Last updated 5 October 2026
1. CORE PRIVACY PRINCIPLE
Enfacta is a local-first application designed so that your substantive work remains under your control.
Documents, imported files, workspace content, indexes, embeddings, stored facts, conversations, prompts, queries, retrieved passages and AI-generated responses are processed locally on your device.
GroundState Labs does not receive, upload, store or analyse the documents, prompts, queries, retrieved content or AI-generated responses you submit through Enfacta.
Enfacta does not send your documents, prompts, queries or workspace data to any third-party AI processing service.
AI processing of your workspace information is performed locally on your device using locally run AI models.We do not use your documents, prompts, queries, AI outputs, indexes, embeddings, stored facts or other workspace content to train AI models.
Some supporting services necessarily use the internet, including licensing, subscription verification, software updates, model downloads, account management, transactional email and optional connections to services such as Microsoft OneDrive, SharePoint and Outlook. These services are separate from Enfacta's local AI processing.
2. PERSONAL INFORMATION WE COLLECT
2.1 Account and Licensing Information
We intentionally collect very little personal information.
For normal Enfacta account, licensing and product-access purposes, the primary personal information associated with you is your email address.
Your email-based user identity is managed using Supabase, which provides infrastructure used for account identity, licensing and related account-management functions.
We may also maintain technical account records associated with that identity, such as: product entitlement; subscription status; plan or tier; seat allocation; active device or licence information; account management verification records; and identifiers required to associate your account with services such as Stripe.
These records do not contain your personal information including name, address or billing details; nor do they contain Enfacta workspace documents, prompts, queries or AI-generated content.
2.2 Support Information
If you contact Enfacta for support, we may receive information that you choose to provide in that correspondence, such as your name, email address, description of the issue or screenshots.
We ask users not to send confidential workspace content unless it is necessary for support.
2.3 Website Technical Information
Our website and its hosting infrastructure may process ordinary technical information necessary to deliver the website, such as IP address, browser information, device information and request logs.
This information is separate from your Enfacta desktop workspace and is not linked to your local documents, prompts, queries or AI outputs.
3. BILLING AND PAYMENTS
Payments are processed by Stripe.
Payment-card details, bank details and payment credentials are entered into and managed within Stripe's systems.
GroundState Labs does not receive or store your full payment-card number, security code or payment credentials.
Stripe may provide Enfacta with limited information required to operate your subscription, such as: Stripe customer and subscription identifiers; subscription status; plan information; billing interval; seat count;payment or renewal status; and cancellation status.
We use this limited information to determine whether an Enfacta subscription is active and what product access or subscription management rights apply.
Billing and payment information held by Stripe is governed by Stripe's own privacy practices.
Where available, subscription owners manage payment methods, invoices and subscription settings through Stripe's secure customer portal rather than through Enfacta itself.
4. EMAIL COMMUNICATIONS
We use email for operational purposes such as: verification and one-time codes; account and licence management; Team code management; billing or subscription notifications; security-related communications; andsupport responses.
Transactional emails may be delivered using a third-party email-delivery provider.
That provider receives the email address and the content necessary to deliver the relevant message.
We do not sell email addresses or use them for unrelated third-party advertising.
We do not send marketing communications without an appropriate basis or consent.
5. AI MODELS AND DATA PROCESSING
Enfacta uses AI models that run locally on the user's device.
Model files may be downloaded from third-party model repositories or providers, but your Enfacta prompts, queries, documents, retrieved passages and AI responses are not sent back to those model providers for processing.
The local model receives information from your workspace on your device and generates its response locally.
GroundState Labs does not operate a cloud AI inference service for Enfacta workspace queries.
Third-party model files remain subject to the licences and terms specified by their respective authors or rights holders.
6. CONNECTED SERVICES
Enfacta may optionally connect to services, including: OneDrive; SharePoint; and Outlook.
These integrations are optional and initiated by the user.
For Microsoft services, Enfacta uses Microsoft Graph and permissions authorised by the user to perform the requested functions.
6.1 Microsoft Services
Where you connect OneDrive, SharePoint or Outlook, Enfacta may: display folders and files available to you; import files you select; monitor linked folders for changes; and process file and folder metadata required for synchronisation.
Folders or files selected for use in Enfacta are made available to the local application so they can be indexed and processed locally.
Their contents are not sent to GroundState Labs or to a third-party AI provider for AI processing.
Enfacta does not use your cloud documents to train AI models.
Unless a feature expressly states otherwise, Enfacta does not modify or delete source documents in OneDrive, SharePoint or Outlook.
