GrindSupply collects the information you voluntarily submit through this site — primarily through three forms:
Every form on the site is opt-in. We do not collect data from visitors who do not submit a form.
Submitted data is used to (1) email and respond to the prospect about the discovery call, (2) schedule the call against the founder's calendar, and (3) fire a server-side Meta Lead event so GrindSupply can measure advertising performance. The Meta event uses a hashed email address and is sent over the Meta Conversions API — we do not pass the unhashed email to Meta.
We do not sell, rent, or share submitted data with any third party other than the service vendors listed below. We do not append submitted data to any external marketing list.
When a prospect decides to engage GrindSupply, the setup fee and monthly retainer are charged through Stripe Checkout. GrindSupply never sees or stores a credit card number, expiration date, or CVC. Stripe holds that PCI-sensitive data on its own infrastructure under its own privacy and security policies.
After a charge clears, Stripe sends a webhook event to POST /webhook/stripe. Our server stamps the corresponding service_sales row as paid and writes a separate Meta Purchase event. The Stripe webhook payload received by GrindSupply contains the customer's email and (for the setup fee) the card brand and last-four — not the full card number — which we retain only for accounting reconciliation.
Stripe's treatment of payment data is governed by Stripe's own privacy policy, available on Stripe's website.
This site ships two tracking scripts in the page HTML, both of which set cookies on the visitor's browser:
1060264509999901) — loaded from every page on the site. Sets the _fbp cookie used to attribute ad-driven visits. Granular event data (the hashed Lead event fired on form submit, the Purchase event fired on Stripe success) is also sent server-side via the Meta Conversions API.localStorage; no personal data is sent.No advertising cookies are set before the visitor takes an action on the site. We do not run third-party retargeting networks beyond Meta.
The data GrindSupply processes touches the following third-party services. Each operates under its own privacy and security terms.
Form submissions and booking rows are retained in the GrindSupply database until the lead is marked contacted, or for a maximum of 24 months from creation — whichever is shorter. Service-sales rows tied to confirmed Stripe payments are retained indefinitely for accounting and tax compliance.
On retention expiry, rows are deleted in a scheduled cleanup. To request earlier deletion, contact GrindSupply using the address below.
HVAC contractors and prospects who have submitted a form may request a copy of the data we hold about them, request correction, or request deletion. Requests are honored within 30 days. Send requests to the contact below; please include the email address used on the original form so we can locate the row.