Privacy Policy
This policy explains what personal information Growvexra ("we", "us") collects when you visit our website or create a partner account, why we collect it, and the choices you have. Growvexra is responsible for your information.
1. Information we collect
Information you give us
- Partner account details: your name, work email, password, brand name, store link, the platforms you sell on, a description of your products and the plan you are interested in.
- Project information: messages you send in your project thread, discovery call times you book, and any partnership percentage you suggest.
- Billing details: when you become a paying client, the details needed to invoice you. Card payments are handled by our payment provider; we do not store full card numbers.
Information from your stores and ad accounts
When you approve access, we receive read-only order and product data from your connected storefronts (such as order numbers, amounts, products and the tracking link, code or tag used), and campaign data from the ad accounts we manage for you. We never receive your payment details or your customers' passwords. Order data can include your customers' details as they appear in your store; we use it only to trace and verify sales for you.
Information collected automatically
When you sign in, a login session is stored in your browser so you stay signed in. Our hosting and database providers keep standard technical logs (such as IP address, browser type and time of request) to run and secure the service. We do not use advertising or analytics cookies on this website.
2. How we use it
- To create and run your partner account and project thread.
- To reply to you, schedule your discovery call and agree your partnership terms.
- To run your marketing, trace sales to their source and prepare your reports and invoices.
- To keep the service secure, prevent misuse and meet legal obligations.
We do not sell your personal information, and we do not use your store's customer data for our own marketing.
3. Legal bases (UK/EU visitors)
Where data-protection laws such as the UK or EU GDPR apply, we rely on: contract (to provide the account and services you ask for), legitimate interests (to secure and improve our service and respond to enquiries), legal obligation (for tax and accounting records) and, where needed, your consent, which you can withdraw at any time. When we process your customers' order data for you, we act as your processor and follow your instructions.
4. Who we share it with
We share information only with service providers that help us run the service, under contracts that protect it:
- Supabase — partner accounts, messages and database (stored in the UK, London region).
- Netlify — website hosting.
- Email delivery provider — Resend for account and notification emails.
- Google Fonts and jsDelivr — deliver the fonts and code libraries the website uses, which means they receive your IP address when pages load.
- Advertising platforms (Meta, Google, TikTok) — only inside your own ad accounts, to run your campaigns.
We may also disclose information if the law requires it, or as part of a sale or merger of our business, in which case this policy continues to apply.
5. International transfers
Some providers may process information outside your country. Where that happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.
6. How long we keep it
We keep your account and project information while your account is open and for 2 years after it closes, unless you ask us to delete it sooner. Invoices and accounting records are kept for as long as tax law requires.
7. Your rights
Depending on where you live, you can ask to access, correct, delete or export your information, object to or restrict how we use it, and withdraw consent. You can update your project brief in your partner dashboard at any time. For anything else, email us at contact@growvexra.com. If you are in the UK or EU, you may also complain to your data-protection authority (in the UK, the Information Commissioner's Office).
8. Security
Passwords are never stored in plain text, each partner can see only their own account and messages, and store access is read-only. No system is perfectly secure, so please use a strong, unique password and tell us straight away if you think your account has been misused.
9. Children
Our services are for businesses and are not directed at anyone under 18.
10. Changes
We may update this policy. We will change the date at the top and, for significant changes, let partners know by email or in their project thread.
11. Contact
Growvexra. Email: contact@growvexra.com.