Skip to content
GrowX
Legal

Privacy Policy (draft)

Draft last edited October 2026

Draft - requires legal review before public launch

This is a working draft. It has not been reviewed by a lawyer and must be reviewed and approved before public launch. Bracketed items are placeholders for details that have not been decided.

This draft describes how the GrowX website handles personal data. The GrowX Chrome extension has its own privacy policy inside the extension; this page covers the website and the optional account system.

Who is responsible

Shahriar Ahmed Tushar, Rajshahi, Bangladesh. Contact: support@growxapp.org.

What the website collects

  • Account data: your email address and a password hash or Google sign-in identifier, handled by Supabase Auth.
  • An X username, only if you choose to enter it. It is self-reported and is not verified as belonging to you.
  • Trial records: when a trial started and when it ends.
  • Planned: subscription and payment records (plan, status, amount, currency, provider reference IDs) once payments exist. Card and wallet details are handled by the payment provider and are not stored by GrowX.
  • Technical data such as IP address and request logs processed by the hosting provider.

What the website does not collect

  • Your X password or X login. GrowX does not use X OAuth.
  • Your X follow lists, queue, sources or settings. In the extension these stay in your browser storage.

Why we use data

  • To provide sign-in, your dashboard and plan information.
  • To limit each account to one free trial and prevent abuse.
  • Planned: to process purchases, issue access and handle refunds and support.

Service providers

Supabase (database and authentication) and Vercel (hosting) process data on our behalf. Google processes sign-in data if you use Google sign-in. Paddle and NOWPayments are planned payment providers and are not connected yet. [Data regions and processor agreements to be confirmed.]

Retention and your rights

[Retention periods to be defined.] Depending on where you live you may have rights to access, correct or delete your data. Account deletion is not yet self-service; contact us to request it. Trial and payment records may be retained where needed for fraud prevention and accounting.

Cookies

The website uses strictly necessary cookies to keep you signed in. It does not currently use advertising cookies. [Confirm if analytics are added.]

Changes

We will update this policy before launch and when practices change.