Skip to main content
GrowAppAIGrowAppAI
Legal

Privacy Policy

Last updated: July 2026

1. Introduction

GrowAppAI (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our public website.

2. Scope: Website vs. Product

This Privacy Policy applies to our public website only. If you use the GrowAppAI product under a paid subscription, pilot, or enterprise engagement, the processing of data you or your organization submit through the product is governed by your customer agreement and, where applicable, a Data Processing Agreement (DPA) — not by this Website policy.

3. Information We Collect

Analytics data. We use Matomo, a self-hosted analytics platform, to understand how visitors interact with our website. When you grant analytics consent, Matomo may collect page views, referring URLs, browser type, screen resolution, and an anonymized visitor identifier. All analytics data is stored on infrastructure we control — it is never shared with third-party advertising networks.

Form submissions. When you submit a form (such as the demo request, whitepaper download, or gated content form), we collect the information you provide: name, email address, company, role, and any optional fields. We also capture attribution metadata (UTM parameters, landing page, referrer) to understand how you found us, and — if you tick the marketing checkbox — a record that you opted in to marketing communications.

Performance and error telemetry. To keep the website reliable, we collect aggregated technical telemetry such as Core Web Vitals and JavaScript error reports. This telemetry includes the page path and browser user-agent but is not used to build marketing profiles and does not require cookies. We treat it as essential to operating the site.

Local storage for convenience. After you submit a form, your browser may store your name, email, company, and role locally on your device so forms can be pre-filled on later visits. This information stays in your browser and can be removed by clearing your site data.

4. How We Use Your Information

We use the information we collect to:

  • Respond to your demo requests and deliver requested resources
  • Contact you regarding a request you submitted to us
  • Understand website traffic patterns and improve our content
  • Send marketing communications, only where you have explicitly opted in
  • Maintain the security, reliability, and performance of our services

5. Cookie Consent

We display a consent banner on your first visit with three independently controllable categories:

  • Essential. Required for the site to work (for example, remembering your consent preferences themselves). Always on.
  • Analytics (Matomo, self-hosted). Page views, referrers, and UTM attribution used to improve our content. Off by default.
  • Marketing (Mautic, self-hosted). Visitor tracking used to stitch anonymous sessions to identified contacts once you submit a form, and to attribute the impact of campaigns. Off by default.

Analytics and marketing scripts do not load until you grant the corresponding consent. You can change your choices at any time using the Cookie Settings link in the site footer, which reopens the preferences panel. You can accept all, reject non-essential, or set each category individually. Every change is recorded server-side as a consent_change event for audit purposes.

6. Marketing Communications

We send marketing communications only to people who have explicitly opted in via a separate, non-pre-checked checkbox on our forms. You can withdraw your consent and unsubscribe at any time using the unsubscribe link in our emails or the email preferences page linked from them. We keep a record of marketing opt-in to demonstrate that consent was given.

7. Third-Party Services

We use self-hosted, open-source tools wherever possible to maintain control of your data. Our analytics (Matomo) and marketing automation (Mautic) instances run on infrastructure we operate. We also use a self-hosted notification service to deliver emails such as resource downloads and demo confirmations. We do not sell or share your personal information with third-party advertisers.

8. Data Retention

Analytics data is retained for up to 24 months. Form submission and lead data is retained for as long as necessary to fulfill the purpose for which it was collected, to maintain our business relationship, or as required by applicable law, after which it is deleted or anonymized.

9. Data Security

We implement industry-standard security measures to protect your information, including encrypted connections (TLS), access controls, and regular security reviews. However, no method of electronic transmission or storage is 100% secure.

10. Your Rights

Depending on your jurisdiction, you may have rights over your personal data. Under the Israeli Privacy Protection Law, you may request to review, correct, or delete personal information we hold about you. If you are in the European Economic Area or the United Kingdom, the GDPR/UK GDPR gives you rights to access, rectify, erase, restrict, or object to processing, and to data portability. To exercise any of these rights, contact us at the address below; we will respond within a reasonable time and in accordance with applicable law.

11. International Transfers

We are an Israeli company and process data primarily on infrastructure we control. Where information is transferred across borders, we take reasonable steps to ensure it remains protected consistent with this policy and applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at privacy@growappai.com.