Privacy Policy
Full transparency about how we collect, use, and protect your data.
Last updated: July 31, 2026
Purpose
Transparency
Consent
Right to be forgotten
Your data, your rules
GROW handles your personal data with absolute respect, in strict compliance with the Lei Geral de Proteção de Dados (LGPD, Brazil's General Data Protection Law). This policy explains everything — no fine print, no legalese.
Controller and privacy contact
Data controller: GROW SaaS, a digital platform managed by Eduardo Vargas, Brazil.
Privacy contact: suporte.growltda@gmail.com.
Data we collect
We collect only what is necessary to provide the service:
Account and profile
- • Name
- • Phone
- • Password (encrypted)
Operational data
- • Company and address
- • Services and prices
- • Staff members
- • Appointments
Communication
- • Messages sent
- • Support history
- • Marketing campaigns
Platform usage
- • Access logs
- • IP and device
- • Essential cookies
Purposes of processing
We use your data strictly to:
- Provide the contracted service (appointments, management, reports)
- Process payments and issue invoices
- Send operational notifications (confirmations, reminders)
- Handle support requests and improve the experience
- Comply with legal and regulatory obligations
- Prevent fraud and protect the security of the platform
We never sell your data. We never share it with partners without your express authorization, except when required by law.
Legal basis (LGPD Art. 7)
Processing is based on:
- Performance of a contract: to provide the service you contracted
- Consent: for marketing communications (explicit opt-in)
- Legal obligation: to comply with tax and regulatory obligations
- Legitimate interest: for fraud prevention and technical improvements
Data sharing
We share data strictly with:
- Payment processors (Mercado Pago, Stripe) for billing
- Infrastructure providers (Vercel, Supabase) under DPA clauses
- Communication services (WhatsApp Business API, transactional email)
- Public authorities, when legally required
All partners sign data processing agreements (DPAs) that ensure the same level of protection required by the LGPD.
Storage and international transfers
Your data is stored on servers in South America (São Paulo) and North America, on infrastructure with SOC 2, ISO 27001, and PCI-DSS certifications.
Any international transfers are carried out in compliance with articles 33 to 36 of the LGPD, using standard contractual clauses approved by the ANPD.
Retention period
We keep your data for as long as necessary for:
- The duration of your active account
- An additional 30 days after cancellation, for possible export
- Up to 5 years after termination, for tax and legal purposes
- Security logs: up to 6 months, as per the Marco Civil da Internet (Brazilian Internet Law)
After these periods, the data is anonymized or permanently deleted.
Your rights as a data subject (LGPD Art. 18)
You may exercise the following rights at any time:
To exercise any right, contact us by email at suporte.growltda@gmail.com. We respond within 15 business days.
Cookies and similar technologies
We use only cookies essential to the operation of the platform (session, authentication, preferences). We do not use third-party advertising cookies.
You can manage cookies directly in your browser settings, without affecting the essential features of the service.
Security incidents
In the event of an incident posing relevant risk to data subjects, we will notify the ANPD and affected users within 72 hours of detection, as per article 48 of the LGPD.
WhatsApp and Meta integration
GROW integrates with WhatsApp so your business can send and receive customer messages within the platform. In this integration:
- The connection only happens with your explicit authorization (QR Code or Meta's official API)
- We process only the data of the connected account: number, name and profile photo of contacts, and the content of conversations
- Messages are used exclusively for display in the Inbox and for the automations you configure
- Processing follows the WhatsApp Business (Meta) policies and the LGPD
To delete the integration data or your account data, follow the instructions on the Data Deletion page.
Contact and complaints
For questions, complaints, or to exercise your rights, contact us:
- Privacy email: suporte.growltda@gmail.com
- Deletion request: grow.ltda/exclusao-de-dados
- ANPD (Brazilian national authority): www.gov.br/anpd
Want to exercise an LGPD right?
Our privacy officer responds within 15 business days. Just send an email.
Talk about privacy