Privacy Policy

GRIIDS.AI

Effective Date: September 1, 2025 | Last Updated: September 30, 2026

1. Who We Are and What This Policy Covers

This Privacy Policy (this "Policy") is between you and GRIIDS Inc. ("GRIIDS," the "Company," "we," "us," or "our"), a Delaware corporation, wholly owned by Kootanla Services LLC, an Illinois limited liability company operating under the assumed name and doing business as Kootanla. griids.ai, including any earlier address of ours that redirects to it (the "Site"), is a Software as a Service (SaaS) web application owned and operated by the Company. You can contact us at griids@kootanla.com or info@kootanla.com or through the contact form on the Site.

This Policy describes how we collect, use, share, store, and protect personal data when you visit or use the Site, register for an account, subscribe to a Plan, or use features such as Docket Tracker, Docket Search, Ask, and Doc Parser. It applies in addition to our Usage Terms and Conditions (the "Terms"); capitalized terms not defined here have the meaning given in the Terms.

The Site is designed for business and professional use. If you use the Site through an account provided by your employer or another organization, that organization may also have access to information about your use of the Site, and its own policies may apply.

The purpose of this Policy is to inform users of the Site of the following:

  1. The personal data we collect;
  2. How we use collected data;
  3. Who has access to the data collected;
  4. How long we keep it and how we protect it;
  5. The rights of Site users; and
  6. The Site's cookie policy.

By using the Site, you agree that you consent to the conditions set out in this Policy and to the collection, use, retention, and disclosure of the data described in it. Where we rely on your consent, you may withdraw it as described in Sections 11 and 12, although doing so may prevent us from providing the Site to you.

3. Personal Data We Collect

We only collect data that helps us achieve the purposes set out in this Policy. We will not collect any additional categories of data beyond those listed below without updating this Policy first.

Data Collected Automatically

When you visit and use the Site, we automatically record the following:

  1. IP address and browser type, recorded in our server logs for security and operational purposes (for example, to detect abuse, diagnose errors, and protect accounts);
  2. Features used and how often, so that we can apply the usage limits of your Plan and understand which features to improve; and
  3. Theme and other preferences that you set, which are stored on your account so that they apply when you sign in.

We do not collect precise geolocation, and we do not track the individual links you click or the specific content you view for advertising or profiling purposes.

Data Collected When You Use the Site

We also collect the following data when you perform certain functions on the Site:

  1. First name;
  2. Last name;
  3. Email address (a work email address for accounts created from 30 September 2026);
  4. Company or organization name;
  5. Industry or sector;
  6. Job title;
  7. Country and state or region;
  8. How you heard about GRIIDS;
  9. Ask: the questions you ask, the answers you receive, and any feedback you give on them;
  10. Doc Parser: the documents and links you submit, the instructions you provide, and the tables and other results produced;
  11. Billing: your payment status, subscription details, and the customer and transaction identifiers assigned by our payment processor. We never store your card number or other card details; these are entered on, and held by, our payment processor's secure pages (see Section 6); and
  12. Communications: the content of messages you send us by email or through the contact form, and our correspondence with you.

This data is collected through the account sign-up form, your account settings, the paid subscription checkout, and your use of the relevant features. Accounts created before 30 September 2026 may also have provided a phone number, a city and a job description on the earlier sign-up form; that information stays on the account until you ask us to remove it. Documents you submit to Doc Parser and questions you ask through Ask may themselves contain personal data; the Terms require that you do not submit personal data about other people except where strictly necessary and lawfully permitted.

4. How We Use Collected Data

Data collected on the Site will only be used for the purposes specified in this Policy or indicated on the relevant pages of the Site. We will not use your data beyond what we disclose in this Policy.

We use the data we collect for the following purposes:

  • To create and administer your account and deliver the Site, its features, and its services to you, including generating Ask answers and Doc Parser results from what you submit;
  • To apply the limits of your Plan, process payments, and manage subscriptions, trials, and billing;
  • To secure the Site, prevent fraud and abuse, and enforce our Terms;
  • To operate, evaluate, and improve the Site and its features, including the quality of the AI Features, and to develop new products, services, and features;
  • To communicate with you about the Site, your account, and your use of the Site, including service notices, security alerts, billing messages, and responses to your requests; and
  • To comply with legal obligations and protect our legal rights.

Marketing communications. We may use your contact information to tell you about products, services, or features that we believe may be of interest to you. You can unsubscribe from marketing emails at any time using the link in the email or by contacting us. While you have an account with us, we will continue to send you service communications related to your account and the Site, which are not marketing and cannot be opted out of while your account remains open.

5. Who We Share Personal Data With

We do not sell your personal data, and we do not share it with third parties for their own advertising or marketing.

