Privacy Policy
This policy explains what personal data Growthdesk (the "Service") processes, why, and the choices you have.
Two kinds of data
- Account data — information about you as a user of the Service: your name, email address, password (stored only as a hash), sign-in sessions, workspace membership, billing details and support requests. For this data we are the controller.
- Customer Data — the contacts, companies, messages and other records you and your team put into a workspace. For this data you are the controller and we process it on your behalf, only to provide the Service.
What we collect and why
| Data | Purpose |
|---|---|
| Name, email, password hash | Creating and securing your account |
| Session cookie, IP address, browser user agent | Keeping you signed in, preventing abuse, security logs |
| Billing details | Charging for paid plans (card details are handled by our payment provider, not stored by us) |
| Usage of the product | Enforcing plan limits and operating the Service |
| Support conversations | Answering your questions |
Cookies
The Service uses a small number of cookies that are needed for it to work: a session cookie that keeps you signed in and a preference cookie that remembers your light or dark appearance. If website analytics is enabled, the analytics provider shown in the page source may set or read its own identifiers.
Emails we send you
We send account email (confirmations, password resets, invitations, billing notices) that is needed to run your account. Any product news we send can be turned off from the link in the email.
Who we share data with
We share data only with service providers that help us run the Service — hosting, email delivery, payment processing and, where you turn them on, integrations such as WhatsApp, Telegram, Twilio and AI providers — and only as much as each needs. We do not sell personal data.
Tracking in your emails
When you enable open and click tracking, emails you send include a tracking pixel and rewritten links so you can see engagement. Recipients can always unsubscribe with one click.
Retention
Account data is kept while your account is active and for a limited period afterwards for legal and accounting reasons. Customer Data stays in your workspace until you delete it; when a workspace or account is closed, its data is deleted in line with our retention practices.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict some processing. Contacts in a customer's workspace should contact that customer first. To exercise your rights, contact us at the support address at the bottom of this page.
Security
Passwords are hashed, connection secrets are encrypted at rest, and access to customer workspaces is restricted and logged.
Changes
We may update this policy and will post the new version here.