Last updated: 30 August 2025

At Growsera (“we”, “us”, or “our”), we take your privacy seriously. This Privacy Policy explains what personal information we collect, how we use it, and how we protect it when you interact with us.

Note: Our sole service is technical support and maintenance for e-commerce stores (Magento, WooCommerce, OpenCart, Shopify). We do not provide marketing services for clients, payment processing, hosting, or any unrelated services. Accordingly, our data collection is limited to what is necessary to deliver reliable technical support.

1) Scope

This Policy applies to:

Our website growsera.com and any related subdomains.
The customer portal and support desk portal.growsera.com.
Email, WhatsApp, live chat, or phone communications related to support, sales, or marketing.

This Policy does not apply to our clients’ own online stores or to the data they collect from their customers. We do not access or process such data except when strictly necessary and only under the client’s explicit instructions.

2) Information We Collect

We collect the following categories of data:

Identifiers
Examples: name, job title, company, email, phone number.
Why: create your account, manage contracts, and communicate about tickets.
Client Store Technical Details
Examples: store domain, platform/version, installed extensions, server settings, hosting details.
Why: diagnose issues and provide support.
Limited Access Credentials
Examples: restricted API keys, limited SSH access.
Why: perform fixes, upgrades, and integrations at your request or that of your authorized representative.
Support Records
Examples: chat/email threads, engineers’ notes, screenshots of errors, explanatory walkthroughs.
Why: documentation and service quality improvement.
Website Usage Data
Examples: IP addresses, browser type, analytics cookies, pixels.
Why: improve the site experience and measure content interest, awareness, and ad attribution.

3) How We Use Your Information

Deliver technical support, maintenance, and troubleshooting.
Communicate about invoices, tickets, maintenance windows, and security alerts.
Conduct internal analysis to improve processes and service quality.
Comply with applicable legal and regulatory obligations.
Conduct marketing to potential customers and lifecycle communications to existing customers.

4) Legal Bases (GDPR and similar laws)

Depending on the context, we rely on one or more of the following:

Contract performance (e.g., operating your account, handling your support tickets).
Legitimate interests (e.g., securing our infrastructure, preventing fraud).
Legal obligation (e.g., responding to lawful requests, tax compliance).
Consent (e.g., newsletters or downloading free resources, where applicable).

5) Sharing Your Information

We do not sell or rent your personal data.
We share data only with service providers who assist us (e.g., support desk hosting, backup services). These providers are bound by confidentiality and strong security commitments.
We may disclose information if required by law or to protect our legal rights.

6) Data Retention

We keep data while your account is active and for as long as necessary to achieve the purposes described above or as required by law (for example, invoice records for seven (7) years).

7) Your Rights

Depending on your location, you may have the right to:

Access personal data we hold about you.
Rectify inaccurate data.
Delete your data (subject to legal retention requirements).
Object to or restrict processing in certain circumstances.
Receive a copy of your data in a portable format (data portability).

To exercise your rights, email us at [email protected].

8) Cookies

We use essential cookies and anonymized analytics/measurement technologies (e.g., Google Analytics 4, Google Tag Manager, Meta Pixel, X (Twitter) Pixel, and similar tools). You can configure your browser to reject cookies. Our site will continue to function if you refuse cookies, though some features may be affected.

9) International Data Transfers

Your data may be stored or processed on servers outside your country (for example, AWS regions in Bahrain, Germany, or India). Where applicable, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) or rely on providers’ recognized compliance frameworks.

Tip: If you run an e-commerce store, seek legal guidance on any hosting or data-residency rules that apply to your business.

10) Children’s Privacy

Our services are B2B only and not directed to individuals under 18. If we learn that we have collected data from a minor without appropriate authorization, we will delete it promptly. You can notify us about any concerning content on our site so we can address it immediately.

11) Changes to This Policy

We may update this Policy to reflect technical, legal, or operational changes. For material changes, we will post a prominent notice on the site or contact you by email before the change takes effect.

12) Contact Us

For questions or requests regarding this Policy, contact [email protected] or use the Contact Us page on our website.