Who we are
GrowthFlowLine, Inc., a Delaware corporation with offices in New York, Lisbon, and Singapore. Contact: privacy@growthflowline.com.
Two roles, two policies
We act in two distinct roles. This policy covers both.
- As a controller — for visitors to growthflowline.com, prospects who book demos, and our own customers.
- As a processor — when our customers (DTC brands) use the platform to handle their shoppers' data. That relationship is governed by our DPA.
What we collect (as controller)
- Account data: name, work email, role, company.
- Billing data: company name, billing address, last 4 of card (via Stripe).
- Product usage: events, feature interactions, performance metrics — pseudonymized where possible.
- Communications: emails to support, demo notes, transcripts of customer calls (with consent).
- Cookies: session, preference, analytics. You can opt out of analytics cookies.
What we don't collect
We do not sell personal data. We do not run third-party advertising trackers on our own site. We do not train AI models on our customers' data.
Why we collect it (legal bases)
To operate the service (contract), to bill (contract), to improve the product (legitimate interest), to comply with the law (legal obligation), and where you've explicitly opted in (consent — e.g. marketing emails).
Sub-processors
We use a small list of vetted vendors. The current list is published at trust.growthflowline.com and updated 30 days before any change. Customers on Pro and above can be notified by email.
Your rights
You can access, correct, delete, export, or restrict processing of your personal data. Most of these are self-service inside your workspace. For anything else, email privacy@growthflowline.com — we respond within 7 days, always within 30.
Data residency & transfers
Default residency is US (AWS us-east-1). EU residency is available on Plus and above; Singapore on Enterprise. Where transfers cross regions, we rely on Standard Contractual Clauses and our Data Privacy Framework certification.
Retention
Account data: while your workspace is active, plus 90 days for export, then deleted. Backups: 35-day rolling window, encrypted, then expired. Support communications: 24 months. Marketing prospects: 24 months from last interaction.
Children
GrowthFlowLine is a B2B platform. We do not knowingly collect personal data from anyone under 16.
Changes
We'll notify you by email and by an in-app banner at least 30 days before a material change. Non-material changes (typo, clarification) are silent.