🛡️Compliance & Data Protection

Privacy Policy

Effective Date: August 29, 2026 • Last Revised: August 29, 2026

At GrowBuddy (“GrowBuddy”, “we”, “us”, or “our”), we respect your privacy and are committed to protecting the personal data of our users, developers, and visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access our website (growbuddy.tech), software platform, Model Context Protocol (MCP) integrations, and developer tools.

By creating an account or using GrowBuddy, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect information in three ways: directly from you, automatically through your use of the Service, and from trusted third-party service providers.

A. Information You Provide to Us:

  • Account Credentials: Full name, email address, password hash, or third-party authentication tokens (e.g., Google OAuth profile information).
  • SaaS Identity & Positioning Data: Product name, one-liner descriptions, website URLs, target audience profiles, problem-solution statements, and onboarding screenshots.
  • Code Diffs & Build Commits: Git commit logs and git diff summaries submitted manually or via IDE extensions (Cursor, VS Code, Antigravity) to synthesize build-in-public milestone updates.
  • Customer Communication: Inquiries submitted via email, contact forms, or customer support channels.

B. Connected Social Platform Data:

When you choose to connect your social media profiles (e.g., Meta / Instagram Business, 𝕏 / Twitter), we store OAuth access tokens, page IDs, and basic account identifiers required strictly to schedule, preview, and publish approved social media posts on your behalf.

C. Automatically Collected Device & Usage Data:

Log data, IP address, browser type, operating system, referring URLs, access timestamps, and usage metrics within our web application.

2. How We Use Your Information

We use the information we collect strictly for legitimate business and product purposes:

  • Delivering Core AI Workflows: Analyzing your product positioning and git commits to generate tailored audience recommendations, 14-day launch guides, and social media captions.
  • Publishing Authorized Content: Dispatching approved social posts and visual assets to your connected accounts.
  • Billing & Subscription Verification: Reconciling account subscription status and usage limits via Paddle.
  • Customer Communications: Sending service announcements, security alerts, product updates, and responding to support tickets.
  • Security & Abuse Prevention: Detecting fraudulent activities, unauthorized access, and policy violations.

3. AI Synthesis & Code Privacy Guarantee

🔒 Your Intellectual Property and Source Code Remain Confidential

  • We utilize enterprise AI models (Google Gemini and Groq) strictly for real-time text and positioning synthesis.
  • No Model Training: Your private code diffs, prompts, and business data are never used to train public or foundational AI models.
  • Data transmitted to AI inference providers is processed ephemerally and is not stored or indexed for public consumption.

4. Payment Processing & Merchant of Record

Our order process is conducted by our online reseller and Merchant of Record, Paddle.com.

Paddle is responsible for all checkout processing, customer billing, payment verification, invoicing, and applicable sales tax / VAT collection.

GrowBuddy does not receive, process, or store full credit card numbers or banking credentials on our infrastructure. All payment data is handled under Paddle's strict PCI-DSS Level 1 certified security standards. You can review Paddle's Privacy Policy at paddle.com/legal/privacy.

5. Sharing of Information

We do not sell, rent, or monetize your personal data. We share information only with trusted subprocessors necessary to deliver our services:

  • Database & Authentication: Supabase Inc. (Encrypted cloud database and auth hosting).
  • Merchant of Record: Paddle.com Market Limited (Subscription billing & checkout).
  • AI Inference APIs: Google Cloud (Gemini) & Groq Inc. (Secure inference pipelines).
  • Connected Social APIs: Meta Platforms Inc. & X Corp (Authorized content posting).
  • Legal Compliance: If required by law, subpoena, or to protect the vital rights and security of GrowBuddy, our users, or the public.

6. Your Data Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction (including the European Economic Area, UK, and California), you possess specific legal rights regarding your personal data:

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Update or correct inaccurate or incomplete data.

Right to Erasure (“To Be Forgotten”)

Request complete permanent deletion of your account and data.

Right to Data Portability

Export your project identities and generated assets in JSON format.

To exercise any of these rights, email us at team@growbuddy.tech. We will fulfill verified requests within 30 days without charge.

7. Data Security & Retention

We maintain administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, loss, or alteration. All web communications are encrypted in transit using industry-standard TLS/HTTPS protocols, and sensitive tokens are encrypted at rest.

We retain your personal data only as long as necessary to provide you with the Service or to comply with applicable legal, tax, and accounting requirements.

8. Children's Privacy

GrowBuddy is intended solely for adult software developers, founders, and professionals aged 18 and older. We do not knowingly collect or solicit personal information from children under the age of 13 (or under 16 in the EEA). If we learn that we have inadvertently collected data from a child, we will promptly delete that information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our legal obligations, product features, or data practices. We will notify you of material changes by updating the “Last Revised” date at the top of this page and, where appropriate, sending an email notification to registered account holders.

10. Contact & Data Protection Officer

If you have questions, feedback, or concerns regarding this Privacy Policy or our data handling practices, please contact our Data Protection Team:

GrowBuddy Inc.

Email: team@growbuddy.tech

Support Portal: growbuddy.tech/contact

Merchant Inquiries: paddle.net