Legal

Privacy Policy

Last updated: 26 March 2026  |  PLANIT Innovations UK Ltd

Grout Social is a product of PLANIT Innovations UK Ltd, registered in England and Wales. We are registered with the Information Commissioner's Office (ICO) as a data controller. This policy explains what personal data we collect, why we collect it, and how we protect it.

1. Who we are

PLANIT Innovations UK Ltd is the data controller for all personal data collected through Grout Social. Our registered address and contact details are:

PLANIT Innovations UK Ltd
Darlington, England, United Kingdom
Email: hello@getplanit.co.uk

2. What data we collect

We collect the following personal data when you use Grout Social:

We do not collect analytics data, device fingerprints, location data, or any data beyond what is necessary to provide the service.

3. How we use your data

We use your personal data for the following purposes, each with a lawful basis under UK GDPR:

4. AI-generated content

When you generate content using Grout Social, your profile information, business description, and post briefs are sent to Anthropic's Claude API to generate text. This data is processed in real time and is not stored by Anthropic beyond the duration of the request. We operate a stateless proxy — your content is not logged or retained on our servers.

Anthropic's privacy policy applies to this processing: anthropic.com/privacy

5. Zernio auto-posting

If you connect your Zernio account (Pro Connect plan), your Zernio API key is stored securely on your device using encrypted local storage. When you auto-post, your post content is sent to Zernio's API. Zernio's privacy policy applies to this processing.

6. Data storage and security

Your account data is stored in Supabase, a cloud database service hosted within the European Union. Row-level security ensures that each user can only access their own data. No user can access another user's data.

Post content, profile preferences, and app state are also stored locally on your device using encrypted AsyncStorage. This data does not leave your device except when used to generate content via the AI proxy.

Payment processing is handled entirely by Stripe. We never store, transmit, or have access to your card details.

7. Data sharing

We share your data only with the following third parties, all of which are necessary to provide the service:

We do not sell your personal data to any third party. We do not use your data for advertising purposes.

8. Your rights under UK GDPR

You have the following rights regarding your personal data:

To exercise any of these rights, email us at hello@getplanit.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data retention

We retain your personal data for as long as your account is active. If you cancel your subscription and request deletion, we will delete your account data within 30 days. We may retain anonymised, aggregated data (such as community statistics) that cannot be linked back to you.

Payment records are retained for 7 years as required by HMRC.

10. Cookies

The Grout Social website (groutsocial.co.uk) does not use tracking cookies or analytics. The mobile app does not use cookies. We do not use any third-party advertising or tracking technology.

11. Children

Grout Social is intended for professional use and is not directed at anyone under the age of 18. We do not knowingly collect data from children.

12. Changes to this policy

We may update this privacy policy from time to time. We will notify active subscribers of any material changes by email. The latest version is always available at groutsocial.co.uk/privacy.

13. Contact

For any privacy-related queries contact us at hello@getplanit.co.uk