Employees and Contractors

We may disclose user data to members of our organization, and to contractors working for us, who reasonably need access to it to achieve the purposes set out in this Policy. All such persons are bound by confidentiality obligations.

Service Providers

We share data with the third-party service providers that we use to operate the Site, as described in Section 6, and only to the extent needed for them to provide their services to us.

Other Disclosures

We will not otherwise share your data with third parties, except in the following cases:

  1. If the law requires it, including in response to a subpoena, court order, or lawful request from a public authority;
  2. If it is required for any legal proceeding;
  3. To establish, exercise, or defend our legal rights, or to protect the safety, property, or rights of the Company, our users, or others;
  4. To a buyer, potential buyer, investor, or successor of the Company (and their advisers) in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business or assets, subject to appropriate confidentiality protections; and
  5. With your direction or consent.

If you follow hyperlinks from the Site to another website, please note that we are not responsible for and have no control over that website's privacy policies and practices. If we transfer user personal data, we will protect that data as described in this Policy and comply with applicable legal requirements for transferring personal data.

6. Third-Party Services

We use the following third-party service providers to operate the Site. Each receives only the data needed to provide its service to us, and processes that data under its own terms and privacy policy, which we require to limit its use of the data to providing the service to us.

Provider Service to us Data it receives
Amazon Web Services (AWS) Hosting, data storage, and email delivery All data stored or processed by the Site, including account data, Uploaded Content, saved sessions, and server logs; email addresses and message content for emails we send
Stripe Subscription billing and payment processing Name, email address, billing details, and payment status. Card details are entered directly on Stripe's hosted checkout and billing-portal pages and are held by Stripe; we receive only payment status and customer and transaction identifiers
Anthropic Language models that power Ask and Doc Parser The questions you ask, the documents, links, and instructions you submit to Doc Parser, and the context needed to generate answers and results
Voyage AI Text embeddings and re-ranking used to find relevant filings and passages The text of your queries and of documents and passages being searched or ranked
Brave Search Optional web search used by Doc Parser to find documents for a request The search query only, and only when a web search is performed for your request

No analytics or advertising tracking. We do not use Google Analytics, and we do not use any advertising, behavioral-tracking, session-recording, or cross-site tracking tools on the Site.

We may add or replace providers from time to time. Where a change means a new category of provider receives your personal data, we will update this Section before the change takes effect. By using the Site, you consent to our providing your data to these providers to be used in accordance with this Policy.

7. How Long We Store Personal Data

We keep personal data only for as long as needed for the purpose it was collected, unless a longer period is required by law. In particular:

  • Account data (name, contact details, organization, job information, preferences) is kept while your account is open and for a reasonable period after it is closed, to resolve any outstanding matters and to comply with our legal obligations.
  • Ask questions, the answers you receive, and any feedback you give are retained so that we can operate, evaluate, and improve the service. Contact us if you would like them deleted.
  • Doc Parser sessions that you do not save are deleted automatically twenty-four (24) hours after they are created, together with the documents, links, and instructions in them.
  • Doc Parser sessions that you save are kept until you delete them or your account is closed.
  • Server logs (IP address, browser type, and request details) are kept for a limited period for security and operations and then deleted or anonymized.
  • Billing records are kept for as long as required by tax, accounting, and other applicable law.

When personal data is no longer needed, we delete it or anonymize it. Copies may persist in backups for a limited period before they are overwritten.

8. How We Protect Your Personal Data

We use industry-standard safeguards to protect your data, including encryption in transit between your browser and the Site (HTTPS/TLS), storage on servers in secure facilities operated by our hosting provider, access controls, and sign-in cookies that are cleared when you sign out. Members of our product and data teams may access data for business operations, and all team members and contractors are bound by confidentiality obligations.

While we take reasonable precautions to keep user data secure, no method of transmission over the Internet or of electronic storage is completely secure, and we cannot guarantee the security of user data beyond what is reasonably practical. By using the Site, you (a) acknowledge this risk and consent to our processing your data as described in this Policy notwithstanding it; (b) to the extent permitted by law, waive any claim against us relating to the interception, use, or disclosure of your data by third parties not authorized by us, except where caused by our failure to apply reasonable safeguards; and (c) agree to notify us promptly at griids@kootanla.com or info@kootanla.com if you suspect any unauthorized access to your account or data.

For more information on protecting your privacy, please visit www.ftc.gov/privacy.

9. Where Your Data Is Processed

We are based in the United States, and the Site and our service providers store and process data in the United States. If you access the Site from outside the United States, you understand that your data will be transferred to, stored in, and processed in the United States, where privacy laws may differ from those of your jurisdiction, and you consent to that transfer.

