Data and privacy in Grove
What lives in Cypress and what in Grove, who sees what, what Cedar keeps, and which answers Cypress staff may review.
TL;DRAI summary
This chapter explains what data Grove, your communication and AI assistant, stores and who can see it. It helps you understand how your information is kept private and secure, as Cypress is always the primary record for your vehicle remarketing operations.
For: Everyone in Grove · Admins deciding to connect it
Cypress is the record
Your cars, offers, closings, plans, invoices and documents live in Cypress, and only there. Grove reads them as the person signed in, with that person's role, so you see in Grove exactly what you can see in Cypress. Every change goes through Cypress, with its rules and its audit trail.
What Grove keeps
| Grove keeps | Who sees it |
|---|---|
| Messages, threads and reactions | The members of each room |
| Photos, files and audio notes you send | The members of the room. Photos are made smaller on your phone and lose their location data before upload. |
| Tasks | The owner and the team; a task about a car also goes to the car in Cypress |
| Your Inbox | You only. Kept 60 days. |
| What Cedar remembers about you | You only, in Profile, with Forget all |
| Team memory | Everyone in your organization and your Cypress Manager |
| Corrections and lessons | You, or your team for a team lesson |
| A record of each Cedar answer (what it read, the model, the time) | Anyone who can see the answer, through Why Cedar said this. The full record of the answer is kept for Cypress staff. |
Who sees what
- Your Cedar room is just you and Cedar.
- Buyers and sellers never talk directly. Each side of a closing has its own deal lane; Cypress sits between.
- Your Cypress Manager is in your huddle and can act for you within what your organization allows.
- Cypress staff review the answers worth a second look on Cypress's Cedar quality page: an answer whose check failed, an answer someone corrected, and a small sample of answers from shared rooms (never a sample from your own Cedar room). They see the question, the answer and what Cedar read. Their verdict can become a lesson for your team.
- Benchmarks run only in sandbox organizations, never with your data.
Connecting and disconnecting
An admin connects the organization to Grove once, choosing what Grove may do in Cypress; members get the same or less. When the connection is removed in Cypress, or a person leaves the organization, Cypress stops accepting their sign-in and Grove asks them to sign in again. Grove has no password of its own: your Cypress sign-in is the only key.
Notifications and quiet hours
Everything that needs you lands in Grove's Inbox as it happens. The lock screen stays calm unless you choose more: direct messages, one brief each morning, at most two interruptions a day, never between 7 PM and 7 AM.
Apps & Agents
Connect an AI agent or an app to Cypress. The MCP servers, a sandbox to start in, what an agent may and may not do, keys and tokens, and every action of the app.