Draft — not legally reviewed. This privacy notice is a public working draft. It describes current practice but has not yet been reviewed by a Data Protection professional. We will publish a final, GDPR-compliant version before any fundraising goes live. If you need clarification before then, write to legal@groundwork.website.

Notice

Privacy

GROUNDWORK treats personal data as institutional infrastructure, not as a product to monetize. This page summarizes how we handle it in plain language.

What we collect

Account email, display name, optional bio and avatar. For initiative organizers seeking verification: identity documents, organizational records, and other evidence you choose to upload.

What is public by default

Usernames, display names, initiatives you create, pledges you make, governance roles, and every review or governance decision attributed to you. Reviewer applications and revocation proposals are public from the moment they are submitted.

What stays private

Raw identity documents, addresses, financial details, and the full content of verification evidence. Only L3+ reviewers can read evidence attached to a verification request, and only to decide it.

What we never do

Hold money. Donations happen externally.
Sell or share personal data with advertisers.
Use your data to train third-party AI models.
Hide which reviewer made which decision.

Your rights

You can delete your account at any time. Public records (decisions, pledges, governance changes) remain attributed to your username for institutional accountability, even after account deletion — this is governance infrastructure, not social media.

Identity documents — retention

Government ID photos and verification selfies submitted to support an identity-verification request are stored in a private storage bucket readable only by you and reviewers with verification level 3 or higher. Documents are automatically deleted 30 days after a reviewer decision is recorded. We do not run automated biometric matching or share documents with third parties.

GDPR rights

If you are in the EU/EEA you have the right to access, correct, export, restrict, or erase your personal data, and to object to processing. You may withdraw consent at any time and lodge a complaint with your national data protection authority. To exercise any of these rights, email legal@groundwork.website. We will respond within 30 days.

Analytics & cookies

We do not currently load third-party analytics, advertising trackers, or cookie-based fingerprinting. Authentication uses a session cookie strictly necessary to keep you signed in. If we later add analytics, we will update this page and add a consent mechanism for EU visitors before turning it on.

Terms →·Contact →