Privacy Policy

Your data is encrypted at rest and isolated by tenant.

GridWork HQ is a cloud platform. All data is stored in Neon Postgres with row-level security (RLS) enforcing strict tenant isolation. No account can access another account’s data. Client records, pipeline outputs, financial data, and knowledge vault contents are encrypted at rest (AES-256-GCM) and in transit (TLS 1.3).

We use Sentry for error tracking. Error reports include stack traces and request metadata but never your agency data or client content.

We use Google Analytics 4 for anonymous usage statistics on this marketing website. This helps us understand how visitors find and use gridwork.dev.

We do not use cookies beyond those essential for site functionality. Google Analytics uses first-party cookies for session tracking. No advertising cookies or third-party trackers are present.

When you subscribe to GridWork HQ, your payment is processed by Stripe. We receive your email address and subscription details for account management and support purposes. We do not store your payment card details.

If you join our Discord community or contact us via email, we retain those communications to provide support.

GridWork HQ uses the following sub-processors to operate the platform:

• Neon — Postgres database hosting with tenant row-level security
• Fly.io — Pipeline server compute
• Upstash — Redis cache and queue
• Vercel — Edge hosting for the dashboard
• Stripe — Payment processing and subscription management
• Sentry — Error tracking (stack traces only, no agency data)
• Resend — Transactional email (invites, receipts)

When you connect your own AI provider keys (Anthropic, OpenAI), those keys are encrypted at rest with AES-256-GCM and are passed directly to your chosen provider via LiteLLM Router. We do not log or proxy your AI prompts or responses.