Privacy Policy
Last updated: 25 July 2026
This is a good-faith summary for the beta, not legal advice.
Who we are
Grand Pawn (Newark, New Jersey, US) is the controller of your data. Contact: contact@grandpawn.io.
Data we collect
Account data (email and password, or Google sign-in); waitlist data (email and role); mission data and evidence (photos, video and voice notes, which may include people or locations); reasoning traces of each mission; and product analytics.
Location & photos
Evidence photos have their GPS and other EXIF metadata stripped on your device before upload, unless you explicitly choose to keep location for a given item. Media is stored privately and served only through short-lived signed links.
How we use your data
To provide and secure the service, to generate copilot outputs, to improve the copilot (traces are anonymized when used for training), and to understand product usage via analytics.
Sub-processors
We rely on: Supabase (database, auth, storage), Vercel (web hosting), Render (agent hosting), PostHog (analytics), and OpenRouter / OpenAI / Anthropic (AI inference). Payments, when enabled, use Stripe.
Your rights
You consent at sign-up and can withdraw it. You may request a copy of your data or its deletion by writing to contact@grandpawn.io; deletion cascades your organization's data and stored media.
Changes & contact
We may update this policy and will note the date above. For any privacy question, contact contact@grandpawn.io.