Privacy Policy

Last updated: April 4, 2026

1. What we collect

When you use Grimoire, we collect information you provide directly: your name, email address, and any content you enter into the platform (workflow descriptions, run logs, connector configurations). If you sign in with Google, we receive your Google account email and profile name.

We also collect usage data automatically: pages visited, features used, and basic device information (browser type, operating system). We use this to improve the product.

2. How we use your data

  • To operate the Grimoire platform and run your workflows
  • To authenticate you and keep your account secure
  • To send you product updates and notifications you've opted into
  • To improve the product based on how it is used
  • To respond to support requests

We do not sell your personal data. We do not use your workflow data to train AI models.

3. Google OAuth and connected services

If you connect Google services (Gmail, Google Sheets, Google Drive, Google Calendar), Grimoire stores OAuth tokens to act on your behalf when running workflows you've configured. We access only the scopes you have explicitly authorised. You can disconnect any Google integration at any time from your Connector Hub settings.

Grimoire's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

4. Data storage and security

Your data is stored in a managed PostgreSQL database. Credentials for connected services are encrypted at rest. Workflow run logs are retained for 90 days by default.

If you self-host Grimoire, your data never leaves your own infrastructure. We have no access to data on self-hosted deployments.

5. Third-party services

Grimoire uses the following third-party services to operate:

  • Anthropic Claude API — for AI workflow compilation and LLM steps. Prompts are sent to Anthropic's API for processing.
  • Railway — backend infrastructure hosting
  • Vercel — frontend hosting

6. Your rights

You can request deletion of your account and associated data at any time by emailing us at sanjjayrj@gmail.com. You can disconnect any connected service from the Connector Hub at any time.

7. Cookies

Grimoire uses a session token stored in your browser's local storage for authentication. We do not use third-party advertising cookies.

8. Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated by email or via an in-app notice. Continued use after changes constitutes acceptance.

9. Contact

Questions about this policy? sanjjayrj@gmail.com