Privacy Policy

Last updated: March 21, 2026

This Privacy Policy describes how Grarose ("we," "us," or "our") collects, uses, and protects information when you use our software products, including Grarose AIO and Grarose AIE (collectively, the "Services"), and when you visit grarose.com.

By using our Services, you agree to the collection and use of information in accordance with this policy.

Information We Collect

We collect information you provide directly to us when you create an account or use our Services:

• Account information — your name, email address, and password when you register
• Business profile — your business name, phone number, address, trade/specialty, and license number
• Business data — quotes, invoices, customer records, job schedules, and price book entries you create within the Services
• Payment method information — payment links and handles you add to your profile (we do not store credit card numbers or process payments directly)
• Communications — messages you send through our support channels

We also collect certain information automatically when you use our Services:

• Log data including your IP address, browser type, pages visited, and timestamps
• Device information including hardware model and operating system

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Services
• Send transactional emails and SMS messages on your behalf to your customers
• Send you account notifications, updates, and support communications
• Monitor usage and diagnose technical issues
• Comply with legal obligations

Your Customer Data

As a contractor using Grarose, you may enter information about your customers (names, phone numbers, email addresses) into the Services. You are responsible for ensuring you have appropriate consent to store and use your customers' information within the platform.

We do not use your customer data for any purpose other than providing the Services to you. We do not sell your customer data to third parties.

SMS Communications

Grarose sends SMS messages on behalf of contractors to their customers. These messages are transactional in nature (quote notifications, invoice reminders, payment confirmations). For more information on how consent is collected for SMS, see our SMS Consent Policy.

Data Storage and Security

Your data is stored securely using Supabase, a cloud database platform. We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Third-Party Services

We use the following third-party services to operate the platform:

• Supabase — database and authentication
• Resend — email delivery
• Twilio — SMS delivery
• Pipedream — workflow automation

Each of these services has its own privacy policy governing how they handle data.

Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your data within a reasonable period, except where we are required to retain it for legal purposes.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and associated data
• Opt out of non-essential communications

To exercise any of these rights, contact us at admin@grarose.com.

Children's Privacy

Our Services are not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated date. Your continued use of the Services after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy, contact us at admin@grarose.com.