Privacy policy

In this notice GrizzlyCloser (“we”) explains which personal data we process as controller: about the businesses that use GrizzlyCloser and their users, about people who request a pilot, and about visitors to this website.

For the data of such a business’s own customers, such as the recording of a sales conversation and the quote, that business is responsible and we are only its processor. Our data processing agreement, part 2 of our terms, governs that. If you are such a customer, read the business’s privacy text at the bottom of your quote, and contact that business about your rights.

• Your account: name, email address, role, and your profile photo and phone number if you add them. To provide the service your company agreed with us (contract, article 6(1)(b) GDPR).
• Invoicing: your company’s details, the plan and the use we charge for, and who manages the payments. We never see your card or account number: you give that to Stripe only. Because accounting and VAT law require it (legal obligation, article 6(1)(c)).
• Security: when you sign in, from which IP address, and a log of who did what, including when one of our administrators looks in to help you. To protect the service and your data and to investigate misuse (legitimate interest, article 6(1)(f)).
• Grizzly: what you ask the assistant and what he answers. See section 4.
• A pilot request: your name, company, email address, phone number and message. To respond to your request (steps prior to a contract, article 6(1)(b)).
• A chat on this website: what you write, and your name and email address if you leave them. To answer your question (a contract or steps prior to one, article 6(1)(b)).
• This website: see section 8.

We do not use your data to train language models, we do not sell them, and we make no decisions about you that are taken by a computer alone.

A salesperson records a conversation only after the customer has read a short text on the salesperson's phone and agreed themselves, for everyone at the table. For a child, a parent decides. The app records that consent, with the moment and the version of the text, and only then starts. The business is responsible for the recording; we process it only on its behalf.

Grizzly is an assistant based on artificial intelligence: you are talking to software, not to a person. He reads only what you are allowed to see in the app, and he changes nothing unless you tap Apply yourself.

Our administrators can read the questions put to Grizzly and his answers, to improve him and find mistakes. We do so on the basis of our legitimate interest in an assistant that answers correctly (article 6(1)(f)). You can object to this at info@grizzlycloser.com. We then no longer read your conversations with Grizzly, except to investigate a problem you report yourself.

Our suppliers process data only on our behalf:

• Supabase: database and storage, in Frankfurt.
• Vercel: running the app and this website, in Frankfurt.
• Resend: sending email, from European servers.
• Anthropic: the language model behind Grizzly and the draft quotes, in the United States.
• Inngest: scheduling background jobs, in the United States, with internal identifiers only.
• Crisp: the chat on this website, in the Netherlands.
• Stripe: payments in the app: your company’s name, address, VAT number and billing email, and the payment method. Stripe Payments Europe, in Ireland; for its own fraud and anti-money-laundering checks, Stripe is responsible itself.
• Cloudflare: the check that you are not a robot, on the sign-in pages and in the pilot form, worldwide (section 8).
• Google: only for this website’s statistics (section 8).

Transfers to the United States are covered by the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. You receive a copy on request. Anthropic does not use the text to train models and as a rule keeps it no longer than 30 days. The full list, with the safeguard per supplier, is in the annex to our terms.

• Your account and user data: as long as your company is a customer. At the end the company receives a copy and we erase everything, as our terms describe.
• Invoices and the data on them: ten years, as Belgian tax law requires.
• The security log: as long as the account exists.
• Conversations with Grizzly: as long as the account exists, or shorter when the customer they concern is erased.
• A pilot request: as long as we need to respond to it, and at most two years after our last contact.
• A chat on this website: the same, at most two years after our last contact.
• This website’s statistics: see section 8.

You can ask which data we hold about you, have them corrected or erased, have processing restricted, and receive your data in a readable file. Where you gave consent, you can withdraw it at any time. Send your request to info@grizzlycloser.com. We answer within a month.

You can also object to processing based on our legitimate interest, such as reading your conversations with Grizzly and the security log. We then stop, unless compelling grounds override your interests or we need the data for a legal claim.

If you are not satisfied with how we handle your data, you can complain to the supervisory authority: in Belgium the Data Protection Authority (www.dataprotectionauthority.be), in the Netherlands the Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl).

For visitors to this website, we are the controller. On your first visit we ask whether you allow cookies for statistics. Rejecting is as easy as accepting, and without an answer or with a no we load nothing from Google and the site works just as well. You can change your choice or withdraw your consent at any time under Cookies at the bottom of every page; we then remove Google’s cookies straight away. Your choice holds for six months, after which we ask again.

With Google Analytics we measure which pages are visited, for how long, on what kind of device and from which region, only with your consent (Article 6(1)(a) GDPR). Google Ireland processes this data on our behalf and may also process it in the United States, under the EU-US Data Privacy Framework. Google receives your IP address but does not store it, advertising and the link to Google accounts are switched off, and Google keeps the data for each visitor for two months.

The chat at the bottom right loads nothing from Crisp until you open it. The conversation then opens in a window of Crisp’s, which sees your IP address and browser and keeps a cookie and local storage in that window, so you can find your conversation again. We do not ask for consent for that, because the chat does not work without it.

On the pages to sign in, accept an invitation or request a pilot, Cloudflare checks that you are not a robot. It starts only once you fill in the form: a window of Cloudflare’s then sees your IP address and browser and keeps one item in that window’s local storage. We do not ask for consent for that, because the form does not work without the check and it is there for security (Article 6(1)(f) GDPR).

The cookies on this website:

• Your cookie choice (gc-consent), GrizzlyCloser’s, necessary: remembers what you choose here, six months.
• Your chat conversation (crisp-client/session), Crisp’s, necessary: keeps your chat conversation, only once you open the chat, six months.
• Robot check (cf.turnstile.u), Cloudflare’s, necessary: checks that a form is sent by a person, only once you fill in a form, until your browser clears it.
• Your invitation (gc_ref), GrizzlyCloser’s, necessary: remembers which customer invited you, only once you open a referral link, so your discount carries over when you sign up. That customer then sees your company's name and whether you became a customer. Three months.
• Returning visitor (_ga), Google’s, statistics: recognizes whether you have been here before, six months, only after your consent.
• This visit (_ga_NVGYB2QXSE), Google’s, statistics: keeps track of which pages you look at during this visit, six months, only after your consent.

We do not use cookies for advertising or to follow you across other sites.

In the app (app.grizzlycloser.com) we only use cookies and storage needed for what you ask for yourself. We do not ask for consent for those, and none of them is for statistics or advertising:

• Staying signed in (sb-…-auth-token), Supabase’s: until you sign out, the cookie itself at most 400 days.
• Trusted device (gc_device): if you tick that, thirty days after your last sign-in.
• Your language (gc_ui_locale): one year.
• Light or dark (gc_theme): one year.
• Small choices on your screen (gc_quote_overview, gc_welkom_later and gc_terugblik): at most one year.
• In your browser’s storage: a recording until it is safely with us, a form you have not sent yet, and the microphone you chose.

Version 2 of this cookie policy, October 23, 2026. Earlier versions are available on request.

Questions about this notice or your data? Email info@grizzlycloser.com. We answer within ten business days.

We have no data protection officer. For a company of our size and with our activities it is not required.