§ Support

How to reach us

We normally reply within one business day. Security incidents are prioritised around the clock.

§ 01

Channels

support@grunden.ai — general support, bugs, integration help, billing questions. Reply within 1 business day.
security@grunden.ai — security incidents, responsible disclosure. Acknowledgement within 4 h around the clock.
privacy@grunden.ai — GDPR requests, personal-data queries, DPA signing. Reply within 30 days (statutory max).
hej@grunden.ai — sales, partnerships, press.

§ 02

Rate limits

Every API key has an RPM (requests per minute) and TPM (tokens per minute) limit set at creation. Default is 60 RPM / 100,000 TPM. Need more? Email support.

On exceeding, the API responds with 429 rate_limit_exceeded + header Retry-After: <seconds>. The client should wait and try again.

§ 03

Webhook signatures (async tier)

Async results are delivered via POST to the webhook_url with an HMAC signature:

Header X-Grunden-Signature: sha256=<hex HMAC-SHA256>
The signature is computed over the raw body with your key's webhook secret (shown at creation).
Verify with timingSafeEqual against the same HMAC computation on your side.

§ 04

Swedish legal channels

Disputes or complaints not resolved directly: Allmänna reklamationsnämnden (ARN) for consumers, Stockholm District Court for companies. GDPR complaints: Integritetsskyddsmyndigheten (IMY), imy@imy.se.