Privacy Policy

Customers are businesses and users who sign in to GrowthOS. Contacts are the people whose details our customers store and message through the platform (for example, leads and prospects). For contact data, our customer decides why and how it is used and we process it on their behalf.

• Account data: name, work email, password (stored hashed), workspace and role.
• Contact and lead data: name, phone number, email, company, requirements, source, consent status and notes entered or imported by our customers.
• Message and call data: WhatsApp, SMS and email messages, delivery and read status, call recordings and AI call summaries and transcripts.
• Calendar data: if you connect Google or Microsoft calendar, event and availability information needed to schedule meetings.
• Billing data: plan and payment status. Card and bank details are handled by our payment processor and are not stored by us.
• Technical data: IP address, device and browser details, and logs used for security and troubleshooting.

• To provide the service: capture leads, send and receive messages, place calls, schedule meetings and show analytics.
• To generate AI-assisted replies, follow-ups and summaries requested by our customers.
• To secure the platform, prevent abuse and enforce opt-out requests.
• To bill, support and communicate service updates.
• To meet legal obligations.

We do not sell personal data and do not use it for advertising.

Our customers must have a lawful basis, such as consent, before messaging a contact. A contact can stop WhatsApp messages at any time by replying STOP, and can unsubscribe from emails using the link in each email. We record opt-outs and suppress further messages.

We share data only as needed to run the service, with providers acting under contract:

• Meta (WhatsApp Business Platform) for WhatsApp messaging.
• Plivo for voice calls and SMS, and Deepgram for speech-to-text and voice.
• OpenAI for AI-generated text and summaries.
• Resend and SMTP email providers for email delivery.
• Cashfree for payments.
• Google and Microsoft for calendar integration, only when you connect them.
• MongoDB Atlas and Render for database and hosting, and Vercel for the web app.

We may also disclose information when required by law or to protect rights and safety.

GrowthOS's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data is used only to create and read meetings and check availability for your bookings. It is not used for advertising and is not transferred to others except as needed to provide these features, for security, or to comply with law. You can disconnect Google at any time and revoke access at myaccount.google.com/permissions.

We keep data while an account is active and for as long as needed to provide the service. When an account is closed or a deletion request is verified, we delete or anonymise the data within 30 days, except records we must keep for legal, tax or security reasons.

Credentials and integration secrets are encrypted at rest, traffic uses HTTPS, access is role-based and we rate-limit sensitive actions. No system is perfectly secure, but we work to protect your data and will notify affected customers of a breach as required by law.

You may ask to access, correct, export or delete your personal data, or withdraw consent, subject to applicable law (including India's Digital Personal Data Protection Act, 2023). If you are a contact of one of our customers, please contact that business first; you may also write to us. See our Data Deletion page.

Our providers may process data in other countries. We use contractual safeguards so that your data stays protected wherever it is processed.

The service is for businesses and is not directed to children under 18. We do not knowingly collect their data.

We may update this policy and will change the effective date above. Material changes will be notified in the product or by email.

Sri Rishik Riyan Solutions Pvt Ltd, India
Email: connect@srrsolutions.io