Data Deletion

GROW collects only the data necessary to operate the service:

• To provide the contracted service: appointments, customer management, and reports
• To send and receive WhatsApp messages on behalf of your business (confirmations, reminders, customer support)
• To process payments and issue invoices
• To provide support and improve the user experience
• To comply with legal and tax obligations
• To prevent fraud and protect the security of the platform

We never sell your data and we do not use it for third-party advertising.

Data is stored in managed databases (Supabase/PostgreSQL) and cloud infrastructure (Vercel), on servers with SOC 2 and ISO 27001 certifications, located in South America and North America.

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Passwords stored with irreversible hashing (bcrypt)
• Company-level isolation: each account can only access its own data (Row Level Security)
• Automatic backups with limited retention
• Restricted and audited internal access

GROW connects to WhatsApp so your business can send and receive customer messages within the platform. In this integration:

• The connection is made with your explicit authorization (QR Code scan or the official Meta API)
• Messages exchanged with your customers are processed and stored for display in the Inbox and for automations you configure
• We receive from Meta/WhatsApp only the necessary data: phone number, profile name, profile photo, and the content of conversations from the connected account
• We do not access conversations from unconnected accounts or contacts who have not interacted with your business
• Processing follows Meta's policies (WhatsApp Business) and the LGPD
• When you disconnect WhatsApp or delete your account, the session with Meta is terminated and the integration data enters the deletion flow described below

You can request deletion in two ways:

Revoke access on Meta (optional): in your Facebook account, go to Settings & privacy → Settings → Apps and websites, select the GROW app, and choose Remove. This stops new access — to also delete the data already stored in GROW, send the request above.

What happens after your request:

• Confirmation of receipt within 48 hours
• Account deactivated and access terminated immediately
• Permanent deletion of personal data, WhatsApp conversations, and files within 30 days
• Minimal tax records may be retained for the legally required period (up to 5 years), stored in isolation
• You receive an email confirming that the deletion has been completed

If you are an end customer of a business that uses GROW (for example, you received messages from an establishment), you can also request the deletion of your data directly via the email above — GROW will work with the controlling business to fulfill the request.

• Support and privacy email: suporte.growltda@gmail.com
• Official WhatsApp: (11) 99999-0000
• Response time: up to 15 business days, as per the LGPD

For more details about data processing, see our Privacy Policy and the LGPD page.