Privacy Policy

1. Who we are

HumanGrid ("we", "us") is operated by Sakamoto Labs LLC, 3206 NE 2nd Ave #1059, Miami, FL 33137, USA. We are the controller of the personal data described here. Questions or requests: hg-privacy [at] humangrid.ai.

2. What we collect

Information you give us:

• Account details: your email address and, if you sign in with Google, your name and profile photo from Google.
• Profile and onboarding answers: name, handle, role, company, industry, location, and what you tell our AI interviewer about your work, goals, the people you want to meet and what your agent must never share. Voice answers are converted to text; we do not keep the audio.
• Contacts you import or add: names, email addresses, phone numbers, companies, job titles, LinkedIn profile links and connection dates, and any notes you write.
• Questions you ask your network, and the agent conversations and introductions linked to your account.
• Organization data if you use teams: memberships, roles, shared contacts and invitations.
• Your invite page, if you turn it on: the personal note you write.

Information about other people that members give us:

• Contacts imported by members (see section 4).
• Endorsements left on a member's invite page: your name, email address, optional role and your comment.

Information collected automatically:

• Technical data needed to run and secure the service, such as IP addresses used briefly for rate limiting and abuse prevention, and server logs.
• Visits to a member's invite page are counted with a timestamp only; we do not store the visitor's IP address or device details for that count.
• Administrative access by our staff is recorded in an audit log.

We do not use advertising trackers or sell personal data.

3. How we use information

• To provide the service: build your private agent, organize and search your network, show your network overview, run organization features and your invite page.
• To improve answers using AI processing of your profile and contacts (for example, summarizing a contact's expertise from their title and company).
• To communicate with you about your account, invitations you receive from an organization, and service changes.
• To keep HumanGrid secure, prevent abuse, and meet legal obligations.

Where the GDPR or UK GDPR applies, our legal bases are: performing our contract with you (providing the service), our legitimate interests (security, product improvement, recognizing when a contact is already a member), your consent where we ask for it (for example, connecting Google Contacts or publishing an endorsement), and legal obligations. You can withdraw consent at any time.

4. Contacts you import

Your contacts are private to you. Other members cannot search or see them. If you join an organization, colleagues see only the specific contacts you choose to share with it.

If someone in your contacts is also a HumanGrid member, we may recognize the match (by email) so we can show you that they are on HumanGrid. We do not reveal your contacts to them.

We do not email or message your contacts. Invitations go out only when you send them yourself (for example, by sharing your invite link).

Please import only contacts you have a lawful relationship with and the right to share with us.

5. Google user data

If you choose to connect Google Contacts, we request read-only access to your Google contacts (contacts.readonly) and to the "Other contacts" Google keeps for people you have emailed (contacts.other.readonly). We never request access to your email messages.

We read these contacts once, at your request, to add them to your private HumanGrid contact list, and we revoke our access token immediately afterwards. We do not keep a connection to your Google account.

We use this data only to provide and improve the contact import and the features built on your contacts, as described in this policy. We do not sell it, use it for advertising, or transfer it to others except the service providers in section 6 who process it on our behalf to provide those features, or where required by law. Our people do not read it unless you ask us to (for example, for support), it is needed for security, or the law requires it.

We do not use Google user data to develop, improve or train generalized AI or machine-learning models.

HumanGrid's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Service providers

We use these providers to run HumanGrid. They process data on our instructions:

• Supabase: database and sign-in.
• Google Cloud: hosting, and Google Contacts import if you connect it.
• DeepInfra: runs the AI models (open models such as Qwen and gpt-oss) for onboarding, contact summaries, search and agents.
• Anthropic: an alternative AI provider we may use for the same features.
• OpenAI: speech-to-text and text-to-speech for voice onboarding.
• Resend: sending service emails.
• Stripe: payments, if you subscribe to a paid plan.

We use AI providers through their business APIs, under terms that do not allow them to train their models on our customers' data.

7. Where data is processed

HumanGrid and its providers process data in the United States and other countries where they operate. Where we transfer personal data from the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

8. How long we keep data

We keep your account data and contacts while your account is active. Contacts you delete disappear from your network immediately; we keep a minimal record of them only so a later import doesn't add them back, and erase it when you delete your account. When you ask us to delete your account, we delete or anonymize your personal data within 30 days, except where we must keep some records for legal, security or accounting reasons.

Endorsements are kept until the member or the endorser asks us to remove them. Security and audit logs are kept for as long as needed to protect the service.

9. Your choices and rights

You can view and edit your profile and contacts in the app, delete contacts, turn your invite page off, and hide endorsements. To access, export or delete your data, or to delete your account, email hg-privacy [at] humangrid.ai.

Depending on where you live (for example, the EEA, UK or California), you may have rights to access, correct, delete, restrict or object to our processing, to data portability, and to complain to your data protection authority. We do not sell personal information or share it for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.

If you are in someone's contacts and want us to delete what they imported about you, email us and we will remove it.

10. Security

Data is encrypted in transit and at rest. Browsers cannot change data directly; every change goes through our API, which checks who you are and what you may do. Secrets are kept in a managed secret store, and staff access requires Google sign-in plus an authenticator code and is logged. No system is perfectly secure; we will notify you and the authorities of breaches as the law requires.

11. Children

HumanGrid is a professional service for people aged 18 and over. We do not knowingly collect data from children; if you believe a child has given us data, contact us and we will delete it.

12. Changes and contact

We will update this policy when our practices change and post the new effective date here; for material changes we will tell you in the app or by email before they apply.

Contact: hg-privacy [at] humangrid.ai · Sakamoto Labs LLC, 3206 NE 2nd Ave #1059, Miami, FL 33137, USA.