Privacy Policy

1. Introduction

GrowLocal, LLC ("GrowLocal," "we," "us," or "our") values your privacy. This Privacy Policy describes how we collect, use, disclose, and protect your information when you use growlocal.site, our customer dashboard, onboarding forms, and the websites we host on your behalf.

By using our services, you acknowledge that you have read and understood this Privacy Policy. If you have questions, contact us at [email protected].

2. What We Collect

(a) Information you provide directly:

• Account information -- name, email address, and password
• Business information -- business name, description, address, phone number, and other details submitted during onboarding
• Content -- logos, photographs, written text, and other materials you upload for your website
• Payment information -- processed through Stripe. We never directly store your credit card number, CVV, or full card details. Stripe handles payment data under its own PCI-compliant systems
• Communications -- messages you send us through support channels or your dashboard

(b) Information collected automatically:

• IP address and approximate geolocation
• Browser type and version, operating system, and device information
• Pages visited, time spent on pages, and navigation patterns
• Referral source -- where you came from before visiting our site
• Cookies and similar tracking technologies (see Section 6)

(c) Information from third parties:

• Etsy -- product catalog data, if you connect your Etsy shop
• Stripe -- payment confirmations and subscription status
• Affiliate referral sources -- if you were referred by an affiliate partner, we receive a referral identifier

3. How We Use Your Information

We use the information we collect to:

• Build and host your website -- using your business information, content, and preferences to design and maintain your site
• Process payments -- managing your subscription billing through Stripe
• Communicate with you -- sending service updates, responding to support requests, and notifying you of important changes
• Improve the service -- analyzing usage patterns to make GrowLocal better for everyone
• Feature your site in our portfolio -- showcasing your website in our marketing materials (you can opt out -- see our Terms of Service)
• Comply with legal obligations -- responding to lawful requests and protecting our rights
• Prevent fraud and abuse -- detecting and blocking unauthorized or malicious activity

4. Who We Share Your Information With

We do not sell your personal information. We share information only with the following parties and only as necessary:

• Stripe -- payment data for processing subscriptions and transactions
• Cloudflare -- site content, images, and traffic data for CDN delivery and storage
• AI providers (Anthropic) -- your business information may be sent as prompts during the AI-assisted site generation process. This data is used solely to generate your website content and is subject to the AI provider's data handling policies
• Email service provider -- your email address for transactional and service communications
• Affiliates -- limited information (that you signed up and your subscription status) for commission tracking purposes
• Legal authorities -- if required by law, subpoena, court order, or to protect our rights, property, or safety
• Business transfers -- if GrowLocal is acquired, merged, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you of any such change

5. Your Site Visitors

When we host a website for you, we serve it to your visitors. In this context:

• You are the data controller for the personal information of visitors to your website
• GrowLocal is the data processor -- we host and serve your site on your behalf, but you are responsible for how visitor data is collected and used
• If your site collects visitor information (e.g., through contact forms or lead capture), you are responsible for your own privacy policy and compliance with applicable data protection laws

We provide the tools; you are responsible for using them lawfully and transparently.

6. Cookies

We use cookies and similar technologies for:

• Session management -- keeping you logged in and maintaining your preferences
• Analytics -- understanding how people use our platform so we can improve it

We do not use third-party advertising trackers. We do not sell or share cookie data with ad networks.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of your dashboard.

7. Data Retention

We retain your data according to the following schedule:

• Account data -- retained for the duration of your subscription plus 90 days after cancellation
• Content (logos, photos, text) -- deleted 90 days after subscription ends (you may request a copy before deletion)
• Payment records -- retained for 7 years as required by tax law
• Automated backups -- automatically deleted after 30 days via lifecycle policy

8. Your Rights

You have the right to:

• Access -- request a copy of the personal information we hold about you
• Correct -- update or correct inaccurate information
• Delete -- request deletion of your personal information (subject to legal retention requirements)
• Object -- object to certain uses of your information
• Portability -- request your data in a portable format

California residents (CCPA): Under the California Consumer Privacy Act, you have additional rights:

• The right to know what personal information is collected and how it is used
• The right to delete your personal information
• The right to opt out of the sale of personal information -- we do not sell your personal information, but we include this disclosure for transparency
• The right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at [email protected]. We will respond to verified requests within 30 days.

9. Security

We take the security of your data seriously. Our measures include:

• HTTPS encryption on all connections
• Encrypted storage for sensitive data
• Access controls limiting who can access your information internally
• Regular automated backups to prevent data loss

No system is 100% secure. While we implement commercially reasonable safeguards, we cannot guarantee absolute security. We encourage you to use a strong, unique password for your account.

10. Children's Privacy

GrowLocal is a business service and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will provide at least 30 days' notice via email to the address associated with your account.

We encourage you to review this policy periodically. Continued use of the service after the notice period constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at:

[email protected]

See also our Terms of Service and Disclaimers for additional information.