Summary: We collect your email and the conversations you choose to save, to run the service. To answer you, your messages are sent to the AI model providers that generate the replies. We never sell your data, and you can delete everything at any time. Specialist "private" agents redact your sensitive data on your device before anything is sent.
Grg AI is an AI assistant and developer platform created and operated by Monescu Teodor, based in Brașov, Romania. It includes the website at grg-ai.com and the GrgCode desktop application. Contact: [email protected]
When you create an account, we collect:
If you use Grg AI without signing in, we do not create a profile for you; anonymous use is limited by a per-IP rate limit and is not charged or saved to an account.
We do not use your conversations to train AI models, serve ads, or sell your data to third parties.
You can select a specialist "agent" (a persona with its own expertise). Agents marked PRIVATE turn on a client-side redaction pipeline: before your message leaves your device, structured sensitive data in the text you type — emails, phone numbers, national IDs (CNP), IBANs, card numbers and API secrets — is replaced with typed placeholders (e.g. [EMAIL_1]). The real values stay only in your browser/app memory and are substituted back locally in the reply. The model never receives those real values.
Private-agent sessions are treated as ephemeral and are not saved to your account. Note that redaction covers the structured data types above in what you type; it does not redact free-form names, and in GrgCode it does not alter the contents of files you ask the agent to read (that would break code).
To generate answers, the contents of your request (your messages, and in GrgCode any file contents or commands the agent uses) are sent over an encrypted connection to the model provider that serves the chosen model:
These providers process your request to return a response under their own privacy terms. On our server, requests are handled in memory to produce the reply and are not permanently logged as content; we retain only usage counters (tokens/credits and the model id).
Paid plans and credit top-ups are processed by our payment providers. We never see or store your full card number.
We store only the result needed to run your account: your plan, credit balance and a payment/subscription reference id.
GrgCode runs on your own computer. It reads and writes files only in the project folder you select, and file writes and shell commands require your approval. To fulfil a task, relevant file contents and commands are sent to our backend and on to the model providers (§5), exactly like a chat message. Your code and files are not stored on our servers. The app can check for and download new versions from grg-ai.com; it sends only a version check for this.
If you choose to Share a conversation or Publish a generated page, we store that content so it can be served at a public link you can give to others. Anyone with the link can view it. Don't share or publish anything you want to keep private; you can ask us to remove a shared/published item at any time.
Firebase Authentication — your email and password hash are stored by Google Firebase. We never see your plain-text password. Firebase Privacy Policy
Firebase Firestore — your saved conversations and account data live in Google's cloud. Firestore security rules ensure you can only read and write your own data. The app also derives a per-device key at sign-in used to encrypt conversation history cached locally on your device.
In transit — all traffic is encrypted via HTTPS/TLS, and the site is served through Cloudflare. Cloudflare Privacy Policy
Published pages are served sandboxed in an isolated origin so they cannot read grg-ai.com cookies or storage.
Your account data is stored for as long as your account exists. When you delete your account, your associated data (saved conversations, profile, balances) is permanently deleted within 30 days. Shared/published items you created are removed when you delete them or on request.
As a user in Romania/EU, you have the right to:
To exercise any of these, email [email protected] with the subject "GDPR Request". Payments, model providers and Firebase act as separate processors under their own policies linked above.
Grg AI is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.
We may update this policy as the service evolves. For significant changes we will notify users in the app. The "Last updated" date above always reflects the current version.
For any privacy questions: [email protected]