1 Information We Collect
We collect the following categories of information:
- Business Owner Account Data: Username and hashed password provided during account creation.
- Business Information: Business name, category, city, mobile number, email address, Google Review URL, and optional details entered by the business owner.
- Review Templates: Text and star-rating content added by business owners to their portals.
- Contact Form Submissions: Name, email, phone number, and message submitted through the landing page contact form.
- Activity Logs: Records of actions performed within the platform (e.g., logins, review additions) for security and audit purposes. IP addresses are logged alongside these events.
- Portal Visitor Data: When a customer scans a QR code and visits a business portal, we log the visit for security purposes. We do not collect customer personal data from the portal.
2 How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Groww Up platform
- Authenticate business owner and admin accounts
- Display business portals to customers via QR codes
- Generate AI-powered review templates using third-party AI services
- Respond to contact form inquiries
- Monitor platform security and detect unauthorised access
- Maintain audit trails for administrative oversight
We do not use your data for advertising, profiling, or any purpose unrelated to operating the service.
3 Data Sharing & Disclosure
We do not sell, rent, or trade your personal information to third parties. We may share data only in the following limited circumstances:
- AI Providers: When using the AI review generation feature, review keywords and business context are sent to Google Gemini or Anthropic Claude APIs. These are subject to their respective privacy policies.
- Legal Requirements: We may disclose information if required by law, court order, or governmental authority.
- Business Transfer: In the event of a merger or acquisition, data may be transferred to the successor entity, with notice provided to users.
4 Data Storage & Security
Your data is stored on secured servers. We implement the following security measures:
- Passwords are hashed using BCrypt — we never store plain-text passwords
- All admin and owner sessions are secured via Spring Security
- Database access is restricted to authenticated application connections
- Production deployments are configured to suppress internal error details
While we take reasonable measures to protect your data, no system is 100% secure. We encourage you to use strong passwords and keep your credentials confidential.
5 Cookies & Tracking
Groww Up uses session cookies to maintain authenticated user sessions. These are strictly necessary for the platform to function. We do not use:
- Advertising or tracking cookies
- Analytics cookies (e.g., Google Analytics)
- Cross-site tracking technologies
Session cookies are deleted when you close your browser or log out.
6 Third-Party Services
The platform integrates with the following third-party services:
- Google Gemini API — for AI-powered review generation. Data sent: keywords, business context.
- Anthropic Claude API — alternative AI provider for review generation. Data sent: keywords, business context.
- Google Fonts — for typography. Google may log font requests per their privacy policy.
We are not responsible for the privacy practices of these third-party services.
7 Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Object to processing of your personal information
To exercise any of these rights, please contact us using the details in Section 10. We will respond within 30 days.
8 Children's Privacy
Groww Up is a business-to-business platform intended for use by adults operating businesses. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that a minor has provided us with personal data, we will delete it promptly.
9 Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. Continued use of the platform after changes constitutes acceptance of the revised policy. For significant changes, we will notify registered account holders.
10 Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:
- Platform: Groww Up — Smart Google Review System
- Contact: Use the contact form on our website
- Response Time: We aim to respond within 2 business days