Privacy Policy

Last updated: 1 June 2025

Grounded ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights — in plain language.

1. Who We Are

Grounded is an AI-powered interview coaching and resume building platform. We are based in Singapore and operate under Singapore law, including the Personal Data Protection Act 2012 (PDPA).

Questions? Email us at [email protected]

2. What We Collect

Account & authentication data

  • Name, email address, and profile picture (from Google OAuth when you sign in)
  • Your chosen display name and plan tier

Resume data

  • Resume files (PDF or DOCX) you upload — stored securely on our servers
  • Parsed resume content (name, work experience, education, skills, projects)
  • AI-generated feedback and suggestions associated with your resumes

Interview session data

  • Audio recorded during practice sessions (used only for transcription and scoring, not stored long-term)
  • Session scores, rubric evaluations, and coaching reports
  • Camera frames used for body language scoring (processed in real-time, not stored)

Usage data

  • Pages visited, features used, timestamps, and error logs (for improving the service)
  • Browser type, device type, and approximate location (country/city level)

Payment data

  • Payment is handled entirely by Stripe. We never see or store your card details. We store your Stripe customer ID and subscription status to manage your access tier.

3. How We Use Your Data

  • To provide the service — processing your resume, generating AI feedback, running interview sessions, and showing your history.
  • To improve Grounded — aggregate, anonymised usage analytics help us improve features and fix bugs. We do not sell individual data.
  • To communicate with you — transactional emails (e.g., password reset, subscription receipts). We do not send marketing emails without your explicit consent.
  • To comply with law — if required by Singapore law or a valid legal order.

4. AI Processing

Your resume content and session transcripts are sent to our AI inference provider (Groq) to generate feedback. This data is processed transiently and is not used to train Groq's models. We do not share identifiable personal data with AI providers beyond what is necessary for inference.

5. Data Retention

  • Account data — kept until you delete your account.
  • Resume files and parsed data — kept until you delete them or your account. Free accounts are limited to 3 stored resumes.
  • Session recordings (audio) — deleted immediately after transcription. Scores and reports are retained in your history.
  • Usage logs — retained for up to 90 days for debugging purposes.

6. Sharing Your Data

We do not sell your data. We share data only with:

  • Groq — AI inference for resume feedback and interview scoring
  • Stripe — payment processing
  • Google — authentication via OAuth 2.0
  • Resend — transactional email delivery

All sub-processors are contractually bound to process data only as instructed and to maintain appropriate security measures.

7. Cookies & Tracking

We use a single session cookie to keep you logged in. We do not use third-party advertising cookies or fingerprinting. We may use simple, privacy-preserving analytics (no identifiable data sent to third parties).

8. Your Rights (PDPA)

Under the PDPA, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — ask us to correct inaccurate data
  • Withdrawal of consent — withdraw consent for any purpose and we will stop processing for that purpose
  • Deletion — delete your account (and associated data) from the Account page or by contacting us

To exercise any of these rights, email [email protected]

9. Security

We use HTTPS for all data in transit, encrypt sensitive fields at rest, and limit access to your data to authorised personnel only. Resume files are stored with access controls tied to your account.

10. Children

Grounded is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe we have inadvertently collected such data, please contact us immediately.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or by a banner on the platform. Continued use after the effective date constitutes acceptance.

12. Contact

For any privacy questions or data requests:

Email: [email protected]
Or use our contact form