Privacy Policy

This Privacy Policy explains how GrowMe (“we”, “us”, “our”) collects, uses, processes, stores, and protects Personal Data when you access our website or platform, use our CRM, messaging, automation, or AI services, or interact with our support or communications. By using the Services, you confirm that you have read and accepted this Privacy Policy.

• Personal Data: Any information relating to an identifiable individual
• Service Data: Data processed on behalf of users (e.g., customer messages, contacts)
• Platform Data: Data collected directly by GrowMe (e.g., account, billing, analytics)

GrowMe operates in dual roles: as a Data Controller for Platform Data and as a Data Processor for Service Data. Users act as Data Controllers for all Service Data.

GrowMe does not own Service Data and processes it only per user instructions. Users are responsible for legal data collection, customer consent, and compliance with applicable laws.

All Service Data remains the sole property of the user. GrowMe does not sell, rent, or claim ownership of user or customer data.

• Account Data: Name, email, phone, company details, login credentials
• Usage Data: IP address, device info, logs, session activity
• Service Data: Messages, contacts, files, customer interactions
• Payment Data: Billing details (processed by secure third-party providers)
• Marketing Data: Preferences, engagement metrics
• Cookies & Tracking: Session cookies, analytics tools

Users must ensure that all Personal Data provided is accurate and up to date.

We process data based on:

• Contractual necessity
• Legitimate interests
• Consent
• Compliance with laws (Kuwait CITRA, UAE PDPL, Saudi PDPL)

• Provide CRM, messaging, and automation services
• Enable AI workflows
• Improve platform performance
• Process payments
• Ensure security and fraud prevention
• Communicate updates and marketing

GrowMe may use AI and automation. Outputs are for assistance only and do not constitute professional advice. Users remain responsible for decisions. No automated decisions with legal impact are made without human oversight.

Customer data is not used for global AI training unless explicitly approved.

Users must obtain lawful consent before messaging customers, running campaigns, or processing personal data. GrowMe is not liable for misuse.

GrowMe integrates with third-party platforms such as WhatsApp (Meta). Processing may be subject to third-party policies, and Meta may independently process data. GrowMe is not responsible for platform bans or restrictions, policy changes, or service interruptions.

GrowMe may store message metadata (timestamps, delivery status). Content retention depends on user settings and third-party policies.

We may share data with:

• Sub-processors (AWS, OpenAI, Stripe, etc.)
• Integration partners
• Authorities when legally required
• Buyers in case of business transfer

We do NOT sell Personal Data.

All sub-processors are contractually bound. List available upon request.

Data may be processed in the GCC and EU. Transfers are protected by Standard Contractual Clauses and security safeguards.

• Account data: duration + 3 years
• Service Data: configurable (0–36 months)
• Financial data: 7 years

Upon termination, data is deleted or returned within 30–60 days. Legal retention exceptions apply.

We implement TLS encryption, AES-256 storage, access controls, and security monitoring. We notify affected users of any breach without undue delay. No system is 100% secure.

We do not guarantee uninterrupted service.

Users are responsible for backups.

Users may request access, correction, deletion, restriction, or portability of their data. Contact us at privacy@growme-crm.com. Response within 30 days.

We use essential and analytics cookies. “Do Not Track” may not be supported.

Sent only with consent.

Not intended for users under 18.

Mobile features may require access to:

• Contacts
• Media
• Camera

We may restrict or suspend accounts for spam, fraud, or policy violations.

Users are responsible for any data shared publicly.

We are not responsible for external platforms.

We may record support interactions for quality and security.

We may use anonymized data for analytics and improvement.

We may disclose data to comply with law, prevent fraud, or protect rights.

Data may be transferred under confidentiality in mergers.

To the extent permitted by law, GrowMe is not liable for indirect damages, data loss, or third-party issues.

Updates notified 15 days in advance.

State of Kuwait

privacy@growme-crm.com