10. Children

To access or use the Site, you must be at least 18 years old and have the requisite power and authority to understand and consent to the practices described in this Policy. We do not knowingly collect or use personal data from children under 13 years of age. If we learn that we have collected personal data from a child under 13, we will delete it as soon as possible. If a child under 13 has provided us with personal data, their parent or guardian may contact us at griids@kootanla.com or info@kootanla.com for support with the matter.

11. How to Access, Correct, Delete, or Challenge Your Data

You can view and update your name, contact details, and preferences at any time under Settings on the Site, and you can delete saved Doc Parser sessions from within the feature.

If you would like to know whether we have collected your personal data, how we have used it, whether and to whom we have disclosed it, or if you would like a copy of your data, or would like it corrected or deleted, please contact us at griids@kootanla.com or info@kootanla.com or through the contact form on the Site. There is currently no self-service export or account-deletion tool on the Site; these requests are handled by our team.

We will acknowledge your request and respond within thirty (30) days, or within any shorter period required by applicable law. We may need to verify your identity before acting on a request, and we may retain certain data where the law requires it or where we need it to complete a transaction, secure the Site, or establish or defend legal claims. Deleting your data may mean closing your account.

Depending on where you live, you may have additional rights under applicable privacy law, including the right to lodge a complaint with a supervisory authority. We will not discriminate against you for exercising any of your rights.

12. How to Opt Out of Data Collection, Use, or Disclosure

GRIIDS collects only the minimal amount of data necessary to operate, secure, and improve the Site. Beyond the information you provide during sign-up and use of the features, we record limited technical data (IP address and browser type in server logs, and which features you use and how often) to run the Site, apply Plan limits, and improve the service.

We do not sell personal data, and we do not share it with third parties for advertising. Access to user data is limited to the personnel and service providers described in Sections 5 and 6.

Because this limited collection is essential to the operation of the Site, we currently do not provide a mechanism to opt out of it while keeping an account. If you do not wish your data to be collected in this way, you may stop using the Site and ask us to close your account and delete your data (Section 11). You can opt out of marketing emails at any time (Section 4), and you can control cookies through your browser (Section 13), although disabling the sign-in cookies will prevent you from signing in.

The Site does not respond to browser "Do Not Track" signals, because the Site does not engage in the cross-site tracking those signals are designed to address.

For any questions or concerns about data collection or handling, you may contact us at griids@kootanla.com or info@kootanla.com.

A cookie is a small text file that a website stores in your browser. Cookies can be used for many purposes, from keeping you signed in to tracking your browsing habits across sites. We use cookies only for the first of these.

Cookies We Set

The Site sets two cookies, both of which exist only to keep you signed in:

Cookie Purpose Set when Removed when
authToken Identifies your signed-in session so that you do not have to sign in on every page You sign in You sign out, or the session expires
authTokenAdmin Identifies a signed-in administrator session; set only for administrator accounts An administrator signs in The administrator signs out, or the session expires

These are strictly necessary cookies: the Site cannot keep you signed in without them. If you block or delete them, you will be signed out and will not be able to use your account.

Local Storage

Your display preferences, such as the theme you select, are kept in your browser's local storage so that they apply immediately when you return. This information stays in your browser and is not used to track you.

Cookies We Do Not Use

We do not use analytical, performance, targeting, advertising, or third-party cookies on the Site, and we do not use any tracking pixels or similar technologies.

Stripe's Hosted Pages

When you check out or open the billing portal, you are taken to pages hosted by Stripe on Stripe's own domain. Those pages set their own cookies, which are governed by Stripe's cookie and privacy policies rather than by this Policy.

You can set your browser to notify you when a cookie is set or to refuse cookies entirely; doing so will prevent you from signing in to the Site.

14. Modifications

We may amend this Policy from time to time to maintain compliance with the law and to reflect changes to our data practices. When we amend this Policy, we will update the "Last Updated" date at the top of it and, where the change materially affects how we use your personal data, notify account holders by email or by a notice on the Site before the change takes effect. We recommend that you review this Policy periodically. Your continued use of the Site after a change takes effect constitutes acceptance of the amended Policy.

15. Limitation of Warranties

We make no representations, warranties, or promises about the security of your data except as stated expressly in this Policy or where required by law. The disclaimers and limitations of liability in the Terms apply to this Policy.

16. Contact Information

If you have any questions, concerns, complaints, or comments about this Policy or our handling of your data, you can contact us at:

GRIIDS Inc., a Delaware corporation, wholly owned by Kootanla

Email: griids@kootanla.com or info@kootanla.com

You can also contact us through the contact form available on the Site.