Legal

Privacy policy

Last updated: 6 May 2026

Who we are

SameGround operates the SameGround diagnostic portal at sameground.com. We provide AI-assisted diagnostic services covering decision analysis, editorial work, and creative production. This policy explains what personal data we collect, how we use it, and your rights under UK data protection law.

For the purposes of UK GDPR, SameGround is the data controller. You can contact us at privacy@sameground.com.

What data we collect

We collect the following categories of personal data:

Account data

Your email address and password (stored as a secure hash). We collect this when you create an account. We use it to authenticate you and communicate with you about your account.

Subscription and billing data

Your subscription tier and billing history. Payment card details are handled entirely by Stripe, we never see or store your card number. Stripe's privacy policy applies to payment processing.

Diagnostic session data

The text you submit to run a diagnostic, and the output returned. We store this in your session history so you can review past diagnostics. You can delete your history at any time from your account settings.

Usage data

The number of diagnostics you have run, which framework you used, and token counts. We use this to enforce your plan limits and to calculate our operating costs.

AI processing, how your diagnostic content is handled

This section matters and we want to be direct about it.

When you run a diagnostic, your submission is sent to the Anthropic Claude API for processing. Anthropic operates the AI model that produces your diagnostic output. Your content leaves our servers and is processed by Anthropic's infrastructure before the response is returned to you.

Anthropic's API data handling terms confirm that content submitted via the API is not used to train their models. We do not have a separate agreement with Anthropic that provides stronger guarantees than their standard API terms. You can review Anthropic's privacy policy at anthropic.com/privacy.

We store your diagnostic submissions and outputs in your session history on our servers (hosted by Supabase, a Postgres database provider). We do not sell your diagnostic content, share it with third parties other than Anthropic for processing, or use it to develop our own AI models.

If you are submitting sensitive commercial, legal, or personal information in a diagnostic, you should be aware that this content is processed by Anthropic's API and stored on our servers. Do not submit information you are not comfortable sharing with a third-party AI provider operating under US law.

Legal basis for processing

Under UK GDPR, we process your personal data on the following legal bases:

  • →Contract performance: Account data, subscription data, and diagnostic session data are processed to provide the service you have subscribed to.
  • →Legitimate interests: Usage data and aggregate analytics are processed to operate and improve the service, where this does not override your rights.
  • →Legal obligation: We may process data where required by law, including financial records for tax purposes.

Data retention

We retain your data as follows:

  • →Account data: Retained while your account is active. Deleted within 30 days of a verified account deletion request.
  • →Diagnostic session history: Retained while your account is active. You can delete individual sessions or your full history at any time from your account settings.
  • →Billing records: Retained for seven years to meet financial reporting obligations, even after account deletion.

Third-party services

We use the following third-party services to operate the platform:

SupabaseDatabase and authentication. Your account data and session history are stored on Supabase's infrastructure. Supabase operates under EU/UK data protection standards.
StripePayment processing. Stripe handles all payment card data. We share your email address with Stripe to create your customer record.
AnthropicAI processing. Your diagnostic submissions are processed by Anthropic's Claude API. Anthropic is a US company operating under US law.

Your rights

Under UK GDPR you have the following rights:

  • →Access: Request a copy of the personal data we hold about you.
  • →Correction: Request correction of inaccurate or incomplete data.
  • →Erasure: Request deletion of your personal data, subject to our legal retention obligations.
  • →Restriction: Request that we restrict processing of your data in certain circumstances.
  • →Portability: Request a machine-readable export of data you have provided to us.
  • →Objection: Object to processing based on legitimate interests.

To exercise any of these rights, email us at privacy@sameground.com. We will respond within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

We use cookies solely for authentication. When you sign in, a secure session cookie is set in your browser to keep you logged in. We do not use advertising cookies, tracking cookies, or third-party analytics cookies.

You can clear cookies at any time through your browser settings. Doing so will sign you out of your account.

Changes to this policy

We will notify you by email of any material changes to this policy. The date at the top of this page records when it was last updated. Continued use of the service after notification of a material change constitutes acceptance of the updated policy.

Contact

Questions about this policy or how we handle your data: privacy@sameground.com

SameGROUND | Privacy policy