Privacy

Privacy Policy

Last updated: October 8, 2026

Your privacy matters to us. This policy explains what data we collect, how we use it, and how we protect it.

We never sell your data
HTTPS encryption always
Processed by trusted AI providers
Delete account, delete data
No marketing spam

1. Information We Collect

We collect information you provide directly: name, email address, and password when you register. We also collect usage data such as the strategies you generate, features you use, and session metadata (timestamps, and which pages you open and on which days you are active while signed in). If you use a paid plan, payment information is processed by our payment provider — we do not store full card details.

2. How We Use Your Information

We use your information to: (a) provide and improve the Service; (b) send transactional emails such as password resets and billing receipts; (c) analyse aggregate usage patterns to improve features; (d) enforce our Terms and Conditions and prevent abuse. We do not sell your personal data to third parties.

3. AI Processing & Third-Party Providers

Growiom uses third-party AI providers to generate content and images. When you generate a strategy, your input (product description, audience, tone) is sent to these providers for processing. These providers have their own privacy policies. We recommend not including personally identifiable information about third parties in your inputs. Generated content may be used by these providers to improve their models under their respective terms.

4. Data Storage

Your account data — name, email, plan, and usage — is stored server-side in an encrypted, access-controlled database. Your password is never stored directly; authentication is handled by our identity provider using industry-standard hashing. Generated strategy content is created on demand and shown to you; it is not retained on our servers beyond your account unless you explicitly save it (e.g. favoriting a strategy). Some non-sensitive interface preferences (such as your generation settings) are cached in your browser for convenience.

5. Cookies & Tracking

We use essential session cookies required for authentication and core functionality; these always run. With your consent, we also use Google Analytics to count visits and see roughly where visitors come from (country and region), and Google Ads cookies to measure our advertising and show our ads to people who have visited. If you are in the EU, the wider European Economic Area, the UK or Switzerland, we ask first: these load only after you choose Accept on the cookie banner, and nothing from them is stored in your browser if you choose Decline. You can change your choice at any time with "Cookie settings" in the site footer. Elsewhere they run by default. If you are in the US, the footer has a "Do not sell or share my personal information" link: opting out turns off Google Ads cookies and ad personalization in your browser, and we treat your browser's Global Privacy Control signal as that opt-out. We also set a small functional cookie that records only whether your region needs the banner, and your banner choice is kept in your browser's local storage. These Google services are governed by Google's own privacy policy.

6. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with: (a) third-party AI providers strictly to process your requests; (b) payment processors to handle billing; (c) law enforcement if required by a valid legal request. All third parties are contractually obligated to protect your data.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your data is removed from our systems within 30 days. Locally stored data in your browser (strategies, settings) is retained until you clear your browser storage or uninstall the browser.

8. Your Rights

Depending on your location, you may have the right to: access your personal data, correct inaccurate data, request deletion of your data, object to or restrict processing, and data portability. To exercise these rights, contact us at support@growiom.com. We will respond within 30 days.

9. Children's Privacy

Growiom is not directed to children under the age of 16. We do not knowingly collect personal information from children. If we discover that a child under 16 has provided personal data, we will promptly delete it. If you believe a child has provided data to us, please contact us immediately.

10. Security

We implement industry-standard security measures including HTTPS encryption, secure password hashing, and access controls. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password and keep your credentials private.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or an in-app banner at least 14 days before they take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions, data requests, or general legal matters, contact us at support@growiom.com. We aim to respond to all privacy inquiries within 5 business days.

By using Growiom, you also agree to our Terms & Conditions. Questions? Email us at support@growiom.com.