Privacy Policy

1. Information We Collect

Account Information: When you register, we collect your name, email address, and any optional profile information you provide (bio, avatar, business type).

Usage Data: We collect information about how you use the Service, including pages visited, lessons completed, community interactions, and feature usage. This helps us improve the platform.

Payment Information: Payment processing is handled by Stripe. We do not store your credit card numbers, bank account details, or other sensitive financial information on our servers. Stripe's privacy policy governs the handling of payment data.

Communications: We collect the content of messages you send through the platform (community posts, direct messages, support tickets).

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To process payments and manage subscriptions
• To communicate with you about your account, updates, and new features
• To personalize your experience (progress tracking, recommendations)
• To ensure platform safety and enforce our Terms of Service
• To generate anonymized, aggregated analytics to improve the platform

3. Information Sharing

We do not sell your personal information. We may share information with:

• Service Providers: Supabase (database/auth), Stripe (payments), Vercel (hosting), Resend (email), Google (AI features) — only as necessary to operate the Service
• Other Members: Your profile information (name, avatar, bio) is visible to other members. Your email is never shared with other members.
• Legal Requirements: If required by law, subpoena, or to protect our rights and safety

4. Data Security

We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Row Level Security (RLS) on all database tables
• Secure authentication via Supabase Auth
• Environment variables for all sensitive credentials
• Regular security reviews and updates

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

5. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information via your profile settings
• Deletion: Request deletion of your account and associated data by contacting support
• Portability: Request your data in a machine-readable format
• Opt-out: Unsubscribe from marketing emails at any time

6. Cookies & Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics data is collected through server-side logging, not client-side tracking pixels.

7. AI Features

Our AI features (AI Studio, AI Action Plans) process your inputs through Google's Gemini API. Your prompts are sent to Google for processing and are subject to Google's privacy policy. We do not store AI-generated content on Google's servers beyond the request/response cycle.

8. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If we learn we have collected such information, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the Service. The "Last updated" date at the top reflects the most recent revision.

10. Contact Us

For privacy-related questions or to exercise your rights, contact us through the Support section or email privacy@growvio.app.