Privacy Policy

This policy describes how Growww Tech ("we", "us") collects, uses, stores and protects personal data in compliance with India's Digital Personal Data Protection Act, 2023 (DPDP).

What we collect

We collect the minimum personal data required to respond to enquiries you send us (via the contact form, phone, or email), to run the Growww Foundry app for our clients, and to understand how this website is used. Enquiries are processed on the basis of your voluntary submission; website analytics are processed under the legitimate-uses provision of the DPDP Act for the purpose of improving our services.

When you start our call request form

Added 17-10-2026. When you type your name and WhatsApp number in our call request form and continue, we save them at once, so our team can contact you about your store, even if you stop there. If you want them deleted, email us and we will delete them (see Your rights below). We do not sell them, and we use them only as this policy describes.

Cookies and analytics

When you visit this site, we load Google Tag Manager, which in turn runs Google Analytics 4. These tools set cookies on your device and collect standard web analytics data — IP address, device and browser type, pages viewed, referrer, approximate location, and interactions with our content. We use this data only in aggregate, to understand what's working and what needs improvement. We do not sell this data, we do not build advertising profiles off it on our own, and we do not use it to identify individual visitors.

If you would rather not be tracked, you can opt out at the browser level at any time — by blocking third-party cookies, using a tracker-blocking extension (uBlock Origin, Privacy Badger, Brave Shields), enabling "Do Not Track" in your browser settings, or using private / incognito mode. These controls will prevent our analytics from running for your session.

Advertising measurement (Meta)

We run ads on Facebook and Instagram, so we measure which of those ads produce real enquiries. Google Tag Manager loads the Meta pixel, which sets its own cookies — _fbp, and _fbc if you arrived from an ad — and records a standard "Lead" event when you finish our call request and your answers match what we offer. Other forms, and a request you do not finish, send Meta no Lead event.

That same Lead event is also sent to Meta from our server, carrying the same event ID so the two are counted once rather than twice. Before anything leaves us, your name, email address and phone number are hashed with SHA-256: Meta receives an irreversible fingerprint, never the values themselves. Your IP address, browser user-agent and those Meta cookie IDs are sent as-is, because Meta needs them to match the enquiry to an ad click. If we later mark your enquiry qualified or won in our CRM, we send that outcome too — same hashed identifiers, no new personal data.

We also use Meta to show our ads again to people who already know us. If you visited this site in the last 90 days, the Meta pixel lets Facebook and Instagram show you our ads. If you sent us an enquiry, we may upload your email address and phone number to Meta, hashed with SHA-256 first, so our ads can reach you there too. Meta uses that fingerprint only to find matching accounts and says it deletes it once the match is done. We do not upload our clients' details for this, and we do not share them with anyone else. If you would rather not see our ads, email us and we will take you off the list.

One thing worth being straight about: blocking cookies or using a tracker blocker stops the pixel, but not the server-side event, because that one never runs in your browser. If you would rather we did not send your data to Meta at all, email us and we will stop — see Your rights below.

The Growww Foundry app

The Growww Foundry app (formerly Growww↗) lets you follow your projects, raise requests and read how your store is doing. It signs in to our ERP at portal.growwwtech.com, where your brand's projects and requests already live. For your login it keeps your name and email address, plus a phone number, photo or brand logo if you add them. If you sign in with Google, Google shares your name, email address and profile photo with us to sign you in and show who you are in the app. Files you upload stay with the request they belong to. We use all of this only to run the app and the work you hire us for.

Phone notifications

If you allow notifications, the app registers your phone with OneSignal, the service that delivers them. OneSignal holds your login ID (the email address you sign in with), a device token for your phone, and the text of the notifications we send you. We send one only when something needs you — an answer on your request or a task waiting for your review. Switch them off any time in your phone's settings. Signing out stops them on that phone; deleting your account deletes your OneSignal record as well.

Google Analytics and Search Console

If you connect it, the app's Analyst tab reads your store's numbers from Google. You sign in with Google and grant read-only access to Google Analytics and Google Search Console. With that access we can read reports. We cannot change anything in your Google account, your Analytics property or your store.

What we read, for the one Analytics property you choose: daily visits, orders and revenue for the last 14 days; visits, orders and revenue by traffic channel, the checkout steps (product views, add to cart, checkout started, purchases) and your best-selling products for the last 7 and 28 days; and the property's currency, time zone, website address and measurement ID. From Search Console, for the matching site: daily clicks, impressions, click-through rate and average position, and your top 10 search queries. So that you can pick, we also read the names of the Analytics properties and Search Console sites your Google account can see, and keep only the one you choose. Every figure is a total for your whole store — Google Analytics gives us no names, email addresses or phone numbers of your visitors or buyers, and we do not ask for them. Once a week we also run Google's public PageSpeed test on your store's home page, which needs no access to your account.

We use this data only to show you your own numbers in the app, on Home and in the Analyst tab, and to write the notes there about what moved and what to fix. We do not sell it, share it with anyone outside Growww Tech, use it for advertising or use it to build profiles of you or your customers. Our team can see the same totals in our ERP; we look at them when you ask for help with your store or when the connection needs fixing, and not otherwise.

Google gives us an access token and a refresh token. Both are stored encrypted on our ERP and are never shown in the app or on any ERP screen. Every hour we fetch fresh totals and replace the previous set, so we hold only the latest summary, not a history.

To stop it, tap Disconnect in the app (Account → Google Analytics). That withdraws our access at Google and deletes the tokens and the stored numbers straight away. Deleting your app account does the same for the access you granted. You can also remove Growww Foundry at myaccount.google.com/connections; the stored numbers are then deleted at the next hourly refresh.

Growww Tech's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your rights

Under the DPDP Act, you have the right to access, correct, delete and withdraw consent for use of your personal data. Email privacy@growwwtech.com to exercise any of these rights; we respond within 30 days. In the Growww Foundry app you can also delete your own login, under Account → Delete account.

Contact

Growww Tech, Visakhapatnam, Andhra Pradesh — India · 530043.