Privacy Policy

We collect information you provide and information created as you use the platform:

• Account: your name, email address, country, preferred currency and — only if you choose to add one — a WhatsApp number. Your WhatsApp number is never shown publicly.
• Authentication and security: your password is stored only as a one-way Argon2id hash and is never readable by us; session tokens are stored only as hashes. If you enable multi-factor authentication or sign in with Google, we store what is needed to support that. Email-verification and password-reset links are used and never displayed or logged.
• Orders: the services you order, quantities, the target you provide (such as a link, profile or keyword) and the status and history of each order.
• Wallet and payments: your wallet balances and transaction ledger per currency, and the reference and status a payment provider returns. We do not store your full card or bank details — those are handled by the payment provider you choose.
• Support: the messages and any details you include when you contact support or open a ticket.
• Notifications: records of the notifications and transactional emails generated for your account.
• AI interactions: your conversations with the AI Growth Assistant and the inputs and outputs of AI Ads projects you create.
• Technical and log data: details such as your IP address and browser type may be recorded for security events, abuse prevention and rate limiting.

GrowlioX uses only the cookies it needs to work: a session cookie to keep you signed in and a security cookie to protect requests against cross-site forgery. We do not use advertising or cross-site tracking cookies.

Some preferences — such as your chosen theme and display currency — are stored in your browser’s local storage. These stay on your device and are not personal data we collect; your display-currency preference in particular is never sent to our servers and never affects what you are charged.

We use the information above to:

• create and operate your account and authenticate you;
• price and process orders and wallet transactions;
• deliver, support and improve the services you request;
• send transactional messages such as verification, order and payment notifications;
• protect the platform and its users against fraud and abuse;
• meet accounting, security and legal obligations.

We process what is necessary to provide the services you ask for and to keep the platform secure. We do not sell your personal data.

To operate the platform we rely on third parties who process data on our behalf or as part of their own service, including payment providers, an email-delivery provider, an optional sign-in provider (Google) and an AI model provider that powers the assistant. They receive only the information needed for their function, and their handling of it is governed by their own privacy terms. Your orders may also relate to third-party social platforms, whose own policies apply to activity on them.

We keep account information while your account is active. Closing an account is a deactivation rather than an immediate erasure, because financial, payment and audit records must be retained for accounting, security and legal purposes. Those records are kept for as long as the law and sound record-keeping require, even after an account is closed.

Passwords and session tokens are stored only as hashes. Any media you upload is kept private and served only through short-lived links after we verify you own it — an uploaded file is not a public URL. Sensitive administrative and security records are append-only and redacted, and access is protected by authentication, role-based permissions and rate limiting. No system is perfectly secure, but we take reasonable measures to protect your information.

You can view and update core account details from your account settings. You may also request access to, correction of, or deletion of your personal data — subject to records we are required to retain, such as financial and audit history. To make a request, contact support and we will respond in line with applicable law.

GrowlioX is not directed at children and is intended for users who can enter a binding agreement in their jurisdiction. We do not knowingly collect data from children.

GrowlioX is operated from Ghana and works with providers that may process data in other countries. Where information is handled across borders, it is done to deliver the services you request.

We may update this policy as the platform evolves. Changes are reflected here with a new “last updated” date, and the version shown here is the current one.

Questions or privacy requests: support@growliox.com, or through the support centre.