This policy explains what information Grimpe collects, how we use it, and the choices you have. It applies to our website at grimpe.ai and to the Grimpe app at app.grimpe.ai (together, the "Service").
Grimpe is operated by Gökmen Çağlar, Türkiye ("Grimpe", "we", "us"). You can reach us about anything in this policy at support@grimpe.ai.
Information we collect
Information you give us
- Account details: your name, email address and password. We store passwords only as a one-way hash.
- Workspace content: the domains, page URLs, prompts, brand names, drafts and other content you add to a workspace or ask us to analyze, rewrite or generate.
- Messages and requests: what you send when you book a demo, run a free scan on our website or contact us, such as your name, email address, company and domain.
Information we fetch on your behalf
- Public web data: the public pages of the sites you track and of their competitors, search results for your prompts, and the answers AI engines give to those prompts.
- Google Analytics data: only if you connect Google Analytics. The next section describes exactly what we read and how we treat it.
Information collected automatically
- Server logs: IP address, browser type, pages requested and timestamps, used to keep the Service secure and to fix errors.
- Website analytics: only if you accept cookies in the banner on grimpe.ai, Google Analytics records how visitors use the website, such as pages viewed, the referring site, device type and approximate location.
- Cookies: see the Cookies section below.
Google user data
Connecting Google Analytics is optional. You can use Grimpe without it.
What we access
When you connect, Google asks you to grant Grimpe one permission: read-only access to your Google Analytics data (analytics.readonly). With it we:
- list the Google Analytics accounts and properties you can access, so you can choose which property to connect; and
- read a daily report for the property you chose, containing the traffic source and channel of each session (for example organic search, direct, social or an AI assistant), the page it landed on, the date, and the number of sessions and page views.
These reports are aggregated counts. They contain no information about individual visitors to your website. We cannot change anything in your Google Analytics account.
How we use it
We use Google Analytics data only to show you where your website's visits come from, such as AI engines (for example ChatGPT, Perplexity, Gemini and Claude), search engines, social networks and other websites, and which of your pages they land on, in the Traffic and Monitoring views of your workspace. We do not use it for any other purpose.
How we store and protect it
The access and refresh tokens Google issues are encrypted before we store them. The reports are stored in our database on servers in Helsinki, Finland, operated by Hetzner Online. All traffic between your browser, our servers and Google is encrypted in transit.
Who can see it
Google Analytics data is visible only to the members of the workspace it was connected to. We do not sell it, we do not use it for advertising, and we do not share it with anyone, except when the law requires us to. It is never sent to an AI model or a third-party AI provider, and it is never used to train AI models.
Limited Use
Grimpe's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting and deletion
You can disconnect Google Analytics at any time in Settings, Integrations. When you do, we revoke our access at Google and delete the stored tokens immediately. You can also remove Grimpe's access from your Google Account permissions page. Traffic reports that were already imported stay in your workspace so your history is not lost. To have them deleted, delete your account or email us and we will delete them within 30 days.
How we use information
- To provide the Service: scanning your pages, measuring how AI engines cite you, simulating answers, and rewriting or generating content you ask for.
- To run your account, answer your requests and send messages about the Service.
- To keep the Service secure, prevent abuse and fix problems.
- To improve the Service, using workspace data in aggregate. We never use Google Analytics data for this.
We do not sell personal information, and we do not show ads.
AI providers and other service providers
To provide the Service we work with these providers. Each receives only what it needs for its task.
- Hetzner Online (Finland): hosting of the Grimpe app and its database.
- Vercel (United States): hosting of this website.
- Google Analytics (United States): visit statistics for this website, only with your consent.
- Google Workspace (United States): our email.
- OpenAI, Anthropic, Google (Gemini API) and Perplexity (United States): AI models that analyze and write content, and AI engines whose answers we measure. They receive prompts and page content, never Google Analytics data.
- Serper (United States): search results for your prompts.
Some of these providers process data outside your country, including in the United States. Where the law requires it, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Cookies
The Grimpe app uses two strictly necessary cookies: one keeps you signed in and one protects your requests against cross-site forgery. Both expire after 24 hours.
Our website, grimpe.ai, uses Google Analytics cookies (_ga and _ga_*) only if you choose Accept in the cookie banner. They help us analyze site traffic, count visits and see which pages are useful, so we can improve the website and your experience. They last up to 2 years. If you choose Reject, Google Analytics is not loaded at all. We remember your choice in your browser's local storage, not in a cookie. You can change your choice at any time: change your cookie choice, or use the Cookies link at the bottom of every page. We do not use advertising cookies.
The website also loads fonts from Google Fonts, which means your browser shares its IP address with Google when it downloads them.
How long we keep information
We keep your account and workspace data for as long as your account is open. When you delete your account, or ask us to delete your data, we delete it within 30 days, unless the law requires us to keep part of it longer. Server logs are kept only as long as needed for security and debugging.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict how we use it. To use any of these rights, email support@grimpe.ai. We will answer within 30 days. You also have the right to complain to your local data protection authority.
Children
The Service is built for businesses and is not meant for anyone under 16. We do not knowingly collect information from children.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change is significant, we will also tell you by email or in the app before it takes effect.
Contact
Questions about this policy or about your data: support@grimpe.ai.