Privacy policy

Growbiz is operated by HyperLink Innovations (Jodhpur, India). This policy explains what we collect, why, and what we do with it. It covers growbiz.site, the Growbiz web app, and the Growbiz Android app.

What we collect

Account information

When you sign in with Google we receive your name, email address, profile picture and a stable Google account identifier. We use these to create and identify your account.

Google Business Profile data

If you grant the Business Profile permission, we read the accounts and locations you manage and cache the listing data: business name, categories, description, address or service area, hours, phone numbers, website, attributes, services, photos, reviews, questions, posts and performance metrics. We only ever request listings for which your Google account already has access.

Contact form

If you write to us we store your name, email, optional business name and the message, plus the IP address the submission came from, so we can answer you and filter abuse.

Technical data

Standard server logs (IP address, user agent, requested URL, timestamp) and an activity log of actions taken in the app, such as "replied to a review" or "updated hours". The activity log records the action, the location and a short error code if something failed. It never records access tokens, authorization headers or raw Google responses.

How we use Google user data

Growbiz's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Business Profile data only to show you your listings and to make the changes you ask for.
• We do not transfer it to third parties except as needed to provide the service, comply with law, or as part of a merger — and never to build advertising profiles.
• We do not use it for advertising, and we do not sell it.
• No human at Growbiz reads your data except with your explicit permission for support, for security purposes, or where the law requires it.
• We do not build a data product out of listing information or aggregate it across customers.

Caching and retention

Listing data is a cache of what Google holds, not a record we own. We refresh cached listings at least every 30 days, as Google's terms require, and usually far more often. When you disconnect Google, or delete your account, we delete your stored tokens and purge the cached listing data for your account in the same operation.

Contact form submissions are kept for two years. Server logs are kept for 30 days. Activity logs are kept for 12 months so you can audit what changed on your listings.

How we store credentials

Google access and refresh tokens are encrypted at rest using your application's encryption key and are stored only on our servers. They are never sent to your browser and never sent to the Android app — the phone authenticates to our API with a separate Growbiz token that has no Google access of its own. Passwords, where you use one, are hashed and never stored in a readable form.

Revoking access

You can disconnect Google from Growbiz settings at any time, which revokes the token with Google and purges your cached data. You can also revoke it from your Google Account permissions page. Either route ends our access immediately.

Sharing

We share data with infrastructure providers who host the application and send our email, under contracts that limit them to processing on our instructions. We do not sell personal data, and we do not share it with advertisers or data brokers.

Your rights

You can ask for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Write to us through the contact page and we will respond within 30 days.

Cookies

The app sets a session cookie to keep you signed in and a CSRF cookie to protect form submissions. Both are strictly necessary. The marketing site does not run advertising or cross-site tracking cookies.

Children

Growbiz is a tool for businesses and is not directed at anyone under 16. We do not knowingly collect data from children.

Changes

If we change this policy materially we will update the date at the top and, for significant changes, tell you in the app before they take effect.

Contact

Privacy questions go to HyperLink Innovations via the contact page.