Privacy policy
Last updated: [DATE]
This policy explains what personal data GrowMarketingPro ("we", "us") collects, why, who we share it with, and the choices you have. GrowMarketingPro is operated by [LEGAL ENTITY NAME], [REGISTERED ADDRESS], India ("the controller"). Contact us at privacy@growmarketingpro.com or through our help page.
1. What we collect
| Data | Examples | Why we use it |
|---|---|---|
| Account details | Name, email address, password (stored only as a secure hash), Google account ID if you sign in with Google | To create and secure your account, verify your email and let you log in |
| Brand space content | Brand names, websites, competitors, the questions you track, and the AI answers we collect for you | To provide the service: ask AI engines your questions and show you the results |
| Support messages | Your name, email, topic and the details you send us | To answer your request |
| Sign-up source | The button or page that brought you to sign up, UTM campaign tags, and the referring website | To understand which marketing works |
| Technical data | IP address, browser type, and server logs | To keep the service secure, prevent abuse and fix problems |
| Website visits | A random visitor ID stored in a cookie, the pages you view and buttons you click, the website or campaign that sent you, your browser, device type, language and time zone (used to estimate your country). We do not store your IP address for this. | To understand how people find and use our website, and which pages lead to sign-ups. If you create an account, your earlier visits are linked to it. |
| Plan interest | The paid plan you asked to be notified about | To tell you when paid plans open |
We do not sell your personal data, and we do not use it for advertising profiles.
2. Legal bases (UK and EU users)
We process your data to perform our contract with you (running your account and the service), for our legitimate interests (security, fraud prevention, improving the product and understanding our marketing), to meet legal obligations, and with your consent where we ask for it (for example product news emails). You can withdraw consent at any time.
3. Who we share data with
We use trusted service providers who process data on our behalf, under contracts that require them to protect it:
- AI providers: OpenAI (ChatGPT), Google (Gemini) and Anthropic (Claude). We send them the questions you track and your brand and competitor names so they can answer. We do not send your name, email or password.
- Hosting and database: [HOSTING PROVIDER, e.g. Render], which runs our servers and stores our database in [REGION].
- Email delivery: Resend, which sends verification codes, password resets, results emails and support replies.
- Live chat: [Crisp, if enabled], which provides the chat window.
- Fonts: Google Fonts, which serves the fonts on our pages and may receive your IP address.
- Payments (when paid plans open): our payment partner [e.g. Paddle], which acts as merchant of record and processes your payment details directly. We never see or store your full card number.
We may also disclose data if required by law, or to protect our rights, users or the public.
4. International transfers
Our providers may process data outside your country, including in the United States and India. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum.
5. How long we keep data
- Account and brand space data: while your account is open. When you delete your account, we delete it within 30 days, except backups, which roll off within [90] days.
- Support messages: up to [24] months after the conversation ends.
- Server logs: up to [30] days.
- Billing records: as long as tax law requires (typically 8 years in India).
6. Cookies and similar technology
We use one essential cookie, gmp_session, to keep you logged in, and a short-lived cookie during Google sign-in. We store a few small items in your browser's local storage, such as the button that brought you to sign up and whether you've opened the chat. We also set gmp_vid, a first-party cookie with a random ID that lets us count visits to our website and see which pages lead to sign-ups. It lasts up to 13 months, and the visit records are kept for up to 13 months. This data stays in our own database and is not shared with analytics or advertising companies. We do not use advertising cookies. [If you serve visitors in the UK or EU, have your lawyer confirm whether you need to ask for consent before setting gmp_vid, and add a cookie banner if so.]
7. Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict certain processing, and withdraw consent. You can delete your account yourself under Settings in the dashboard. For anything else, contact us. UK and EU users can also complain to their data protection authority. Users in India have rights under the Digital Personal Data Protection Act, 2023, and can contact our grievance officer: [NAME], [EMAIL].
8. Security
We protect data with encryption in transit (HTTPS), hashed passwords, access controls and regular updates. No system is perfectly secure, so please use a strong, unique password.
9. Children
GrowMarketingPro is a business tool and is not intended for anyone under 18. We do not knowingly collect children's data.
10. Changes
If we make significant changes, we'll email you or show a notice in the app before they take effect.