Privacy & Security

When you sign in with Google, we receive your email address, display name, and profile picture through Google OAuth. We do not collect or store passwords.

We also store basic usage data — the number of leads you've enriched and your account balance — to calculate billing. To understand how visitors find and use our website, and to measure our advertising, we use Google Analytics and the LinkedIn Insight Tag. These set cookies and may collect your IP address, device and browser details, and the pages you visit (see the Cookies & Tracking section below).

Your account information (email, name) is used solely for authentication and billing.

GridPull surfaces leads from public business records and, when you enrich a lead, retrieves its contact details. We use this data only to provide the lead-generation service — surfacing, scoring, and enriching prospects in your territory. Your territory and revealed leads are private to your organization and are never shared with another GridPull customer.

We do not use your data for marketing, profiling, or any purpose other than providing the service you requested.

Here's exactly what happens when you use GridPull:

1. You set your territory and the lines of business you write.
2. GridPull aggregates public business signals — new licenses, permits, formations, and federal filings — scoped to your territory.
3. An AI model scores each business for how likely it is to convert.
4. You browse the ranked leads for free; nothing is charged to view them.
5. When you choose to enrich a lead, GridPull retrieves and shows its phone, email, and decision-maker, and deducts one credit.

All data is transferred over encrypted HTTPS connections. The leads you reveal are stored only for your organization so you can return to them, and are never exposed to other customers.

Your data is never used to train, fine-tune, or improve any third-party AI model.

We use AI services to score leads for conversion and to assemble enrichment results. Data is sent to these services only to perform that processing — and is not retained by those services for model training or any other purpose.

We work with AI providers whose terms explicitly state that customer data submitted through their API is not used for model training.

We use the following third-party services:

• Google OAuth — for secure sign-in (we only receive your name, email, and profile picture)
• Google Analytics — for website usage analytics; sets cookies and shares standard analytics data with Google
• LinkedIn Insight Tag — on our marketing pages, to measure conversions from our LinkedIn ads and show relevant ads to visitors; sets cookies and shares standard analytics data with LinkedIn
• AI processing APIs — for lead scoring and enrichment (data is processed but not stored for, or used to train, third-party models)
• Stripe — for secure payment processing (we never see or store your full credit card number)

Each service is bound by its own privacy policy and data handling practices. We have selected providers that meet our standards for data protection and do not use customer data for model training.

We use cookies and browser localStorage to keep you signed in, and analytics and advertising tools to measure our website and marketing:

• Google Analytics — measures pages visited, time on site, and general geographic region; uses cookies to distinguish unique users.
• LinkedIn Insight Tag — an advertising pixel on our marketing pages that measures conversions from our LinkedIn ads and lets us show relevant ads to visitors on LinkedIn; it can recognize LinkedIn members across sites in LinkedIn's network.

You can block these cookies with your browser settings or the Google Analytics opt-out extension, and control LinkedIn ad tracking in your LinkedIn account settings.

Revealed leads: Stored privately for your organization so you can return to them, and deleted when you delete your account.

Territory & settings: Retained while your account is active so your leads stay scoped to the business you write.

Account data: Your email, name, and balance history are retained while your account is active.

Deletion requests: You may request complete deletion of your account and all associated data at any time by emailing info@gridpull.com. We will process deletion requests within 30 days.

We protect your data with the following measures:

• All data is transmitted over HTTPS with TLS encryption
• Your territory and revealed leads are isolated to your organization — never shared across customers
• API keys and credentials are stored as environment variables and never exposed to clients
• Authentication uses secure OAuth 2.0 and JWT tokens
• Payment processing is handled entirely by Stripe (PCI-compliant)
• Third-party trackers are limited to Google Analytics and the LinkedIn Insight Tag (see the Cookies & Tracking section)

If your organization requires additional security measures, compliance documentation, or a private deployment where no data leaves your network, please contact us at info@gridpull.com.

We offer dedicated infrastructure deployments for enterprise teams with strict data handling requirements.