Your data, your control

1. Data controller

The controller of your personal data is Growlylabx, MB, registration code 307561672, registered address Gandriniu g. 14, Mikasiunu k., LT-14127 Vilniaus r., Lithuania (the controller, or "we").

For any privacy matter, contact us at sales@growlylab.com.

2. What data we collect

Depending on how you interact with us, we may process the following categories of data:

• Account data: name, login email and a securely hashed password (once accounts are enabled).
• Enquiry data: name, email, phone, company name and the content of your message when you submit a form or write to us.
• Audit data: publicly available information about your business from maps, search and directories that we analyse for the report; it may include personal data (for example, the names of review authors).
• Usage data: which features you use, and the timing and volume of requests.
• Technical data: IP address, browser and device information, and server log records.

3. How we use your data

We use your data to provide and administer the service, answer enquiries, track usage limits, improve the service and fix errors, ensure security, and meet legal obligations.

4. Legal basis

We process your data on the following grounds: a contract (where processing is needed to provide the service); legitimate interest (service security and improvement); your consent (for example, analytics cookies); and legal obligation (where required by law).

5. How long we keep data

We keep data no longer than needed for the purpose:

• Account data is kept while the account is active.
• Enquiry and correspondence data is kept while we are in contact and for a reasonable period afterwards.
• Technical logs are kept for a short period for security.
• Payment and accounting data is kept for as long as the law requires.

6. Who we share data with

We do not sell your data. It is processed only by trusted service providers (data processors) acting on our instructions under contract:

• Server and infrastructure (hosting) providers.
• An error-monitoring service (Sentry, EU region) that helps us spot and fix technical issues quickly.
• An email delivery service.
• A payment processor (once paid plans are enabled).
• Where a processor handles data outside the European Economic Area, we put appropriate safeguards in place (for example, Standard Contractual Clauses).

7. Your rights

Under the GDPR you have the following rights regarding your personal data: to access it and obtain a copy; to have inaccurate data corrected; to have your data erased (the right to be forgotten); to restrict or object to processing; to receive your data in a structured format and have it transferred; and to withdraw consent you have given. To exercise these rights, write to sales@growlylab.com.

8. Deleting your account

You can delete your account at any time by contacting us. After deletion, personal data is removed within a reasonable period; anonymous usage statistics may be retained, and payment records are kept for as long as the law requires.

9. Data security

We apply technical and organisational measures: encrypted connections (HTTPS), access controls, password hashing and regular maintenance. No method of transmission over the internet is fully secure, but we work continuously to keep the risk as low as possible.

10. Cookies

We use essential technical cookies needed for the site to work (session, security, language choice) and these run without separate consent. Non-essential cookies (such as analytics) are enabled only after you give prior consent; you can change your choice at any time in your browser settings.

11. Children

The service is intended for businesses and is not aimed at children under 16. We do not knowingly collect data from children; if we learn that we hold such data, we delete it without delay.

12. Changes to this policy

We may update this policy. We will post any material changes on this page and note the updated date at the top.

13. Complaints

If you believe your rights have been infringed, you have the right to lodge a complaint with the supervisory authority, the State Data Protection Inspectorate (VDAI): vdai.lrv.lt, email ada@ada.lt.

14. Contact

Data controller: Growlylabx, MB, registration code 307561672, address Gandriniu g. 14, Mikasiunu k., LT-14127 Vilniaus r., Lithuania, email sales@growlylab.com, phone +370 675 01195.