Last updated September 16, 2026

Privacy Policy

This Privacy Policy describes how GrowALE collects, uses, protects, and manages information when you use our AI-native CRM platform and connected services.

01

Information We Collect

We collect information necessary to operate GrowALE, provide our AI-native CRM features, and deliver the services you configure. The exact data collected depends on how you interact with the platform and which third-party tools you connect.

  • Account & Profile Data: Your name, email address, company name, profile photo, and password hash created during registration.
  • Workspace & CRM Data: Contacts, leads, client companies, deal values, sales pipeline stages, custom tags, intake form submissions, notes, and task lists you upload or record.
  • Audio & Dictation Recordings: Temporary voice and meeting audio recordings submitted when you utilize our voice-to-text dictation and transcription features.
  • Integration & Authorization Tokens: OAuth tokens, connected email identifiers, and platform metadata returned when you connect external tools such as Google Workspace or Resend.
  • Billing & Payment Information: Stripe customer identifiers, transaction records, and subscription statuses. Full payment card details are collected and processed directly by Stripe and are never stored on GrowALE servers.
  • Technical & Usage Telemetry: Log data, IP addresses, browser types, device identifiers, session timestamps, and operational metrics required to ensure security and platform uptime.
02

How We Use Information

GrowALE uses collected information strictly to provide, protect, optimize, and deliver the CRM tools and relationship workflows you request.

  • Authenticate your identity and manage team workspaces and role permissions.
  • Manage contact pipelines, intake forms, automated task reminders, and deal lifecycles.
  • Transcribe audio memos, analyze relationship timelines, and generate AI insights.
  • Dispatch authorized email follow-ups and track email delivery statuses.
  • Verify subscription entitlements, process recurring payments, and enforce single-use trial rules.
  • Monitor system health, detect fraudulent activities, and provide responsive customer support.
03

AI Processing And Machine Learning

GrowALE incorporates leading artificial intelligence and speech-to-text models (such as OpenAI, Anthropic, and AssemblyAI) to power voice dictation, smart summaries, and contact scoring.

When you use AI features, your inputs (such as audio snippets, contact notes, or drafting prompts) are transmitted to these model providers solely to generate the requested output in real time.

We do not sell your workspace data, and we do not permit our AI subprocessors to retain or use your proprietary CRM data or confidential client files to train public foundational AI models.

04

Connected Platforms And Google Limited Use

When you connect third-party platforms such as Google Workspace, GrowALE requests access only to the specific OAuth scopes required to deliver the features you enable (such as contact syncing or Gmail communication logging).

GrowALE's use and transfer of information received from Google APIs to any other app adheres strictly to the Google API Services User Data Policy, including its Limited Use requirements.

We never transfer or disclose Google user data to third parties for advertising, data-brokerage, or speculative training purposes. You can revoke connected integrations at any time from your workspace settings or directly through your Google security dashboard.

05

Information Sharing And Disclosure

We treat your Customer Data as confidential. We do not sell, rent, or trade your personal information or your client lists to third parties for any purpose.

We share information only with trusted service providers and subprocessors that assist in operating the Services under rigorous confidentiality and data protection obligations:

  • Cloud Infrastructure & Database: Supabase and Cloudflare for secure cloud database hosting and authenticated data storage.
  • Payment Processing: Stripe for PCI-DSS compliant subscription billing and payment execution.
  • Email & Notifications: Resend for transactional email dispatch and campaign delivery.
  • Media Storage: Cloudinary for secure file, image, and document storage.
  • Legal & Regulatory Compliance: When required to comply with a valid court order, subpoena, legal process, or applicable governmental regulation.
06

Data Security And Storage

We implement comprehensive administrative, technical, and physical safeguards designed to protect Customer Data from unauthorized access, loss, or alteration.

All data in transit is encrypted using modern TLS 1.3 encryption protocols. Data stored at rest is protected with AES-256 encryption. Our database architecture enforces strict Row-Level Security (RLS), guaranteeing that each organization's workspace data remains segregated and accessible only to authorized members.

While we use industry-standard security measures, no method of transmission over the Internet or electronic storage is completely infallible, and we cannot guarantee absolute security.

07

Data Retention And Deletion

We retain Customer Data for as long as your workspace account remains active and as needed to fulfill the purposes described in this Privacy Policy.

If you cancel your subscription or delete your workspace, we take steps to permanently delete or de-identify your workspace data within sixty (60) days, except where retention is mandated by applicable tax, accounting, or regulatory requirements.

08

Your Rights And Choices

Depending on your jurisdiction, you may have statutory rights regarding your personal information, including rights under the GDPR, CCPA/CPRA, and other privacy frameworks.

  • Access & Export: You may request a copy of the personal data we hold about you or export your CRM contacts.
  • Correction & Deletion: You can update your profile information in account settings or request complete account deletion.
  • Revocation of Consents: You may disconnect any linked third-party integration at any time to cease data synchronizations.
  • Opt-Out: You can opt out of promotional communications at any time using the unsubscribe link in our emails.
09

Children's Privacy

GrowALE is an enterprise and business software solution intended solely for adults aged 18 and older. We do not knowingly solicit or collect personal information from individuals under the age of 18. If we learn that we have collected information from a child under 18, we will promptly delete it.

10

Changes To This Policy And Contact

We may update this Privacy Policy periodically to reflect enhancements to our platform, new integrations, or changes in legal regulations. When material modifications occur, we will update the "Last updated" date at the top of this page.

If you have questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact our privacy team at privacy@growale.com or contact our general support team at support@growale.com.