Privacy policy
This policy explains what information Growzy ("Growzy," "we," "us") collects when you use our website at usegrowzy.com and our application at app.usegrowzy.com (together, the "Service"), how we use it, and the choices you have. If you have questions, email support@usegrowzy.com.
Information we collect
Account information
When you sign in with Google, we receive your name, email address, profile image and a verified account identifier. We do not request access to your Gmail, Google Drive or other Google data. We store sign-in sessions, authentication records and request information used to protect sign-in and prevent abuse.
Connected Instagram accounts
When you connect an Instagram Business or Creator account through Instagram's official login, we store the account ID, username, the access credentials Instagram grants us and the connection status.
Instagram comments and messages
To run your automations, we process Instagram comments, direct messages, story replies and mentions sent to your connected accounts, including their text, sender identifiers, post and story identifiers and timestamps. We use this to match your automation rules, send the replies you configured and show conversations in your inbox.
Contacts and leads
If your automations ask for an email address or phone number, we store the answers your contacts provide, linked to their Instagram user, so you can view and export them. We also record link clicks from automated messages to show click statistics and decide who receives follow-up messages.
Workspace and usage data
We store workspace membership, automation settings, event activity, delivery results and message usage needed to apply plan limits.
Billing information
Payments are processed by Dodo Payments, our merchant of record. We receive subscription status, plan and customer identifiers from Dodo Payments. We do not receive or store your full card details.
Website visits
Our marketing website does not use advertising or analytics cookies or third-party tracking scripts. Our hosting provider may process standard request information, such as IP address and browser type, to deliver and secure the site.
How we use information
- To provide the Service: sign-in, account connection, automations, inbox, contacts, link tracking and reports.
- To process subscriptions and apply plan limits.
- To secure the Service, prevent abuse and troubleshoot problems.
- To communicate with you about your account, support requests and important changes.
We do not sell personal information, and we do not use Instagram data or your contacts' data for advertising. We use Instagram Platform data only to provide the Service you requested, in line with Meta's Platform Terms.
Service providers
We share information only with providers that help us run the Service, under agreements that limit their use of it:
- Cloudflare hosts the application, website and database.
- Google authenticates sign-in.
- Meta provides the Instagram API and receives the API requests needed to read comments and send messages you configured.
- Dodo Payments processes payments as merchant of record.
We may also disclose information if required by law, or to protect the rights, safety and security of our users and the Service.
Storage and security
Instagram access credentials are encrypted in our database. Access to workspace data is limited to authorized members of that workspace. Data is stored and processed in the United States and other countries where our providers operate. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard safeguards.
Retention
We keep account, workspace, automation and activity data while your account is active. Disconnecting an Instagram account removes its stored access credential and stops processing for that account, but keeps saved automations and activity until you delete them or ask us to. When you request deletion, we delete the requested data within 30 days, except where we must keep it for legal, billing or security reasons. Provider logs and backups expire according to their retention schedules.
Your choices and rights
- Disconnect Instagram in Growzy at any time, or revoke access from Instagram under Settings, then Apps and websites.
- Export your contacts as CSV from the app.
- Access, correct or delete your information by emailing support@usegrowzy.com. See our data deletion instructions.
Depending on where you live, including California and other US states, you may have additional rights to know, access, correct or delete personal information, and to not be discriminated against for exercising those rights. We honor these requests for all users. We do not sell or share personal information for cross-context behavioral advertising.
Your contacts' information
When you use Growzy, you decide which messages are sent and which details are collected from people who interact with your Instagram account. You are responsible for having a lawful basis to contact them and for complying with applicable laws, such as CAN-SPAM and the TCPA, when you use exported emails or phone numbers.
Children
The Service is not directed to children under 13, and you must be at least 18 to create an account. We do not knowingly collect information from children under 13.
Changes to this policy
We may update this policy from time to time. If we make material changes, we will update the effective date and notify account owners by email or in the app.
Contact
Email support@usegrowzy.com with any privacy question or request.