Grosso
Start now

Legal · Privacy policy

Privacy policy

Effective November 1, 2026 · Version 1.0Draft copy — pending counsel

The short version

  • We collect the least we need to run a payment request.
  • Card and Apple Pay details go to Stripe, never to us.
  • We don’t sell personal data or use it to train models.
  1. §1

    What we collect

    Account data: your name, email and company. Request data: description, line items, amounts, an optional payer email and the metadata you choose to send.

    Operational data: API logs, webhook delivery records and audit entries tied to your account.

  2. §2

    What we never see

    Card numbers, Apple Pay tokens and bank details are collected by Stripe and Apple directly. Grosso receives only the outcome — paid, refunded, disputed.

  3. §3

    How we use it

    To create and deliver payment requests, send receipts and events, prevent fraud, meet legal obligations and support you. Nothing else.

  4. §4

    Who we share it with

    Stripe (payments and payouts), Cloudflare (hosting), and email providers for receipts. Each is bound by a data-processing agreement.

  5. §5

    Retention

    Payment records are kept as long as financial law requires. Logs are kept for a limited window and then deleted.

  6. §6

    Your rights

    Ask for a copy, correction or deletion of your personal data at hello@grosso.ai. Payers can contact the merchant or us directly.