Privacy Policy

This Privacy Policy describes how GrowthX, Inc., a Delaware corporation ("GrowthX," "we," "us," or "our") collects, uses, and protects information when you use GrowthX Go ("the Service"). We are committed to protecting your privacy and handling your data responsibly.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, industry, funding stage, revenue range, and product description. If you sign in with Google, we receive your name and email from your Google account.

Usage Data

We collect data generated through your use of the Service, including coaching conversations, deliverables and artifacts you create, pipeline data, and meeting notes or call transcripts you paste or upload.

Technical Data

We automatically collect technical information such as browser type, device information, IP address, and usage patterns (pages visited, features used, session duration) to improve the Service.

2. How We Use Your Information

• Provide personalized AI coaching tailored to your business context
• Generate and store deliverables and strategic artifacts
• Maintain cross-session memory to improve coaching continuity
• Authenticate your identity and secure your account
• Send transactional emails (password resets, notifications)
• Analyze usage patterns to improve the Service
• Enforce rate limits and prevent abuse
• Comply with legal obligations

3. AI Processing

Your inputs are sent to AI models provided by Anthropic to generate coaching responses. We include your business context in AI prompts to provide relevant coaching. We use Anthropic's commercial API, under which your inputs and the model's outputs are not used to train Anthropic's models; they are processed only to provide the Service. Conversation history is compressed and summarized, and key facts are stored in a long-term memory layer (see Service providers below), to maintain context across sessions.

4. Data Sharing

We do not sell your personal information to third parties. We may share data with:

• Service providers: Infrastructure partners (Supabase for database and auth, Vercel for hosting, Anthropic for AI processing, mem0 for long-term coaching memory, Stripe for subscription payments, Postmark for email, Upstash for rate limiting) who process data on our behalf under contractual confidentiality and security obligations
• Your GrowthX coach: If you use the "Notify Coach" feature, your coach may see completion status and selected deliverables
• Legal requirements: When required by law, regulation, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to you

5. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS) and at rest
• Row-level security policies ensuring users can only access their own data
• Secure authentication through Supabase Auth with support for OAuth providers
• API keys and secrets stored in environment variables, never exposed to the client
• Rate limiting to prevent abuse

While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Coaching conversations, deliverables, and artifacts are stored until you delete them. You may delete individual chat sessions at any time.

If you cancel or your subscription lapses: we deactivate your access but retain your account and content, so you can resume where you left off if you return. You can request deletion at any time.

If you delete your account: we treat this as a deletion (erasure) request and remove your personal data within 30 days, except for limited records we are required or permitted to keep, such as transaction and billing records (kept for legal, tax, accounting, and fraud- prevention purposes) and copies in routine backups, which are deleted on a rolling schedule.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict certain processing activities
• Withdraw consent where processing is based on consent

To exercise these rights, visit the Settings page in your account or contact us at the email below. We will not discriminate against you for exercising them.

EEA/UK (GDPR): we process your data to perform our contract with you, to pursue our legitimate interests in operating and improving the Service, to comply with legal obligations, and, where applicable, with your consent. You have the right to erasure ("right to be forgotten"), to lodge a complaint with your supervisory authority, and to data portability.

California (CCPA/CPRA): we do not sell or share your personal information for cross-context behavioral advertising, and we have not done so. California residents may exercise their rights to know, delete, and correct their personal information as described above.

8. Cookies and Tracking

We use essential cookies and local storage to maintain your session, remember preferences (such as sidebar state and dismissed banners), and ensure the Service functions correctly. We do not use third-party advertising trackers.

9. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect information from children. If we learn that we have collected data from a child, we will take steps to delete it promptly.

10. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these locations, which may have different data protection laws than your jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use after changes take effect constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or to exercise your data rights, contact us at support@growthx.com.

See also our Terms of Service.