Privacy Policy

1. What Information Do We Collect?

Personal Information You Provide to Us

We collect personal information that you voluntarily provide when you:

• Register for an account or join our waiting list
• Book a demo or request a consultation
• Contact us for support or inquiries
• Subscribe to communications from us

This may include: name, email address, phone number, company name, job title, and any other information you choose to provide.

Payment Data

If you subscribe to a paid plan, we collect (through card payment providers) billing address and related payment information. Payment processing is held solely through PCI-DSS compliant providers. We do not store full payment card details on our servers.

Information Collected Automatically

When you access our Services, we automatically collect certain technical information, including: IP address, device type, browser type, operating system, page visits, time spent on pages, referring URLs, and other usage data. This is collected to enable functionality, troubleshoot, and provide better user experiences.

2. How Do We Use Your Information?

• Account management: To create and manage your account, process registrations, and maintain your profile.
• Service delivery: To provide, operate, and improve our AI platform, including AI Assistants and AI Agents built on your uploaded data.
• Communication: To send updates, newsletters, promotional materials, and respond to inquiries. You may opt out at any time.
• Security and compliance: To monitor suspicious activity, enforce our policies, protect against fraud.
• Analytics and improvement: To understand how our Services are used and to make improvements. You can opt out at any time.
• Security, authentication, legal compliance: Detect fraud or abuse, secure our services, and meet legal obligations.
• Marketing: With your explicit consent, to send information about products, features, and updates. You can unsubscribe at any time.

3. How We Handle Your Uploaded Data

Your Content Belongs to You

When you upload documents, PDFs, manuals, spreadsheets, or integrate third-party tools with Growy, this data is used exclusively to power your AI Agents and Assistants within your account.

We do not:

• Use your uploaded company data to train our general AI models
• Share your uploaded data with other customers
• Archive your data beyond what is necessary, except for technical support you have requested or to comply with legal obligations

Your uploaded data is encrypted at rest and in transit. You may request deletion at any time by contacting us.

4. Will Your Information Be Shared With Anyone?

• With your consent: When you have given explicit permission.
• Service providers: With third parties performing services on our behalf (hosting, email, analytics, processing), contractually obligated to protect your information.
• Legal obligations: Where required by law, regulation, or governmental request.
• Business transfers: In the event of a merger, acquisition, sale of assets, or bankruptcy.
• Protection of rights: Where necessary to protect Growy, our users, or the public.

We do not sell your personal information to third parties.

Detailed information about our subprocessors and data processing arrangements is provided as part of our service agreement. Contact [email protected].

5. International Data Transfers

Your information may be transferred to and processed in countries outside the EEA or the UK. We ensure such transfers comply with UK GDPR, including Standard Contractual Clauses (SCCs) or adequacy decisions.

6. How Long Do We Keep Your Information?

• Account data: Retained while your account is active. 60 months after account closure or deletion request.
• Marketing data: Retained until active opt-out.
• Analytics data: Anonymized or deleted within 36 months of collection.
• Uploaded content: Retained until you delete it or close your account, unless legally required otherwise.
• AI processing logs: Retained for 48 months for audit and troubleshooting.

If you request account deletion, we will remove your personal data within 30 days, except where legally required to retain it longer.

7. Data Breach Notification

In the event of a security breach likely to result in a high risk to your personal data, we will notify the relevant control authority within 72 hours. Where the breach is likely to result in a high risk to individuals' rights and freedoms, we will also notify affected individuals without undue delay, as required by GDPR Article 34.

8. How Do We Keep Your Information Safe?

• Encryption of data at rest and in transit (TLS/SSL)
• Access controls and role-based permissions
• Regular security assessments and monitoring
• Secure cloud infrastructure with SOC 2-compliant providers

Despite our safeguards, no method of electronic transmission or storage is 100% secure.

9. What Are Your Privacy Rights?

If you are located in the EEA or the UK, you have the following rights under GDPR:

• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Right to withdraw consent

To exercise any of these rights, contact [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

10. Controls for Do-Not-Track Features

We do not currently respond to DNT browser signals. We will inform you if we do later. For more, see our AI policy and Cookie policy.

11. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this page.

13. Contact Us

Email: [email protected]

Attitude Group Ltd.
2 Alderney Court, Montague Street
Reading, England, RG1 4JW
United Kingdom