Privacy Policy
This policy explains how Konsull LLC handles information when you visit GroundBoot, use its applications or contact us.
Who is responsible
Konsull LLC, a New York limited liability company in the United States, operates GroundBoot. We determine how personal information is used for account administration, security, subscriptions and business communications. For work content processed on a customer’s instructions, including a Company or an Individual acting as a controller, that customer decides the purposes and we act as its processor or service provider under our Data Processing Addendum. A consumer’s personal or household use can have a different legal role; we remain responsible for our own processing obligations.
Contact us using the details below for a privacy request or information about the organization responsible for your data. An organization's own notices also apply to its use of a Company workspace. Separate websites and services, including the Konsull consulting website, have their own privacy information.
Information we receive
Information you provide includes your name, email, optional profile/contact details, account credentials, support requests and the content you enter or upload: work records, assignments, notes, time, expenses, locations, equipment details, photos, documents and Assistant messages. Required account fields enable registration and access; optional information depends on the features you choose.
We also receive workspace invitations, memberships, assignments and related work information from your Company or other authorized users; subscription, transaction and ownership information from payment platforms; and identity information from enabled sign-in providers. We receive network addresses, device/app identifiers, request times, session events, operational activity and error or security information when you use the service. Company records may identify an author or assignee even if someone else entered them.
How we use information
We use information to create and secure accounts, verify email, authenticate requests, control workspace access, provide and synchronize work features, process subscriptions, respond to inquiries, send requested or necessary communications, investigate faults and misuse, and maintain required business and legal records.
Where a law requires a legal basis, we rely on performance of a contract for the services you request; legitimate interests in running and securing the service, responding to inquiries and preventing fraud where those interests do not override your rights; legal obligations for required records and responses; and consent where required for an optional activity. You can withdraw consent for that activity without affecting earlier lawful processing. Withholding information necessary for a feature may prevent us from providing it.
Individual and Company information
Your login can access an Individual workspace and separate Company workspaces. A Company controls its own operational records and decides who can access them. Authorized members may see your name, assignments, work entries and other information relevant to that workspace. Its administrators do not receive your password or access to independent Individual records merely because you are a member.
Leaving a Company or deleting your login does not erase the Company's work history. Ask the organization about its retention and use of that information; you can also contact us and we will assist or route the request as appropriate. Company ownership does not remove applicable privacy rights.
Files, device features and Face ID
Evidence selected for upload is intended for workspace cloud storage. A temporary device copy may remain while an upload is pending, offline or unsuccessful; an upload failure does not mean the cloud received it. Uploaded files and their references are processed for the authorized workspace; a file selected for upload in the web app is sent to the service. Copies you export or share outside GroundBoot are controlled by you and their recipients. Removing an account cannot remotely erase every copy held on another device or in another system.
Camera, photo-library, speech and notification features use the permissions available on your device. Speech recognition may be handled by the device's platform provider; dictated text you submit becomes part of the record or message. Site addresses and manually entered coordinates are work information, not a claim that GroundBoot continuously tracks your device location.
Face ID or Touch ID checks happen through Apple's device security. GroundBoot does not receive your face image, fingerprint or biometric template. The app uses the authentication result to unlock protected local credentials or a session. You can manage device permissions and optional biometric sign-in in the app or device settings.
Assistant processing
When you ask the Assistant for a response, your message, relevant authorized work context and a bounded portion or summary of the conversation may be sent to the enabled model service. GroundBoot stores conversations, proposals, confirmed actions and usage information so you can resume work, review changes and so we can apply access and usage controls.
At this release, Assistant inference uses Qwen3 on a privately operated Konsull server, shared across our environments with request access controls. Prompts are not sent to the model publisher merely because its model software is used. Hosted OpenAI inference is supported but is not selected automatically as a fallback. Enabling an external model provider requires review of its processing terms and any required notice before private work content is sent. Contact us for the providers and safeguards relevant to your workspace. This policy does not grant a general license to use private work content to train models. Any separate use for that purpose requires its own lawful basis, notice and agreement or consent where required. Assistant suggestions do not make final decisions with legal or similarly significant effects about people on our behalf.
