What Groundline stores, where it goes, and how to delete it

What is collected

• Your email address - the only account identifier. There is no password, no profile and no tracking of you across other sites.
• Documents you upload - stored as extracted text, split into fragments, each with a numeric representation of its meaning used for search.
• Your questions and answers - kept as history and as cache entries, so a repeated question can be answered without paying for it again.
• Technical records - timing and token counts per request, the IP address of login-code requests (to rate-limit abuse), and server logs.

Where it is stored

In a single Postgres database hosted by Supabase in the EU. Every row is tied to an account, and the database itself enforces that one account cannot read another’s rows - not just the application code.

Which services receive what

Service	What it receives
Groq	Your question and the document fragments chosen to answer it. Used to write the answer.
DeepInfra	The text of your document fragments and of your questions. Used to turn text into the vectors that make search work.
Pinecone	Your question and the candidate fragments. Used to rank which fragments actually answer it.
LangFuse	A trace of each request: the question, the answer and the fragments used, for debugging and cost analysis.
Resend	Your email address and the six-digit login code.
Cloudflare Turnstile	A challenge token and your IP address, to keep bots from requesting login codes.
Upstash	Counters only - how many login codes an IP requested, how many streams an account holds. No document text.
Vercel Analytics and Speed Insights	Page views and page-load timings, aggregated. Cookieless, no identifier that follows you to other sites, no document text and no email address.

Running Groundline yourself with local models keeps document text inside your own infrastructure; the hosted demo does not.

How long it is kept

Documents, history and cached answers stay until you delete them or delete your account. Login codes expire after 10 minutes. Sessions last seven days. LangFuse keeps traces for 30 days on its free plan.

How to delete it

The Documents screen has two buttons: one clears documents, cache and history; the other deletes the account entirely. Deletion is immediate and cascades to every table - there is no soft delete and no recovery. The same is available over the API as DELETE /me.

What is not done

• No advertising and no third-party trackers - the landing page and the app measure page views and load times through Vercel, which sets no cookies and builds no cross-site profile. Nothing else is loaded.
• No selling or sharing - data goes only to the services listed above, and only to answer your questions.
• No training on your documents - the providers are used through their APIs; check their own terms for their retention policies.

Contact

This is a personal demonstration project. Questions and deletion requests: open an issue in the repository.