1. Overview
This Privacy Policy explains how Growi, Inc. ("Growi") collects, uses, and shares personal information when you use our platform, websites, and services. We act as a controller for data we collect about our own users, and as a processor for data our customers submit through the Services on behalf of their end users.
2. Information we collect
2.1 Information you provide
Account and profile details (name, email, company, role), billing and payout information, content and messages you submit, and support inquiries.
2.2 Information collected automatically
Device and usage data, log data, IP address, approximate location, and information collected through cookies and similar technologies to operate and secure the Services.
2.3 Information from third parties
When you connect accounts such as TikTok Shop, Shopify, or Amazon, we receive data those platforms authorize you to share, including performance metrics and order and attribution data used to power campaigns.
3. How we use information
- To provide, maintain, and improve the Services;
- To match Brands and Creators and power attribution and payouts;
- To provide AI-assisted recommendations and insights;
- To communicate with you about your account, security, and updates;
- To detect, prevent, and address fraud, abuse, and security incidents;
- To comply with legal obligations.
4. Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies, we process personal data on the bases of performance of a contract, our legitimate interests (such as securing and improving the Services), your consent (where required, e.g. certain cookies and marketing), and compliance with legal obligations.
5. How we share information
We do not sell personal information. We share it with:
- Service providers — hosting, analytics, payment, and communication vendors bound by confidentiality obligations;
- Connected platforms — to fulfill integrations you enable;
- Other users — as needed to facilitate campaigns between Brands and Creators;
- Legal and safety — where required by law or to protect rights, safety, and integrity of the Services;
- Business transfers — in connection with a merger, acquisition, or sale of assets.
6. Data retention
We retain personal information for as long as needed to provide the Services and for legitimate business or legal purposes. When no longer needed, we delete or de-identify it. Retention periods vary by data type and legal requirements.
7. Your rights & choices
Depending on your location, you may have rights to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email [email protected]. You may also opt out of marketing emails via the unsubscribe link. We will respond consistent with applicable law.
8. International transfers
We may transfer personal data to countries other than where you reside, including the United States. Where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect transferred data.
9. Security
We maintain technical and organizational measures designed to protect personal data. No system is perfectly secure, and we cannot guarantee absolute security.
10. Cookies & tracking
We use strictly necessary cookies to operate the Services and, with consent where required, analytics and preference cookies. You can manage cookies through your browser settings; disabling some cookies may affect functionality.
11. Children's privacy
The Services are not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us information, contact us and we will delete it.
12. Changes
We may update this Privacy Policy periodically. Material changes will be indicated by an updated "Last updated" date and, where appropriate, additional notice.
13. Contact
For privacy questions or to reach our data protection team, email [email protected].