invitations. These providers process the information needed to supply their services. Data may be processed outside your country.

Paddle, our merchant of record, processes payment details. We receive the billing contact information, transaction references and subscription status needed to manage your plan. We do not receive or store full payment-card details. See Paddle’s privacy notice for its payment processing practices.

Purposes and safeguards

We process information to provide the service you request, maintain and secure it, provide support, and meet legal obligations. Where applicable, our legal bases include performing our agreement with you, legitimate interests in reliable and secure operation, legal obligations, and consent where required.

Private provider settings and credentials remain on the server. Authorization controls restrict access to workspace information. No system can guarantee absolute security. Do not send credentials or sensitive information that is unnecessary for the conversation.

Cookies and browser storage

We use essential session cookies for sign-in and browser storage for interface preferences. This website does not use advertising trackers. Your browser lets you manage cookies and stored data; disabling essential cookies may prevent sign-in.

Public website analytics

We use Umami Cloud to understand visits to our public landing page. Measurements include referral sources, general browser and device information, sections reached, scrolling, link clicks and time spent actively viewing sections. Reading time is an estimate; it does not tell us whether someone understood the content. Umami collection is limited to the landing page, not our documentation, workspace or open source software. Our custom events do not contain form contents or private conversations. We do not enable session recordings or identify visitors by their account details. Cloudflare also provides website traffic metrics.

You can exclude this browser from Umami landing page analytics or enable it again. These links return to the landing page and store your choice locally in your browser. We also respect supported browser Do Not Track and Global Privacy Control signals for Umami collection. Umami describes its service in its privacy policy.

Retention and your choices

We retain account and workspace information while needed to provide the service and address support, security or legal requirements. Uploaded files support asynchronous delivery and conversation history. They do not disappear simply because someone has viewed them. Configurable retention for sent files is not yet available.

You can sign out and revoke connected credentials through the workspace. Depending on applicable law, you may request access, correction, export or deletion of your personal information, object to certain processing, withdraw consent where processing relies on it, or complain to the relevant authority. Contact support@beepgrid.com. We may need to verify your identity before acting.

For information controlled by an organization, contact its workspace administrator first; we can help route the request. Account closure or deletion may be subject to limited retention for legal obligations, security investigations and backup recovery cycles. We will explain any applicable restrictions when handling your request.

Self-hosting and updates

If you self-host Beepgrid, your operator controls that deployment and its data. This policy covers information we process through our own website and managed service, not information that stays solely in your self-hosted installation.

We will update this page as the service changes and provide notice of material changes where required. The effective date appears above.

Contact

Privacy requests: support@beepgrid.com.