Legal
Privacy Policy
Last updated: October 17, 2026
This policy describes how Graniite LLC, a Florida limited liability company (“Graniite,” “we,” “us”), handles your information when you use our service at graniite.co, graniite.io, and related applications (the “Service”). Graniite LLC is the controller of the information described here; our contact details are in Section 12.
If anything below is unclear, email team@graniite.co.
1. What we collect about you
Account information. Your email address, used to authenticate you and send transactional and (optional) product emails.
Usage data. Logs and usage metrics needed to run the Service, enforce plan limits, and bill accurately. We also keep short-lived security signals, such as one-way fingerprints of the network you sign up from, to detect and prevent abuse. We cannot recover your network address from them, they are not linked to your account, and we delete them within 7 days.
Billing data. Handled by Stripe. We store only what we need to administer your subscription.
Product analytics. We use PostHog to measure how Graniite is used, in the three cookie categories described in Section 8. We do not sell your data or use advertising pixels.
How you found us. When you create an account, we keep the first source of that signup (for example, a campaign link, the referring site or the page you landed on) as a business record of how people find Graniite.
2. What you store with us
Only you can read or view the content in your library. We do not browse or read your content except as strictly needed to operate, support, or secure the Service (for example, investigating an error you report or an abuse signal). Service providers process narrow slices of your content only at the moment you take an action that requires it (see Section 4).
3. How we use it
- To run the Service and the agents you authorize.
- To authenticate you and secure your account.
- To enforce plan limits and bill correctly.
- To send transactional email.
- To prevent abuse and fraud.
- To diagnose bugs and improve the product in aggregate.
We do not use your content to train or improve AI models. Our service providers process your content only to return a result, and may keep it for a limited time under their own policies (for example, for abuse monitoring). We are requesting zero data retention wherever a provider offers it. We do not sell your information.
4. Who we share it with
We share information only with the service providers we need to operate the Service. These fall into the following categories:
- Hosting, database, and storage providers.
- AI model providers (for transforms, chat, and OCR).
- Transcription providers (for audio and video).
- Webpage fetch and parsing providers.
- Transactional email delivery.
- Background job orchestration.
- Error and performance monitoring.
- Product analytics (see Section 8 for what runs and how to turn it off).
- Stripe for payment processing.
The specific companies we use, with their addresses and compliance resources, are listed on our sub-processors page.
We may share information when required by law (subpoena, court order) or to protect Graniite, our users, or the public from harm. We will notify you unless legally prohibited from doing so.
5. Where it is stored
Our primary data stores are in the United States. If you access the Service from outside the US, your information is transferred to and processed in the US.
6. Retention
We retain your content for as long as your account exists, whether it has a trial, a paid subscription or the Free plan. When a trial or paid subscription ends, your account moves to the Free plan. We do not delete your content because a trial or subscription ended or because your account is inactive, and we keep your account and the records needed for billing and once-only trial eligibility. Transcripts, adaptive summaries, chats and creations you make on the Free plan are processed and retained the same way as on a paid plan. The Free plan does not build Memory (personalization learned from your library and conversations).
You can delete items, files or your whole account at any time using the account controls. Content you delete, and the content of an account that is deleted, is removed as described below.
When you delete an item, file or your account, we remove the affected content from the live Service. Residual backup copies are retained separately for recovery and removed under the backup retention schedule. Billing, security and other records may be retained where required for legal, accounting or security purposes. Recovery must respect previous deletion requests.
Our primary database provider retains seven days of daily backups. Separately, our weekly database-export process is configured to keep its eight newest exports. That export limit is based on count, not a fixed age; copies may remain longer when scheduled runs are missed. These are separate from uploaded-file backups.
Uploaded-file backups become eligible for removal 30 days after our backup process records that the source file was deleted. Removal runs in scheduled batches and retries failures, so completion can occur later than that eligibility date. These recovery copies are not a replacement for your own copies of important content.
To prevent repeat free trials, we retain a protected identifier derived from verified email addresses associated with a used trial and the date it was used, even after account deletion. We retain this limited anti-abuse record for as long as we offer a once-only trial. It does not contain your saved content or payment details, and it does not prevent you from creating an account or purchasing a subscription.
7. Your rights
You can:
- Access and export your content from your account.
- Delete your account.
- Update your account information in settings.
- Unsubscribe from non-essential email.
If you are in the EU or UK, you also have rights under the GDPR and UK GDPR, including the right to object to or restrict processing, request portability, and complain to a supervisory authority. If you live in a US state with a consumer privacy law, you may have similar rights of access, correction, deletion, and portability under that law. Email team@graniite.co to exercise any of these rights; we do not discriminate against you for doing so.
8. Cookies and analytics
We use first-party cookies and measurement in three categories. You can change your choices at any time in Cookie preferences, linked at the bottom of every page, including right now:.
Essential. These keep you signed in, keep your account and session secure, and remember your cookie choice. They are always on, because the Service cannot work without them.
Basic usage measurement. Outside the EU/EEA, the UK and Switzerland, we count page visits (including blog article views and clicks on a blog article’s Save button) without an analytics cookie until you make a cookie choice, and we record a few in-app events tied to your account: signing up, finishing onboarding, opening a summary and saving to your library. No content is collected. You can turn this off with the Basic usage measurement switch in Cookie preferences. In the EU/EEA, the UK and Switzerland, this happens only if you choose “Accept all.”
Analytics cookies and session replay. These are opt-in and run only after you choose “Accept all.” They set an analytics cookie, record a masked session replay (text and inputs are hidden) and track clicks automatically. “Necessary only” keeps them off.
We do not use cookies for advertising, retargeting, or cross-site tracking.
9. Security
We use encryption in transit and at rest, scoped access controls, and secure handling of API tokens. No system is perfectly secure. Report vulnerabilities to team@graniite.co.
10. Children
The Service is not directed to children under 13 (or under 16 in the EU and UK). We do not knowingly collect information from anyone in that age range.
11. Changes
We may update this policy as the Service evolves. Material changes will be announced by email and the “Last updated” date above will change.
12. Contact
Graniite LLC
7901 4th St N Ste 300
St. Petersburg, FL 33702
United States
Email: team@graniite.co