Google sign-in data
When Google sign-in is enabled for authorized GroundBoot staff, the openid, email, and profile scopes provide basic identity information. GroundBoot uses the account identifier, name and email to authenticate the person, enforce operator access, secure the session and record administrative actions. GroundBoot does not receive the Google account password or request Gmail, Drive, Calendar or contacts access for this sign-in, sell this identity data or use it for advertising.
Providers and other disclosures
We use GoDaddy for application/database hosting and host backups, Google Cloud Storage for uploaded files, and Google Workspace for transactional email and support communications. Google Cloud Monitoring receives operational availability data and alert contacts. The provider register describes each role. Accounts and text records remain in our hosted application databases; they are not moved into object storage. Using a cloud provider does not mean every category of information is stored by that provider. Providers receive information needed for their role, subject to applicable service and data-protection obligations.
Paid purchases are not enabled in this Free web release. When enabled later, Apple processes App Store payments under its own terms. GroundBoot receives the transaction and subscription information needed to verify entitlement, ownership and refunds, rather than your full payment-card details from Apple. Other payment or integration providers may process information you send through their enabled service and provide relevant status to GroundBoot.
We may disclose necessary information to professional advisers, in response to valid legal process, to protect people or the service, or as part of a merger, financing or business transfer subject to appropriate protections and notice where required. We do not sell personal information or share it for cross-context behavioral advertising.
Retention and deletion
We retain information for the purposes described here, considering the active account or Company relationship, the nature of the work record, subscription ownership, security needs, applicable legal duties and any specific dispute or preservation requirement. We do not keep a recoverable copy of every deleted account merely in case its email address is used again.
Account management lets you request deletion or an export of your Individual information. Retiring a login and removing active data are separate steps; queued file cleanup can continue afterward. Necessary financial, purchase-ownership, security or request-handling evidence may be retained with restricted access for its justified period. A specific legal hold can delay deletion of the affected records without justifying indefinite retention of unrelated content.
Backups and provider recovery copies expire separately under the relevant recovery schedule and may not be erased immediately when active data is deleted. Such copies are restricted to recovery and required preservation; deletion instructions must be reapplied before restored data returns to ordinary service. Ask us about the schedule or any exception relevant to your request. Company work records follow that organization's lawful instructions and obligations.
Security and international processing
We use safeguards designed to protect information, including access controls, protected credentials, encryption in transit and restricted administration. No service, device or transmission is completely secure. You also help protect your information by securing your devices, credentials and any exported copies.
GroundBoot is operated from the United States. Information may be processed there and in other countries where the relevant providers operate. Where applicable law requires safeguards for an international transfer, the arrangement must provide a valid transfer mechanism, such as applicable contractual safeguards. Contact us for the locations and transfer arrangements relevant to your service, including how to obtain details of applicable safeguards. This policy is not itself a transfer agreement or a promise of residency in a particular country.
Your choices and rights
Depending on applicable law, you may request access, correction, deletion or a portable copy of personal information; object to or restrict certain processing; withdraw consent; and appeal a decision on a privacy request. Use the available account controls or contact us below. These rights do not require a paid plan. We may verify your identity and an authorized agent's authority and explain any lawful limit or refusal. We do not discriminate against you for exercising applicable privacy rights.
You may also complain to the data-protection authority or other regulator where you live or work or where an issue occurred. We will handle requests within the time applicable law requires. If you need help identifying the responsible Company or exercising a right beyond the available product export, contact us rather than assuming the product controls are the only way to make a request.
Children
GroundBoot is intended for adult users and is not directed to children. If you believe a child has provided personal information through an account without appropriate authorization, contact us so we can investigate and take the action required by applicable law.
How to contact us
Send privacy requests, provider questions or security concerns to contact@konsull.com. You do not need an account or a paid plan to contact us. We may ask for proportionate identity or authority checks, but do not send a password, verification link or identity document in an initial email.
Policy updates
We identify changes by the date above and provide additional notice or request consent where required. A revision does not itself authorize a new, incompatible purpose for previously collected information. Earlier versions remain available below.
Contact
For questions or requests, contact Konsull LLC at contact@konsull.com.