Privacy Policy

1. Data Controller

Growvib is the data controller responsible for your personal data. If you have questions about this policy or wish to exercise your data rights, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• •Account information: email address, username, and password hash when you create an account.
• •Payment data: transaction records and payment method details are processed by our third-party payment processors. We do not store full credit card numbers.
• •Usage data: pages visited, features used, order history, IP address, browser type, device information, and timestamps.
• •Communication data: messages sent through our support channels, including email and Telegram.
• •Cookie data: session identifiers and preference cookies as described in our cookie section below.

3. Legal Basis for Processing

We process your data under the following legal bases (Art. 6 GDPR):

• •Performance of a contract: to provide our services, process orders, and manage your account.
• •Consent: for optional marketing communications and non-essential cookies. You may withdraw consent at any time.
• •Legitimate interests: for fraud prevention, platform security, service improvement, and analytics.
• •Legal obligation: to comply with tax, accounting, and regulatory requirements.

4. How We Use Your Data

We use your personal data to:

• •Provide, operate, and maintain our digital marketing services platform.
• •Process and fulfill your orders, including sending delivery status updates.
• •Respond to your inquiries and provide customer support.
• •Analyze usage patterns to improve our platform, features, and user experience.
• •Detect and prevent fraud, abuse, and security incidents.
• •Comply with legal obligations and enforce our Terms of Service.
• •Send promotional communications (only with your explicit consent).

5. Data Sharing & Transfers

We do not sell your personal data. We may share data with:

• •Payment processor: transactions are processed securely through NOWPayments (cryptocurrency). This provider has its own privacy policy.
• •Hosting and infrastructure providers: cloud services that host our platform with adequate data protection safeguards.
• •Analytics providers: anonymized usage data for service improvement.
• •Legal authorities: when required by law, regulation, or court order.

If data is transferred internationally, we ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

6. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy. Account data is retained while your account is active. When your account is deleted (by you or at your request), we permanently anonymize your personal data (your email, name, Telegram details, and other identifiers are erased so you can no longer be identified) and we end your active sessions. We retain anonymized transaction and financial records (orders, payments, balances) for the period required by applicable tax and accounting law, typically up to 5 years; because these records no longer identify you, they fall outside the right to erasure. You may request deletion of your account and associated personal data at any time, subject to these legal retention requirements.

7. Your Rights

Under the GDPR, you have the following rights:

• •Right of access: request a copy of the personal data we hold about you.
• •Right to rectification: request correction of inaccurate or incomplete data.
• •Right to erasure: request deletion of your personal data ("right to be forgotten").
• •Right to restriction: request that we limit how we use your data.
• •Right to data portability: receive your data in a structured, machine-readable format.
• •Right to object: object to processing based on legitimate interests or direct marketing.
• •Right to withdraw consent: withdraw consent for optional processing at any time.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

8. Cookies & Tracking

We use the following types of cookies:

• •Essential cookies: required for the platform to function (session management, authentication). These cannot be disabled.
• •Functional cookies: remember your preferences such as language and theme settings.
• •Analytics cookies: help us understand how visitors use our platform (only with your consent).

We do not use advertising or third-party tracking cookies. You can manage cookie preferences through your browser settings or our cookie consent banner.

Browser Extension

The GrowVib browser extension (Chrome and compatible browsers) adds analytics and ordering to supported social platforms. This section explains exactly what it accesses and sends.

• •On supported sites only (TikTok, Instagram, YouTube, X, Telegram Web), the extension reads publicly visible engagement metrics of the page you are viewing (such as view, like, and follower counts) to display its analytics card and the GrowVib Score. This happens locally in your browser; page content is not transmitted to us. For posts you mark as your own, the extension also stores derived metrics (engagement rate, views per hour, post age) locally in the browser to compute a personal baseline so it can compare new posts to your usual pace; this never leaves your device.
• •If you sign in, your session token is stored locally in the browser's extension storage and used only to call the GrowVib API for your services, orders, and balance - the same data you see in the dashboard.
• •With your permission (enabled by default, can be turned off any time in the extension's Account settings), the extension sends anonymous usage events: install, sign-in, panel opened, analytics viewed, order started, and order completed. Each event carries only the platform name and content type (for example "tiktok, video") and a random identifier that is not linked to your account. We never collect page URLs, usernames, messages, browsing history, or any page content.
• •Extension data is never sold or shared with third parties, and is used only to operate and improve the extension, in line with the Chrome Web Store User Data Policy, including its Limited Use requirements.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS/SSL), secure password hashing, access controls, and regular security reviews. While we take reasonable steps to protect your data, no method of transmission over the internet is 100% secure.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will take steps to delete that data promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.

12. Contact Us

For privacy-related questions, data requests, or complaints, contact us at:

Email: [email protected]

Growvib