Information we collect
We collect information you give us directly: your name, email address, company name, and phone number when you sign up, contact us, or request a demo.
When you use the application, we collect business data you enter — invoices, transactions, inventory records, customer details, and similar records. This data belongs to you. We act as a data processor on your behalf.
We automatically collect limited technical information when you visit our website or use the app: pages visited, approximate location (country/region), browser type, device type, and referrer URL. This is used solely to improve the service.
How we use your information
To create and manage your account, provide the services you signed up for, and send essential service communications (password resets, billing receipts, security alerts).
To improve BizManager — we analyse aggregated, anonymised usage patterns to understand what features work well and where we can do better.
To send product updates and educational content, but only if you have opted in. You can unsubscribe at any time using the link in any email we send.
We never sell your personal information. We never use your business data to train AI models or share it with third parties for their own marketing.
Third-party services
We use a small number of trusted third-party providers to operate the service. Each is bound by a data processing agreement and handles data only as instructed by us:
Hosting & infrastructure: Supabase and Vercel (cloud database and hosting). Payment processing: Stripe (card payments — we never store raw card numbers). Email delivery: transactional email service for account notifications. Analytics: privacy-respecting, cookie-free analytics (no cross-site tracking).
We do not share your data with any other third party except where required by law or with your explicit consent.
Data retention
We retain your account data for as long as your account is active. If you close your account, we delete your personal data within 30 days and your business data within 90 days, except where we are required to retain it longer for legal or tax compliance reasons.
Backups are retained for up to 12 months and then permanently deleted.
Data security
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access to production systems is restricted to a small number of authorised team members using multi-factor authentication.
We perform regular security reviews and maintain automated backups. In the event of a data breach that affects your personal data, we will notify you within 72 hours as required by applicable law.
No transmission method is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security.
International transfers
BizManager is operated from India and uses cloud infrastructure hosted in the United States and European Union. If you are located in the EU or UK, your data may be transferred outside your region.
Where such transfers occur, we rely on standard contractual clauses (SCCs) approved by the European Commission to ensure an equivalent level of data protection.
Your rights
Depending on where you are located, you may have the following rights regarding your personal data:
Access — request a copy of the personal data we hold about you. Correction — ask us to correct inaccurate or incomplete data. Erasure — request deletion of your data (subject to legal retention requirements). Portability — receive your data in a structured, machine-readable format. Objection — object to processing based on our legitimate interests. Withdrawal of consent — where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, email us at support@growurfunds.com. We will respond within 30 days. If you are in the EU, you also have the right to lodge a complaint with your local data protection authority.
Changes to this policy
We may update this policy from time to time. When we make material changes, we will notify you by email (if you have an account) and update the 'Last updated' date at the top of this page.
Continued use of the service after changes become effective constitutes acceptance of the updated policy.
Questions about this policy?
We're happy to explain anything in plain language.