Privacy Policy

1. Overview

GrowFlux provides tools for creating, reviewing, scheduling, publishing, and measuring marketing content. This Privacy Policy explains how GrowFlux ("GrowFlux," "we," "us," or "our") handles information when you use our websites, applications, APIs, and related services (the "Services").

2. Information we collect

• Account information: name, email address, organization, authentication records, role, and account preferences.
• Project and content information: business details, brand guidance, prompts, source materials, drafts, generated assets, approvals, publishing plans, and workflow activity you submit or create.
• Connected service information: OAuth authorization tokens, account identifiers, profile names, publishing destination identifiers, publication identifiers, connection status, and performance information needed to provide an integration you choose to connect.
• Billing information: plan, subscription, invoice, and transaction status. Payment providers process card and bank details; GrowFlux does not store complete payment card numbers.
• Usage and security information: feature activity, timestamps, browser and device type, approximate location derived from IP address, logs, diagnostics, and fraud-prevention signals.
• Support communications: messages and materials you send when requesting help or reporting a problem.

3. How we use information

• Provide, secure, maintain, and improve the Services.
• Generate content and operate workflows at your direction.
• Connect to services you authorize, display available publishing destinations, publish content you approve, and show publication status and performance.
• Process subscriptions, provide customer support, communicate service notices, prevent abuse, and comply with legal obligations.
• Create aggregated or de-identified statistics that do not identify an individual or connected account.

We do not sell personal information or connected social account data. We do not use data obtained from one customer's connected account to provide services to another customer.

4. Pinterest and other connected services

When you connect Pinterest, GrowFlux uses Pinterest's OAuth authorization flow and never asks for your Pinterest password or session cookies. At your direction, GrowFlux may read your authenticated account profile, Boards, Pins, and supported analytics to let you choose a destination, confirm publication status, and review performance. GrowFlux may create Pins only after you select or approve the content, destination, and publishing action.

Pinterest content and Board data returned for selection or display is requested from Pinterest when needed and is not retained as a separate content library. We retain only the authorization credentials and operational identifiers needed to maintain the connection, remember destinations you select, reconcile publications, and provide supported analytics. We do not sell, combine with another person's account data, or use Pinterest data for advertising outside Pinterest.

Your use of a connected service is also subject to that provider's terms and privacy policy. You can disconnect an integration from GrowFlux at any time; you may also revoke access from the provider's own settings.

5. AI providers and service providers

We use service providers for hosting, security, email, payments, analytics, customer support, and AI processing. When a workflow uses a managed AI provider, relevant prompts and inputs may be sent to that provider to produce the requested output. When you configure your own provider credentials, data is sent to the provider you select under your agreement with that provider.

Providers receive only information reasonably necessary to perform their services and are required to protect it. We may also disclose information when required by law, to protect rights and safety, or as part of a merger, financing, or acquisition with appropriate safeguards.

6. Data retention and deletion

We retain account and project information while your account is active and as needed to provide the Services, maintain security and audit records, resolve disputes, and meet legal obligations. Retention periods vary by data type and business need.

Disconnecting a social account disables future access and removes its stored authorization credentials according to our operational deletion process. You may request deletion of your GrowFlux account and associated personal data by contacting support@growflux.io. We may retain limited records when required for security, billing, fraud prevention, or law.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption in transit, encrypted storage for supported credentials, tenant isolation, logging, and incident monitoring. No system can guarantee absolute security.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or export personal information, or object to certain processing. You may update account information in the Services, disconnect integrations, or contact us to make a request. We may verify your identity before completing a request.

10. International use and children

GrowFlux may process information in locations where we or our service providers operate. We use appropriate safeguards for international transfers where required. The Services are intended for businesses and individuals aged 18 or older and are not directed to children.

11. Changes and contact

We may update this policy as the Services or legal requirements change. We will post the updated version here and revise the effective date. For privacy questions or requests, contact support@growflux.io.