Back to Homepage

01 What We Collect

When you use Grovyl, we collect the following:

Data Type	Examples	Purpose
Account info	Email, name	Authentication, communication
Client data	Client names, contact info	Core app functionality
Campaign data	Names, budgets, metrics, tasks	Core app functionality
SOPs & checklists	Workflow documents, templates	Core app functionality
Usage data	Pages visited, features used	Product improvement
Feedback	Bug reports, suggestions	Product improvement

02 How We Store Your Data

Where your data lives:

• Database: Supabase (AWS us-east-1 region)
• Hosting: Cloudflare Pages (global CDN)
• Email: Resend (transactional emails only)
• Payments: Stripe (when billing is active)

Backup policy:

• Supabase provides automatic daily backups
• Backups are retained for 7 days on the free plan
• We do not maintain additional backups beyond Supabase's default

03 How We Protect Your Data

• Encryption: All data is encrypted in transit (TLS) and at rest
• Access controls: Row Level Security (RLS) ensures you can only access your own data
• Authentication: Supabase Auth with secure session management
• No sharing: We do not sell, share, or rent your data to third parties
• Minimal access: Only the app owner can access the database for support and maintenance

04 Who Can Access Your Data

Who	Access	Why
You	Full access to your workspace	Using the app
Invited team members	Your workspace (role-based)	Collaboration
Grovyl (app owner)	Technical support only	Bug fixes, support requests
Supabase	Infrastructure only	Hosting and database
Third parties	No access	We do not sell data

05 Third-Party Services

These services process data on our behalf:

• Supabase — Privacy Policy
• Cloudflare — Privacy Policy
• Resend — Privacy Policy
• Stripe — Privacy Policy

Each provider has its own privacy policy governing how they handle data.

06 Beta Program Data

During the beta period, we may collect additional data to improve the product:

• Feedback: Bug reports, feature requests, and suggestions you submit
• Usage patterns: Which features you use and how often
• Performance data: Error logs, load times, and technical issues

This data is used solely for product improvement and is not shared with third parties.

07 Your Rights

You have the right to:

• Access — View all data stored in your account
• Export — Download your data in standard formats
• Delete — Request permanent deletion of your account and all data
• Correct — Update or correct inaccurate data
• Restrict — Limit how we process your data

To exercise any of these rights, email contact@grovyl.com.

08 Data Retention

• Active accounts: Data is retained while your account is active
• Account deletion: All data is permanently deleted within 30 days
• Beta feedback: Retained indefinitely (anonymized) for product improvement
• Backups: Supabase retains backups for 7 days (auto-purged)

09 Cookies & Tracking

• Essential cookies: Used for authentication and session management
• No analytics: We do not use Google Analytics, Facebook Pixel, or similar tracking
• No ads: We do not serve ads or use ad trackers
• localStorage: Used for app preferences and offline data

10 Children's Privacy

Grovyl is not intended for users under 18. We do not knowingly collect data from children.

11 Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification. The "Last updated" date at the top reflects the most recent revision.

12 Contact

Questions about this Privacy Policy? Contact us:

Email: contact@grovyl.com
Website: grovyl.com