Last updated: October 31, 2026. Document version: privacy-2026-10-31-871a3e9b313a35f3.
Groundwork is operated by Nuphase Solutions.
When you search, we store what you typed into the form: job title, location, optionally a company name, and optionally your own current or offered salary. We don't require a name, email, or account to generate or view a report.
For free email updates, an optional box on an employer's page, an article, the Insights list or your report lets you sign up for the weekly digest (new articles and the biggest new layoff notices) or for alerts when new layoff notices or articles name one employer. We send a confirmation first, and nothing else goes to an address until you click it. We keep the address, which list it is for, when you signed up and confirmed, and the short source label described below. Every message carries an unsubscribe link that ends it in one click, and a line at the bottom of the digest and alerts says why you get them. After you unsubscribe we keep the address with its unsubscribed date, so we know never to write to it again. We use the address supplied for these free subscriptions to send those emails through our email delivery service. A report for someone who needs a visa can also ask for one email on the day a visa sponsor shortlist for that role and place is ready; it is a signup like the others, confirmed first, and it sends that one email.
If you are an adviser who asks for a pilot on the For advisers page, we keep your name, email, organization, what you do, the number of offers you review and your message, to reply to you and to make your pilot code. We use them for nothing else and share them with no one.
If you buy a report, Stripe (our payment processor) collects the payment details and whatever contact information it needs to process the charge and calculate tax — we receive back only that a payment succeeded and which report it was for, never your full card number.
We also keep our own counts of what happens on the site: the kind of page a first visit landed on, the site or link that sent the visitor, how many searches find no match, which links to an example report or a download are clicked, and when a payment is taken. These are counts and short labels such as “linkedin” or “home”, with no name, email address or other identifier attached.
If you answer “What stopped you?” under a report's paywall, we keep that one-click answer with the report. If you make a second report to compare with the first, we keep which report it was made to be compared with.
We set a few small cookies of our own:
gw_free_used — marks that this browser has already used its
one free report.gw_credits — identifies a multi-report pack you've bought, so
its remaining credits carry across searches from this browser.gw_src — one short label (“linkedin”,
“google”, “direct” and so on) for the site or link that
first brought this browser here, kept for 90 days. It shows us which of our
articles and links bring readers who go on to use a report.gw_purchase — set for ten minutes after a payment, so the
page you land on can tell Google Analytics about the purchase once.__Host-gw_monitoring_session — keeps you signed in to your
weekly monitoring pages for 14 days. We store only a one-way scramble of its value.__Host-gw_monitoring_csrf — protects the monitoring forms
against forged requests; it lasts one hour.gw_email_returns — remembers up to eight recent email message kinds and weeks for 42 days,
so revisiting the same tagged email link does not keep adding to our return count.
It contains no email address or subscriber identifier. We count these returns separately from the site that first brought you here.We use Google Analytics to count visits and see which pages are used. It sets
its own cookies (their names start with _ga) and receives the pages
you view, details of your browser, and an approximate location worked out from
your IP address; Google processes that data under its own terms. We don't use
advertising trackers.
Weekly monitoring is a paid service tied to your email address. You verify that address before you pay. We keep it, the employers (and optional US states) on your watchlist, your email settings, the weekly briefs we make for you with the source records they list, and a log of whether each weekly email was handed to our email delivery service. We also keep a record of the offer wording you agreed to, with its version and the time, stored when you start checkout and before the payment page is created. It shows the wording we stored, not which page you saw. For sign-in we store only a one-way scramble of each sign-in link.
When you pay, Stripe collects your card and billing details on its own page and receives your email address, the US$9 price and our order reference. We never receive your card number. Stripe sends us its identifiers for the payment, and notices of any refund or dispute with their amounts and times. Notices we cannot yet record reliably are retained or retried for review.
The pages where you buy and manage monitoring load no analytics and no third-party scripts. The public employer pages that link to them do load the analytics described above, and Stripe's payment page is governed by Stripe's own terms.
An address that you verify but never use to pay may be deleted once it has been inactive for 30 days, if you never started checkout. We do not promise a deletion date, and we never delete a paid purchase this way.
Your saved briefs stay readable on your private page after your 90 days end, until you ask us to erase your account. To ask, sign in and open Request account erasure on your watchlist. After you confirm your email address, the site owner carries the request out. Erasure removes your watchlist, saved briefs and delivery history, stops the monitoring emails, ends any remaining paid access, and removes the free email alert and digest subscriptions held under the same address. It does not refund a payment; ask for a refund separately.
After erasure we keep minimal records of your purchase: the payment, refund and dispute references, their amounts and dates, and the record of the wording you agreed to. Our own minimum business policy is to keep these for seven years from the last financial event on the purchase, and for longer while a payment, dispute or other review is unresolved. Seven years is our business policy; this page does not describe it as a legal requirement. The Stripe reference in these records still links them to your Stripe payment, and anyone with access to Stripe can connect that payment to you. The records are pseudonymised and access-restricted. They are not anonymous. They are not a complete accounting history: they do not show fees or tax, and a notice we could not record is not in them.
Stripe, our hosting provider's backups and logs, and our email delivery service keep their own copies under their own retention. We have not verified how long those copies last, an erasure request does not cover them, and we make no claim of secure physical deletion.
Search and report data is currently kept indefinitely — there's no self-serve deletion yet. If you want a report's data removed, contact us and we'll delete it manually. An email address you gave for the free email alerts stays until you unsubscribe, and after that as the record that you did, together with the log of which messages we sent it. To have that address removed completely, contact us. Weekly monitoring keeps data for different periods; they are described under Weekly monitoring above.
Stripe, to process a payment. Google, for the visit counts described above. Sentry, which receives a technical report when a page fails to load. Our email delivery service, which sends the messages you signed up for and sees your address and their text. Our hosting provider, which runs the site. We don't sell your search data, and we don't share it with anyone else.
Since reports aren't tied to an account, we can only find and delete a report's data if you give us its report link or the details you searched with. Contact us and we'll handle it. Weekly monitoring does use an account, and its erasure request is described under Weekly monitoring above.
Groundwork isn't directed at children and isn't intended for use by anyone under 16.
We may update this policy as the product changes; the "last updated" date above will reflect the latest version.
Questions, data requests, or deletion requests: sean.manning@nuphase.tech.
Wage data: U.S. Department of Labor OFLC LCA Disclosure Data and U.S. Bureau of Labor Statistics OEWS. LCA filings reflect sponsored-worker wage offers, which skew toward mid-large employers and specific occupations — treat any estimate built from a small sample cautiously. Informational only; not legal, immigration, or financial advice.