Privacy policy
Starter text, not legal advice. Have counsel review and complete it before launch.
Overview
This policy explains what information GrowGo collects through this website and how it is used. [Legal entity name and effective date to be added.]
Information we collect
We may collect information you give us, such as your name, work email, company, and message, and basic technical information such as your browser type. When you submit the demo request form, we receive your name, work email, company, job title, company size, and message, and forward them to our team by email and an internal team chat tool. We do not keep them in a database.
GrowGo AI Receptionist
When a business uses the GrowGo AI Receptionist, we process data about the calls it receives: the caller's phone number, what is said (as a transcript, and as a recording only if the business turns recording on), and a summary of the call. The business is the controller of this data and GrowGo processes it on the business's behalf. Callers are told at the start of every call that they are speaking with an AI assistant, and that the call is recorded when recording is on. The business is responsible for having any further consent its location requires.
How we use information
We use information to respond to requests, operate and improve the website, and keep it secure. We do not sell personal information.
Sharing
We share information only with service providers who help us run the website and the receptionist, or when the law requires it. The providers are Twilio (phone calls and text messages), OpenAI (the receptionist's voice and call summaries), Stripe (payments), Supabase (database and file storage), Resend (email), Vercel (website hosting) and Fly.io (call audio gateway). [Links to each provider's data processing terms to be added.]
Retention
We keep information only as long as needed for the purposes above or as the law requires. Call transcripts and summaries are kept until the business deletes them. Recordings, when turned on, are deleted after the retention period the business sets (90 days by default). Data a business or user deletes is erased for good after 30 days. [Any other retention periods to be added.]
Your choices and rights
Depending on where you live, you may have the right to access, correct, or delete your information. [Region-specific rights to be added.]
Contact
Questions about this policy can be sent to the contact address that will be published here. [Contact address to be added.]