Privacy Policy

1. Information We Collect

We collect information to provide, improve, and personalize the Growzly Service. The types of information we collect include:

Account Data

When you create an account, we collect your name, email address, and password (stored in hashed form). If you subscribe to a paid plan, payment information is collected and processed directly by Stripe — we do not store your full credit card number.

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, timestamps, device type, browser type, IP address, and referring URLs. This data helps us improve performance and user experience.

Third-Party Integration Data

When you connect third-party services (such as Google Business Profile, Meta/Facebook, or Twilio), we receive and store access tokens and the data necessary to provide integration features (e.g., Google reviews, social media posts, SMS messaging). We only request the minimum permissions required.

Customer Data You Provide

This includes contacts, leads, conversations, review requests, and any other data you enter or import into the platform. You retain full ownership of this data.

2. How We Use Your Information

• To provide, operate, and maintain the Service and its features.
• To process transactions and manage your subscription.
• To send transactional emails (e.g., password resets, billing receipts, account notifications).
• To send review requests and messages on your behalf through integrated channels (SMS, email).
• To generate analytics, reports, and insights within your dashboard.
• To detect and prevent fraud, abuse, and security threats.
• To improve the Service based on aggregated, anonymized usage patterns.
• To comply with legal obligations.

3. Data Sharing & Third-Party Services

We do not sell your personal information. We share data with third parties only as necessary to provide the Service:

• Stripe: Processes subscription payments and billing. Subject to Stripe's Privacy Policy.
• Postmark: Delivers transactional and review request emails on your behalf.
• Twilio: Sends and receives SMS messages for your inbox and review requests.
• Google (Google Business Profile API, Google Analytics API): Syncs reviews, business profile data, and analytics when you connect your Google account.
• Meta (Facebook & Instagram APIs): Publishes social media posts when you connect your Meta business accounts.
• Outscraper: Provides business data enrichment for the Scoutzly research tool.

We may also disclose information if required by law, legal process, or government request, or to protect the rights, safety, or property of Growzly, our users, or the public.

4. Data Retention

We retain your account data and customer data for as long as your account is active. If you delete your account, we will schedule all associated data for permanent deletion within 30 days. Certain data may be retained longer if required by law or for legitimate business purposes (e.g., billing records, fraud prevention). Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics.

5. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of all personal data we hold about you. You can export your data at any time from your account settings.
• Correction: Update or correct inaccurate personal data through your account settings.
• Deletion: Request deletion of your account and all associated data. You can initiate this from your account settings or by contacting us.
• Data Portability: Export your data in JSON or CSV format from your account settings.
• Objection & Restriction: Object to or request restriction of certain processing activities by contacting us.

To exercise any of these rights, visit your account settings or email us at hello@growzly.cloud. We will respond within 30 days.

6. Cookies & Tracking

We use the following types of cookies and similar technologies:

• Essential Cookies: Required for authentication, session management, and security (e.g., HTTP-only session cookies).
• Analytics Cookies: Help us understand how users interact with the Service. We use privacy-respecting analytics and do not sell this data.

We do not use third-party advertising cookies or tracking pixels. You can manage cookie preferences through your browser settings.

7. Security Measures

We take the security of your data seriously and implement industry-standard measures, including:

• All data transmitted between your browser and our servers is encrypted via HTTPS/TLS.
• Sensitive credentials (e.g., third-party API keys, integration tokens) are encrypted at rest using AES-256-GCM encryption.
• Passwords are hashed using bcrypt with a high work factor.
• Authentication tokens are stored in HTTP-only, secure cookies to prevent XSS attacks.
• Rate limiting and webhook secret validation protect public-facing endpoints.
• Regular security reviews and dependency updates.

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

The Service is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at hello@growzly.cloud.

9. International Data Transfers

Growzly is based in the United States. If you are accessing the Service from outside the United States, please be aware that your data may be transferred to, stored, and processed in the United States. By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your jurisdiction.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you via email or through the Service. We encourage you to review this policy periodically.

11. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

hello@growzly.cloud