Grumbleo Privacy Policy

1. Introduction

Grumbleo ("Grumbleo," "we," "us," or "our") provides a business-facing platform that helps organizations manage customer complaints, improve operational workflows, and leverage AI-assisted insights.

This Privacy Policy describes how we collect, use, disclose, and protect personal information through our website, applications, and services (collectively, the "Service").

By using the Service, you agree to the practices described in this Policy.

2. Definitions

• "Business Customer" means an entity using Grumbleo to manage customer complaints or internal feedback.
• "Complaint Data" means customer-submitted or business-submitted information relating to complaints, interactions, or incidents.
• "Personal Data" means any information relating to an identified or identifiable individual.
• "AI Output" means insights, classifications, summaries, predictions, or recommendations made using automated systems.

3. Information We Collect

We may collect the following categories of information:

3.1 Contact & Account Information

• Name, email, phone number
• Business name and profile
• Login credentials

3.2 Complaint Data (Submitted by Business Users)

This may include:

• Customer names
• Complaint descriptions
• Transaction details
• Location data
• Attachments

Business Customers are responsible for ensuring they have legal rights to upload this information.

3.3 Device & Technical Data

• IP address
• Browser type
• OS
• Usage logs
• Time stamps
• Error reports

3.4 Analytics & Cookies

We use tools such as Google Analytics and similar tracking technologies to collect:

• Page views and visit duration
• Referral sources
• Engagement patterns

See Section 13 for full cookie details.

4. How We Use Information

We may use collected information to:

• Provide, maintain, and improve the Service
• Authenticate users and secure accounts
• Analyze usage trends and optimize platform performance
• Deliver user support
• Develop new features
• Communicate administrative updates
• Enforce policies and prevent misuse
• Comply with legal and regulatory obligations

5. AI & Automated Processing

Grumbleo may use automated tools to analyze complaint data and generate AI-assisted insights.

We DO:

• Use anonymized and aggregated data to improve system intelligence
• Use AI to classify, summarize, and analyze complaint patterns

We DO NOT:

• Train models on identifiable personal information
• Sell or rent personal data
• Make automated decisions with legal or similarly significant effects

Human Review Requirement

AI Output is advisory only and may be incomplete or incorrect. Businesses retain full responsibility for decisions made using AI Output.

6. Legal Basis for Processing (Where Required)

For jurisdictions requiring a lawful basis (e.g., California, Colorado, GDPR-equivalent laws), we rely on:

• Contract necessity: To deliver the Service
• Legitimate interests: Platform security, service improvement
• Legal obligations: Compliance with applicable law
• Consent: For optional communications or analytics where required

7. Data Controller / Processor Roles

• Business Customers are the Data Controllers of Complaint Data.
• Grumbleo acts as a Data Processor on behalf of Business Customers.

We process Complaint Data only according to our Customers' instructions. A Data Processing Addendum (DPA) is available upon request.

8. Sharing of Information

We may share information with:

8.1 Service Providers

Vendors supporting:

• Hosting
• Analytics
• Security
• Email delivery
• Integrations
• Customer support

Service providers may only use data as necessary to support Grumbleo.

8.2 Legal & Safety

We may disclose information if required to:

• Comply with legal obligations
• Respond to lawful requests
• Prevent fraud, abuse, or security threats

8.3 No Sale or Rent of Personal Data

We do not sell, rent, or share personal information for cross-context behavioral advertising.

9. User Responsibilities & Prohibited Content

Users may not submit:

• Illegal, defamatory, or fraudulent information
• Financial account numbers, SSNs, or PHI without authorization
• Information about minors
• Sensitive data prohibited by law
• Copyright-infringing content

Users are responsible for ensuring that Complaint Data was lawfully collected and disclosed to Grumbleo.

10. Data Retention

We retain personal information only as long as necessary for:

• Service delivery
• Customer relationships
• Legal and regulatory requirements
• Platform integrity

When retention is no longer necessary, data is securely deleted or anonymized.

11. International Data Transfers

Our systems may store or process data in the United States or other regions where our service providers operate.

We implement appropriate safeguards for cross-border transfers where required.

12. Data Security

Grumbleo uses industry-standard measures to secure data, including:

• Encryption in transit and at rest
• Access controls
• Logging and monitoring
• Regular vulnerability assessments

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Cookies & Tracking Technologies

We use cookies to:

• Authenticate sessions
• Remember preferences
• Analyze traffic patterns
• Improve user experience

Users may manage cookie preferences through browser settings.

Do Not Track (DNT): We do not currently respond to DNT signals.

14. Your Privacy Rights

Depending on your jurisdiction, you may have rights to:

• Access personal information
• Correct inaccuracies
• Delete personal information
• Opt-out of data sharing (even if we do not sell data)
• Request a copy of your data

California and other state residents may exercise rights by contacting us at support@grumbleo.com.

15. Children's Privacy

The Service is not intended for individuals under age 16.

We do not knowingly collect data from children.

16. Breach Notification

In the event of a data breach, we will notify affected parties according to:

• Florida Information Protection Act (FIPA)
• Applicable U.S. state data breach laws

17. DMCA Policy

If you believe user-submitted content infringes your copyright, send a takedown notice to:

DMCA Agent
Email: support@grumbleo.com

Include required DMCA elements.

18. Third-Party Services & Integrations

The Service may integrate with third-party applications such as:

• POS systems
• CRM systems
• Email tools
• Cloud storage platforms

We are not responsible for third-party security, availability, or data handling.

19. Limitation of Liability

To the maximum extent permitted by law:

• The Service is provided "AS IS" and "AS AVAILABLE."
• We disclaim all warranties, express or implied.
• Grumbleo's total liability will not exceed the fees paid to us in the preceding 12 months.

20. Arbitration & Class Action Waiver

Any disputes shall be resolved through binding arbitration in Miami-Dade County, Florida, and:

• You waive the right to a jury trial
• You waive participation in class actions or class arbitration

21. Changes to This Policy

We may update this Privacy Policy from time to time.

We will notify users of material changes via email or platform notice.

Continued use of the Service constitutes acceptance of the updated Policy.

22. Accessibility

Grumbleo strives to maintain compliance with WCAG 2.1 accessibility standards.

For accessibility concerns, contact legalonline@grumbleo.com.

23. Governing Law

This Policy is governed by the laws of the State of Florida, without regard to conflict-of-law principles.

24. Contact Us

For privacy questions or requests:
legalonline@grumbleo.com