Privacy policy

Your workspace data. The contacts, companies, deals, tickets, emails, forms submissions and other records you store in Growlyne belong to you. For that data you are the controller, and the operator of the server Growlyne runs on acts on your instructions. When you host Growlyne yourself, we have no access to it.

Our own data. We are responsible for the limited data we process to run growlyne.com, to manage accounts and plans, and to answer you when you write to us.

• Account data: your name, email address, a hashed password, and the workspaces you belong to.
• Plan and payment records: the plan, seats and period of each workspace, and a record of payments received. We do not store card numbers, because we do not take card payments.
• Correspondence: messages you send to hello@growlyne.com and our replies.
• Technical data: server logs with IP addresses, browser type and the pages requested, kept for security and troubleshooting.

• To provide the service: sign you in, keep your workspace running, and apply your plan.
• To keep it secure: detect abuse, investigate incidents, and protect accounts.
• To communicate: answer your questions and send essential service messages, such as password resets.
• To meet legal obligations, such as keeping accounting records of payments.

Growlyne has no AI features. We do not send your data, or your customers' data, to model providers, and we do not use it to train anything. We do not sell personal data and we do not use it for advertising.

The app uses a strictly necessary session cookie to keep you signed in. Our marketing pages do not use advertising or third-party analytics cookies. If you add the Growlyne tracking code to your own website, you decide how to inform your visitors and collect any consent your law requires.

We share personal data only with providers we need to run our service, such as hosting and email delivery, under contracts that protect it, and with authorities when the law requires it. The mail you send from your workspace goes through the SMTP provider you choose, under your own agreement with them.

We keep account data while your account exists, and delete it within a reasonable period after you ask us to close it, except where we must keep records longer by law, such as invoices. Server logs are kept for a short period. Workspace data on a server you host is kept and deleted according to your own policies.

Depending on where you live, you can ask to access, correct, export or delete your personal data, object to or restrict its processing, and complain to your data protection authority. Write to hello@growlyne.com and we will answer within one month. If your data is held in a workspace run by another organisation, contact that organisation first.

Passwords are hashed, sessions can be reviewed and revoked, two-factor sign-in is available, and sensitive actions are recorded in an audit log. No system is perfectly secure, and we will inform affected users without undue delay if a breach puts their data at risk.

We may update this policy as the service evolves. We will post the new version here with its date, and tell account holders about significant changes. Questions: hello@growlyne.com.