Privacy Policy

1. Data Controller

GrowVib is the data controller responsible for your personal data. If you have questions about this policy or wish to exercise your data rights, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• •Account information: email address, username, and password hash when you create an account.
• •Payment data: amounts, dates, and payment status; for card payments, PayRam's payment reference (your card details stay with PayRam and never reach us); for cryptocurrency payments, the coin, network, and blockchain transaction identifiers, which are public on the blockchain; for Telegram Stars, Telegram's payment identifiers; and the wallet address you give us for affiliate payouts.
• •Verification data: only when verification is required (for example a request to return funds, a large or unusual deposit, or an affiliate payout), identity documents, proof of address, and information about the source of funds.
• •Usage data: pages visited, features used, order history, IP address, browser type, device information, and timestamps.
• •Communication data: messages sent through our support channels, including email and Telegram.
• •Cookie data: session identifiers and preference cookies as described in our cookie section below.

3. Legal Basis for Processing

We process your data under the following legal bases (Art. 6 GDPR):

• •Performance of a contract: to provide our services, process orders, and manage your account.
• •Consent: for optional marketing communications and non-essential cookies. You may withdraw consent at any time.
• •Legitimate interests: for fraud prevention, platform security, service improvement, and analytics.
• •Legal obligation: to comply with tax, accounting, anti-money-laundering, and other regulatory requirements, including identity verification where it is required.

4. How We Use Your Data

We use your personal data to:

• •Provide, operate, and maintain our digital marketing services platform.
• •Process and fulfill your orders, including sending delivery status updates.
• •Respond to your inquiries and provide customer support.
• •Analyze usage patterns to improve our platform, features, and user experience.
• •Detect and prevent fraud, abuse, money laundering, and security incidents, and verify identity where required.
• •Comply with legal obligations and enforce our Terms of Service.
• •Send promotional communications (only with your explicit consent).

5. Data Sharing & Transfers

We do not sell your personal data. We may share data with:

• •Payment processors: card, Apple Pay, Google Pay, and stablecoin payments are processed by PayRam, cryptocurrency payments by Heleket, and Telegram Stars payments by Telegram (Stars are bought inside Telegram with Apple Pay or Google Pay). Card details are entered on the provider's own page and never reach us. Each provider has its own privacy policy.
• •Hosting and infrastructure providers: cloud services that host our platform with adequate data protection safeguards.
• •Analytics providers: anonymized usage data for service improvement.
• •Legal authorities: when required by law, regulation, or court order, including reports that anti-money-laundering law requires.

If data is transferred internationally, we ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

6. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy. Account data is retained while your account is active. When your account is deleted (by you or at your request), we permanently anonymize your personal data (your email, name, Telegram details, and other identifiers are erased so you can no longer be identified) and we end your active sessions. We retain anonymized transaction and financial records (orders, payments, balances) for the period required by applicable tax and accounting law, typically up to 5 years; because these records no longer identify you, they fall outside the right to erasure. You may request deletion of your account and associated personal data at any time, subject to these legal retention requirements. If you went through identity verification, those records are kept in identifiable form for as long as anti-money-laundering law requires, typically 5 years after the verification or the end of our relationship, and are then deleted; that legal obligation also limits the right to erasure for these records.

7. Your Rights

Under the GDPR, you have the following rights:

• •Right of access: request a copy of the personal data we hold about you.
• •Right to rectification: request correction of inaccurate or incomplete data.
• •Right to erasure: request deletion of your personal data ("right to be forgotten").
• •Right to restriction: request that we limit how we use your data.
• •Right to data portability: receive your data in a structured, machine-readable format.
• •Right to object: object to processing based on legitimate interests or direct marketing.
• •Right to withdraw consent: withdraw consent for optional processing at any time.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

8. Cookies & Tracking

We use the following types of cookies:

• •Essential cookies: required for the platform to function (session management, authentication). These cannot be disabled.
• •Functional cookies: remember your preferences such as language and theme settings.
• •Analytics cookies: help us understand how visitors use our platform (only with your consent).

We do not use advertising or third-party tracking cookies. You can manage cookie preferences through your browser settings or our cookie consent banner.

Browser Extension

The GrowVib browser extension (Chrome and compatible browsers) adds analytics and ordering to supported social platforms. This section explains exactly what it accesses and sends.

• •On supported sites only (TikTok, Instagram, YouTube, X, Telegram Web), the extension reads publicly visible engagement metrics of the page you are viewing (such as view, like, and follower counts) to display its analytics card and the GrowVib Score. This happens locally in your browser; page content is not transmitted to us. For posts you mark as your own, the extension also stores derived metrics (engagement rate, views per hour, post age) locally in the browser to compute a personal baseline so it can compare new posts to your usual pace; this never leaves your device.
• •If you sign in, your session token is stored locally in the browser's extension storage and used only to call the GrowVib API for your services, orders, and balance - the same data you see in the dashboard.
• •With your permission (enabled by default, can be turned off any time in the extension's Account settings), the extension sends anonymous usage events: install, sign-in, panel opened, analytics viewed, order started, and order completed. Each event carries only the platform name and content type (for example "tiktok, video") and a random identifier that is not linked to your account. We never collect page URLs, usernames, messages, browsing history, or any page content.
• •Extension data is never sold or shared with third parties, and is used only to operate and improve the extension, in line with the Chrome Web Store User Data Policy, including its Limited Use requirements.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS/SSL), secure password hashing, access controls, and regular security reviews. While we take reasonable steps to protect your data, no method of transmission over the internet is 100% secure.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will take steps to delete that data promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.

12. Contact Us

For privacy-related questions, data requests, or complaints, contact us at:

Email: [email protected]

GrowVib