Privacy Policy

Your privacy is important to us. It is GrowX's policy to respect your privacy regarding any information we may collect from you across our website at growx.so, and other sites or services we own and operate.

1. Information We Collect

We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent. We also let you know why we're collecting it and how it will be used.

When you sign up using your X/Twitter account, we receive your public profile information including your display name, handle, and profile picture. We use this to personalize your experience within the application.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Schedule and publish posts on your behalf
• Generate AI-powered scoring and rewrite suggestions
• Send you service-related communications
• Process payments via our payment provider (Lemon Squeezy)
• Improve and personalize your experience

3. Data Retention & Protection

We only retain collected information for as long as necessary to provide you with your requested service. What data we store, we'll protect within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification.

Your X/Twitter access tokens are encrypted at rest using AES-256-GCM encryption. We never store your X/Twitter password.

4. Third-Party Services

We don't share any personally identifying information publicly or with third parties, except when required to by law. We use the following third-party services to operate:

• X/Twitter API — to publish and manage your posts
• Lemon Squeezy — for payment processing
• OpenAI — for AI-powered post generation and rewriting
• Resend — for transactional emails

Each of these services has their own privacy policy governing how they handle your data.

5. Data Controller & GDPR

GrowX operates as both data controller and data processor under applicable data protection laws, including the General Data Protection Regulation (GDPR). If you are a resident of the European Economic Area, you have the right to access, rectify, or delete your personal data at any time by visiting your account settings or contacting us.

6. Account Deletion

You may delete your account and all associated data at any time from your account settings. Upon deletion, all your data — including posts, schedules, analytics, and personal information — is permanently removed from our systems.

7. Cookies

We use essential cookies to maintain your session and remember your preferences. We do not use third-party tracking cookies or advertising cookies.

8. External Links

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites and cannot accept responsibility for their respective privacy policies.

9. Your Rights

You are free to refuse our request for your personal information, with the understanding that we may be unable to provide you with some of the services you desire.

10. Changes to This Policy

Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information. If you have any questions about how we handle user data, feel free to contact us at [email protected].