Groundhog Terms of Use

Version: preview-terms-1

Effective date: 2026-10-10

Service operator: Unifinity Software Corporation

Company website: https://unifinity.com

Groundhog website: https://groundhog.unifinity.com

Abuse reporting instructions: Report abuse

1. The service and these terms

Groundhog connects an application running on your computer to a public HTTPS address. Its hosted service receives visitors' requests and forwards them to the client you run. Your application remains on your computer; a tunnel does not deploy, back up, or independently run it.

These terms cover the hosted Groundhog service operated by Unifinity Software Corporation, its website, workspace accounts, and tunnels. In these terms, “we”, “us”, and “the operator” mean Unifinity Software Corporation. These terms do not change the license of the open-source Groundhog client packages or govern a separately operated Groundhog deployment.

Creating a workspace requires your explicit agreement to these terms. If you act for an organization, you must have authority to use the service on its behalf. You must also comply with applicable law and any obligations you have to the people whose information your application processes.

2. Free developer preview

The hosted developer preview offers free workspace creation where the signup page makes that offer. Creating a free preview workspace does not authorize a subscription charge, automatic conversion to a paid plan, or a payment commitment. A future paid service would require separately disclosed pricing and an agreement before charging you.

The preview is intended for development, demonstrations, integration testing, and similar legitimate uses. Features, service addresses, capacity, and preview availability may change. These terms do not promise specific capacity, uptime, support response time, a permanent hostname, or an ongoing free plan. Do not rely on a preview tunnel as the sole way to run a production or emergency service.

Your local application and client must remain running and connected for visitors to reach the application. Creating a tunnel alone does not start forwarding.

3. Accounts, workspaces, and connection keys

Use an account you are authorized to control. Keep access to your sign-in provider secure. Workspace owners manage invitations and membership; accept invitations only for workspaces you intend to join. Choose names that do not impersonate another person or organization or infringe their rights.

Your connection key authorizes a client to connect its tunnel. Keep it private and share it only with people authorized to operate that tunnel. Do not commit a key to source control or include it in screenshots, public issues, support reports, or public command examples. Regenerate a key if it is lost or exposed, and update your running clients. Regeneration invalidates the previous key.

You are responsible for choosing the application and local endpoint you expose, and for using appropriate authentication and access controls in that application. Anyone who can reach the public tunnel address may send requests to the exposed endpoint. Signing in to the Groundhog dashboard does not require visitors to sign in to your application.

Invite only people you trust to use the permissions you grant. Workspace permissions govern access to tunnels and their diagnostics. Remove access that is no longer needed. A public tunnel hostname is not a confidentiality control.

4. Acceptable use

Use Groundhog only for lawful activity you are authorized to perform. Do not use the service to:

host phishing pages, collect credentials deceptively, impersonate a service, or commit fraud;
distribute malware, run command-and-control infrastructure, or facilitate unauthorized access;
exploit other people's systems, conduct unauthorized scanning or attacks, or conceal abusive traffic;
distribute unlawful material, infringe intellectual-property rights, or expose someone else's private information without authorization;
harass, threaten, exploit, or knowingly facilitate harm to another person;
send spam, evade service restrictions, create accounts to bypass enforcement, or interfere with other users or the service;
attempt to access another workspace's data, steal connection keys, or bypass Groundhog's authentication or isolation controls.

Security testing must be limited to systems and activities for which you have permission. An application's development status does not excuse harmful or unauthorized use. Do not expose production credentials, confidential datasets, or sensitive personal information through a public preview tunnel.

5. Traffic, diagnostics, and privacy boundaries

The hosted service processes the requests and responses it forwards. Public HTTPS does not mean the operator is technically unable to process that traffic. Groundhog is not an end-to-end encrypted private network between a visitor and your computer.

The dashboard includes request diagnostics and usage information. Authorized workspace users may be able to view request details for tunnels they are permitted to inspect. The implementation can record request metadata and selected headers; it redacts certain sensitive header values, but this is not a guarantee that all secrets or personal information will be detected. Optional body capture can retain prefixes of eligible request and response bodies when an authorized user enables it.

Keep body capture off unless you need it and are authorized to collect that information. Use synthetic development data where possible. You are responsible for appropriate notice, consent, and other lawful grounds for information your application collects or exposes. Groundhog's diagnostic features do not replace those obligations.

Your sign-in identity is used to associate your account with workspace permissions. The dashboard can show account display names and email addresses to people authorized to view workspace membership. Groundhog also records usage and connection information and can record the request diagnostics described above. Reports sent to support are processed through the operator's support mailbox.

Account information, usage records, request diagnostics, connection history, operational logs, and reports may have different retention and access arrangements. Privacy information: Groundhog privacy information. That information must explain the actual hosted service's collection, access, retention, deletion, and privacy-contact practices. These terms do not promise a particular retention period, total deletion on tunnel removal, data residency, anonymous use, or that traffic is never logged.

The operator may process information necessary to operate the service, investigate misuse, and comply with applicable legal obligations, subject to its published privacy information and applicable law. Do not send connection keys, account passwords, authorization headers, or sensitive request bodies when asking for support or reporting abuse.

6. Reporting and takedown

Report suspected misuse using the instructions at Report abuse, or email support@unifinity.com. Include the public tunnel hostname or URL, what you observed, when you observed it (including a timezone), and a safe description or redacted evidence. Do not include credentials, private request bodies, or unnecessary personal information. Do not investigate by entering real credentials or downloading suspected malware.

The operator may review reports and take proportionate action to protect people, other users, and the service. Actions may include restricting access, suspending a workspace, disconnecting a tunnel, revoking a key, or removing a tunnel. Urgent harmful activity may require action before contacting the account holder. Where appropriate and lawful, the operator may explain an action and allow the account holder to supply relevant information through the operator contact.

A report does not guarantee a particular decision or response time. The operator may preserve relevant records or provide information when required by applicable law. Its handling of reports must follow the published privacy information and applicable law. Groundhog's reporting channel is not an emergency-response service.

7. Availability, changes, and ending use

The preview is provided on an available basis. Connections can fail or be interrupted because of your computer, local application, network, service maintenance, defects, or service changes. Keep your own copies of application code and data, and do not treat tunnel diagnostics as your sole audit record or backup.

The operator may change or discontinue preview features or the preview service. Material changes to these terms will be published with a new version and effective date. Any notice and renewed agreement required by applicable law must be obtained. These terms do not authorize retroactive changes to privacy commitments.

You can stop forwarding by stopping your client. You can delete a tunnel if you have permission; deletion releases its name and invalidates its connection key. To leave a workspace or request account assistance, contact its owner or the operator as appropriate. Stopping a client or deleting a tunnel does not, by itself, promise deletion of every associated account, usage, diagnostic, or report record.

The operator may suspend or end access for violations of these terms, harmful activity, legal obligations, or service protection. Nothing in these terms is intended to waive rights that cannot lawfully be waived.

8. Contact

Service questions, account assistance, requests concerning an enforcement decision, and privacy questions: support@unifinity.com.

Suspected abuse: Report abuse or support@unifinity.com.

Company information: https://unifinity.com.