Privacy Policy

1. Data Controller

Growvib is the data controller responsible for your personal data. If you have questions about this policy or wish to exercise your data rights, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• •Account information: email address, username, and password hash when you create an account.
• •Payment data: transaction records and payment method details are processed by our third-party payment processors. We do not store full credit card numbers.
• •Usage data: pages visited, features used, order history, IP address, browser type, device information, and timestamps.
• •Communication data: messages sent through our support channels, including email and Telegram.
• •Cookie data: session identifiers and preference cookies as described in our cookie section below.

3. Legal Basis for Processing

We process your data under the following legal bases (Art. 6 GDPR):

• •Performance of a contract: to provide our services, process orders, and manage your account.
• •Consent: for optional marketing communications and non-essential cookies. You may withdraw consent at any time.
• •Legitimate interests: for fraud prevention, platform security, service improvement, and analytics.
• •Legal obligation: to comply with tax, accounting, and regulatory requirements.

4. How We Use Your Data

We use your personal data to:

• •Provide, operate, and maintain our digital marketing services platform.
• •Process and fulfill your orders, including sending delivery status updates.
• •Respond to your inquiries and provide customer support.
• •Analyze usage patterns to improve our platform, features, and user experience.
• •Detect and prevent fraud, abuse, and security incidents.
• •Comply with legal obligations and enforce our Terms of Service.
• •Send promotional communications (only with your explicit consent).

5. Data Sharing & Transfers

We do not sell your personal data. We may share data with:

• •Payment processors: to process transactions securely (e.g., Stripe, PayPal). These processors have their own privacy policies.
• •Hosting and infrastructure providers: cloud services that host our platform with adequate data protection safeguards.
• •Analytics providers: anonymized usage data for service improvement.
• •Legal authorities: when required by law, regulation, or court order.

If data is transferred internationally, we ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

6. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy. Account data is retained while your account is active. After account deletion, we may retain certain data for up to 5 years to comply with legal and tax obligations. Transaction records are kept for the legally required period under applicable tax law. You may request deletion of your account and associated data at any time, subject to legal retention requirements.

7. Your Rights

Under the GDPR, you have the following rights:

• •Right of access: request a copy of the personal data we hold about you.
• •Right to rectification: request correction of inaccurate or incomplete data.
• •Right to erasure: request deletion of your personal data ("right to be forgotten").
• •Right to restriction: request that we limit how we use your data.
• •Right to data portability: receive your data in a structured, machine-readable format.
• •Right to object: object to processing based on legitimate interests or direct marketing.
• •Right to withdraw consent: withdraw consent for optional processing at any time.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

8. Cookies & Tracking

We use the following types of cookies:

• •Essential cookies: required for the platform to function (session management, authentication). These cannot be disabled.
• •Functional cookies: remember your preferences such as language and theme settings.
• •Analytics cookies: help us understand how visitors use our platform (only with your consent).

We do not use advertising or third-party tracking cookies. You can manage cookie preferences through your browser settings or our cookie consent banner.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS/SSL), secure password hashing, access controls, and regular security reviews. While we take reasonable steps to protect your data, no method of transmission over the internet is 100% secure.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will take steps to delete that data promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.

12. Contact Us

For privacy-related questions, data requests, or complaints, contact us at:

Email: [email protected]

Growvib