Privacy Policy

Last updated: April 2025

1. Who We Are

Groundwork PM (“we”, “our”, or “us”) is a property management software business operating from the Kingdom of Bahrain. We operate the Groundwork PM platform accessible at groundworkpm.com. For privacy matters, you may contact us at support@groundworkpm.com.

2. Data We Collect

We collect the following categories of data:

  • Account information — your name, email address, company/organisation name, and password hash when you register.
  • Property and business data — property details, unit information, tenant records, lease terms, income and expense entries, and other data you enter into the Service.
  • Billing information — subscription plan and billing status. Payment card details are processed directly by Paddle and are never stored by us.
  • Usage data — pages visited, features used, and actions taken within the application, collected to improve the Service.
  • Technical data — IP address, browser type, device type, and session information collected automatically when you access the Service.

3. How We Use Your Data

We use your data to:

  • Create and manage your account and provide access to the Service
  • Process subscription billing through our payment partner Paddle
  • Send transactional emails such as invoices, password resets, and lease expiry notifications
  • Respond to support requests and communicate with you about the Service
  • Monitor and improve the reliability, performance, and security of the Service
  • Comply with legal obligations applicable to our business

We do not sell your personal data to third parties, and we do not use your data for advertising or marketing purposes beyond communications about Groundwork PM itself.

4. Third-Party Service Providers

We share data with the following trusted third-party processors who help us deliver the Service. Each is bound by data processing agreements and handles data only as instructed by us:

Paddle.com Market Limited

Payment processing and subscription management. Acts as Merchant of Record for all transactions. Paddle Privacy Policy →

Supabase

Database hosting and file storage for all application data and uploaded documents. Data is stored in encrypted cloud infrastructure.

Resend

Transactional email delivery for notifications, invoices, and account emails.

Google (OAuth)

Optional sign-in with Google. If you use Google sign-in, Google shares your name and email address with us to create your account. No additional Google data is accessed.

5. Cookies

We use only essential session cookies necessary for you to remain logged in and use the Service securely. We do not use advertising, tracking, or analytics cookies. No third-party advertising networks receive data through our cookies.

6. Data Retention

We retain your data for as long as your account is active. If you close your account, your data will be available for export for 30 days, after which it will be permanently and irreversibly deleted from our systems and backups within a further 60 days.

7. Your Rights

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — correct inaccurate data at any time through your account settings
  • Erasure — request deletion of your account and associated personal data
  • Portability — export your property and financial data in machine-readable format using the built-in export tools
  • Objection — object to processing of your data in specific circumstances

To exercise any of these rights, contact us at support@groundworkpm.com. We will respond within 30 days.

8. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), encrypted data at rest, access controls, and regular security reviews. However, no system is completely secure, and we cannot guarantee absolute security of your data.

9. Children’s Privacy

The Service is not intended for use by persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice within the Service. The “Last updated” date at the top of this page reflects the most recent revision.

11. Contact Us

For privacy questions, data requests, or concerns, please contact us at support@groundworkpm.com.