How we handle your data

GrowwCRM ("we", "us") provides a multi-tenant business management platform used by companies ("Company Admins") to manage their own leads, customers, staff, inventory, orders, and finances. This policy explains what data passes through the platform and how it's handled. If you're an employee using an account created by your employer, your employer controls that account and its data as the data controller; we act as their processor.

1. Information We Collect

• Account & company information: name, email, phone number, company details, and KYC documents submitted during signup or company profile setup.
• Business data entered by a company: leads, customer records, orders, inventory, purchase orders, invoices, and payments created and managed within that company's account.
• Workforce data: employee profiles, roles, departments, attendance, leave records, and payroll-related information entered by a Company Admin.
• Activity & audit logs: a record of who created, updated, or deleted records within the platform, used for accountability inside a company.
• Device & usage information: standard technical data such as IP address, browser type, and session activity, used for security and troubleshooting.

2. Employee Activity Monitoring

GrowwCRM offers an optional desktop activity-monitoring feature that a Company Admin may enable for their own employees. When enabled on a device, it can record application usage, visited URLs, screenshots, removable-media (USB) connection events, and network information. This feature is controlled entirely by the Company Admin who deploys it — we do not enable it by default, and employers are responsible for informing their employees in line with local law before deploying it. If you are an employee and believe this applies to you, please raise it with your employer, who controls this data.

3. Cookies & Sessions

We use session cookies to keep you signed in and to remember which company you're currently working in. We don't use these cookies for advertising or cross-site tracking.

4. How We Use Information

• To operate the features you and your company use — leads, orders, inventory, invoicing, attendance, and reporting.
• To send transactional emails: OTP verification codes, password resets, and, if you contact us, replies to your message.
• To send push notifications for in-app alerts, where enabled.
• To keep the platform secure and to diagnose technical issues.

5. Data Sharing

We do not sell your data. Data is shared only with the service providers needed to run the platform — for example, email delivery for OTPs and notifications, and push-notification delivery for mobile/desktop alerts — and only to the extent needed to provide those services. Data belonging to one company is not visible to any other company on the platform.

6. Data Security

Access to company data is restricted by the roles and permissions a Company Admin configures. Passwords are stored using industry-standard hashing, and sensitive actions require an authenticated session. No method of transmission or storage is 100% secure, but we work to protect data using reasonable technical and organizational measures.

7. Data Retention

We retain company data for as long as the company's account is active, so records like leads, orders, and invoices remain available for reporting and compliance. If an account is closed, data is retained only as long as necessary for legal, tax, or accounting obligations, after which it is deleted or anonymized.

8. Your Rights

If your data was entered into the platform by your employer or another company you deal with, requests to access, correct, or delete that data should go to that company, as they control it. If you have an account directly with us, you can request access to, correction of, or deletion of your account information by contacting us using the details below.

9. Children's Privacy

GrowwCRM is a business tool and is not directed at, or intended for use by, children.

10. Changes to This Policy

We may update this policy as the platform evolves. Material changes will be reflected by updating the "Last updated" date above.

11. Contact Us

Questions about this policy or how your data is handled can be sent to growwperclick@gmail.com or via our contact page.