Legal
Gruplly is built for creators running communities, courses, and paid access. This policy explains what information we handle, why we handle it, and the systems involved.
We collect account details such as name, email address, username, avatar, and authentication metadata. When creators configure groups, we also store workspace content such as descriptions, channels, courses, media, invites, and membership records.
Gruplly does not currently offer integrated paid-community checkout or store raw card numbers and full payment credentials. When paid access is enabled, the applicable approved payment provider handles the financial transaction. Gruplly stores only the billing and entitlement records needed to confirm access and support account operations.
Authentication is handled through Auth.js with Google OAuth. Product data is stored in PostgreSQL (Neon) through Prisma. Uploaded assets may be stored in connected object storage. Operational emails may be delivered through Resend or equivalent providers configured by Gruplly.
We use data to operate accounts, authenticate users, power communities and courses, process paid access, prevent abuse, and improve product reliability. We do not sell personal information.
We retain information for as long as necessary to operate the product, meet legal obligations, resolve disputes, and support legitimate business records. If you need help with data access, correction, or deletion, contact the Gruplly team through the support channel associated with your deployment.
We may update this policy as the product evolves. Material changes should be reflected on this page before they are relied on in public launch communication.
