Last Updated: May 2026
Welcome to Gritworks Collective LLC. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.
Effective Date: May 2026. This policy applies to all users of gritworkscollective.com and related services.
Personal data, or personal information, means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:
Age Requirement: The Service is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under the age of 18. If we learn we have collected personal information from a user under 18, we will delete that information immediately.
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
Your security is foundational to everything we build. Here's how we protect your data at every level:
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Our application integrates with the following third-party service providers. We do not sell your personal data to any third parties. Each provider processes only the data necessary to perform their function:
All third-party providers are contractually prohibited from using your data for any purpose other than providing services to Gritworks Collective.
If you provide a phone number and opt in to SMS notifications during registration, we may send you text messages related to your advising experience. These include:
Message Frequency: You may receive up to 2 messages per day, depending on your notification preferences and active streaks.
Opting Out: You can opt out of SMS at any time by replying STOP to any message, or by disabling SMS notifications in your profile settings. Standard message and data rates may apply.
Your Phone Number & Consent: We store your phone number securely and use it only for the purposes described above. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:
If you wish to exercise any of the rights set out above, please contact us at info@gritworkscollective.com.
Gritworks Collective LLC does not sell or share your personal information with third parties for monetary or other valuable consideration, as defined under the California Consumer Privacy Act (CCPA/CPRA). We do not engage in cross-context behavioral advertising. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. If this practice ever changes, we will update this policy and provide a conspicuous opt-out mechanism.
In the event of a data breach involving your unencrypted personal information, Gritworks Collective LLC will inform affected California residents within 72 hours of discovery, as required by California Civil Code § 1798.82. Notice will be provided via email to the address on file. If the breach affects more than 500 California residents, we will also notify the California Attorney General.
Gritworks Collective provides coaching and advising, not medical or psychological therapy. As such, we are not a Covered Entity under HIPAA, and the data you share is not considered Protected Health Information (PHI/ePHI). We do not require or execute Business Associate Agreements (BAAs) for standard platform use. However, we voluntarily employ bank-level encryption and security measures that align with strict data protection standards.
You have the right to request permanent deletion of all your personal data under GDPR (EU) and CCPA (California). This includes your:
This action is permanent and cannot be undone.
To request data deletion, you can either:
We will process your request within 30 days as required by law.