Where you connect Outlook, Enfacta may access authorised mail folders and message information required to provide email-assistant features.
Email analysis and AI-assisted drafting are performed locally by Enfacta. Email message content used for AI analysis or drafting is not sent to GroundState Labs or to a third-party AI provider for inference.
Enfacta may create drafts where a feature supports and requests that action. Enfacta does not automatically send email on your behalf unless the feature expressly states otherwise.
Microsoft authentication tokens or connection credentials required to maintain an authorised connection may be stored locally on your device.
You may revoke Enfacta's Microsoft permissions through Microsoft account settings or through available Enfacta controls.
Microsoft-hosted information remains subject to Microsoft's own privacy and security practices.Microsoft APIs Terms of Use and
Microsoft Graph Terms of Use.
7. LOCAL FILES, INDEXES AND RETENTION
When files are added to Enfacta, whether from a local folder or an authorised connected source, Enfacta may create or maintain local information required for search and AI processing.
This may include: local file copies;extracted text; search indexes; embeddings; workspace memories; conversation information; and other locally generated processing data. This information remains within storage controlled by the user. Deleting an original file does not necessarily remove information that has already been incorporated into a local index or other local processing structure.
Indexed information may remain available until the relevant local index, workspace, memory or stored information is removed, rebuilt or deleted.
GroundState Labs does not receive or store this indexed content.
8. LOCAL STORAGE AND SECURITY
Because Enfacta is local-first, most of the information you use with Enfacta is stored on your own device or in a storage location you control.
You are responsible for maintaining appropriate: device security; operating-system security; backups; access controls; cloud-account security; and protection against unauthorised physical access.
GroundState Labs cannot protect against local risks outside its control, including malware, device theft, hardware failure, compromised operating-system accounts or compromised third-party accounts.
9. DATA RETENTION
We retain the limited account information we hold only for as long as reasonably required to: maintain product access and licensing; operate subscriptions; provide account management functions; meet legal or accounting obligations; prevent fraud or abuse; and provide support.
Local Enfacta workspace data is controlled by you and remains on your device or other storage location you control.
Cancellation of a subscription or uninstalling the application does not automatically delete local workspace information from your device. Stripe may retain payment and transaction records in accordance with its own legal and regulatory obligations.
10. SHARING OF INFORMATION
We do not sell, rent or trade personal information.
We use a limited number of service providers where necessary to operate Enfacta and related services. These may include: Supabase, for email-based account identity, licensing and supporting account records; Stripe, for subscriptions and payment processing; transactional email providers, for delivery of verification, security and operational emails; Microsoft, where you choose to connect Microsoft services; and website or infrastructure providers required to operate our public website and online account services.
These services receive only information relevant to the function they provide.
We do not provide your Enfacta documents, workspace data, prompts, queries, retrieved passages or AI-generated responses to third-party AI providers for processing.
11. YOUR RIGHTS
Depending on applicable law, you may have rights relating to personal information we hold about you, including rights to: request access; request correction;request deletion where applicable; and raise a privacy concern.
Because most Enfacta workspace information is stored locally rather than held by GroundState Labs, we may not possess the documents, prompts, queries, conversations or AI outputs you use within the application.
Requests concerning personal information held by GroundState Labs may be sent to:marin@groundstate-labs.com
12. CHILDREN'S PRIVACY
Enfacta subscriptions and account administration are intended for adults.
GroundState Labs does not knowingly create accounts for children under 18.
Enfacta may be used by organisations such as schools in environments that involve information relating to children. In those circumstances, the organisation using Enfacta is responsible for ensuring it has appropriate authority to process that information.
Such workspace information remains subject to Enfacta's local-first processing model and is not sent to GroundState Labs for AI processing.
13. INTERNATIONAL DATA PROCESSING
GroundState Labs is based in Australia.
Some service providers used for supporting online functions, including account identity, payment processing, transactional email, website infrastructure or connected services, may process limited account or technical information in other jurisdictions.
This does not change the local processing model for Enfacta workspace content.
Your Enfacta documents, prompts, queries and AI-generated outputs are not transferred internationally by GroundState Labs for cloud AI inference.
14. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes to Enfacta, our service providers, legal requirements or our privacy practices.
The current version will be published on our website with an updated “Last updated” date.
15. CONTACT
Enfacta is operated by GroundState Labs Pty Ltd (ACN 696 890 310), Australia.
If you have questions or concerns about privacy, contact:marin@groundstate-labs.com