Grow 360 Platform
Privacy Policy
Last updated: 3 June 2026
1. Who We Are
Grow 360 SRL ("Grow 360", "we", "our", "us") operates the Grow 360 email marketing platform at grow360.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
2. Data Controller
The data controller for personal data processed through the platform is Grow 360 SRL, [address], Romania. For GDPR enquiries, contact privacy@grow360.com.
3. What Data We Collect
- Account data (name, email, company)
- Contact data uploaded by you (email addresses, names, behavioural signals)
- Usage data (pages visited, features used)
- Payment data (processed by Netopia; we store only transaction IDs)
- Cookies and similar tracking technologies (see Cookie Policy)
4. Legal Basis for Processing
We process personal data on the following legal bases: contract performance (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f) GDPR), legal obligation (Art. 6(1)(c) GDPR), and consent where required (Art. 6(1)(a) GDPR).
5. How We Use Your Data
We use your data to provide the platform, process payments, send transactional emails, improve our services, and comply with legal obligations. We do not sell your data to third parties.
6. Data Retention
We retain personal data for as long as your account is active or as needed to provide services. You may request deletion at any time via Data Deletion Request.
7. Your Rights (GDPR)
Under GDPR, you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data. To exercise these rights, contact privacy@grow360.com or use the self-service forms at Data Deletion and Data Export. You may also lodge a complaint with ANSPDCP (dataprotection.ro).
8. International Transfers
Your data is stored on servers in the European Union (eu-west-1, AWS Ireland). Certain sub-processors may process data outside the EEA under appropriate safeguards (SCCs or adequacy decisions).
9. Sub-Processors
We use the following key sub-processors: AWS (infrastructure), Supabase (database), Vercel (hosting), Sentry (error monitoring), Netopia (payments). A full list is available on request via privacy@grow360.com.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be notified by email or prominent notice on the platform. The "Last updated" date at the top reflects the most recent revision.
11. Contact
Questions about this policy? Email privacy@grow360.com.