Draft, to be finalised with legal counsel before public launch (GDPR / UK GDPR / CCPA).

Privacy policy

Grotivo is a product of Dee-Twelve Technologies ("we"). This policy explains what we collect when your company uses Grotivo and how we protect it.

What we collect

Account details from your sign-in provider (name and work email); company profile information you enter; growth assessments, business metrics and recommendations; data from systems your admins connect (read-only); billing contact details. Card details are handled by our payment processor and never stored by Grotivo.

How we use it

To provide the service: calculating your Growth Score, generating recommendations and reports, sending the emails you choose to receive, and billing. We use AI providers to generate analysis; your data is sent only for that purpose and is not used to train their models.

Security

Data is isolated per company workspace; OAuth tokens and webhook secrets are encrypted at rest; API keys are stored as hashes; all traffic uses HTTPS.

Feedback, reviews and testimonials

From time to time Grotivo asks how we are doing. Your rating and comments are used to improve Grotivo and to answer complaints. They are never published unless you separately and clearly agree, as described below.

Using your comments in our marketing is always your choice. It works like this:

  • A separate question, only ever asked after a Good or Excellent rating. Rating Grotivo is simple: you pick 1 to 5 and can add a comment. Only if you rate us Good or Excellent and leave a comment do we ask, as a separate question, whether we may use it. You can also offer a testimonial yourself in Settings, Product feedback and testimonials, where permission is a box that is never ticked for you. You can send feedback, and use every part of Grotivo, without agreeing.
  • You choose how you are named. When you agree, you pick one: full name, job title and company; first name and company; or anonymous (for example "Marketing director, UK retailer"). We never add details you did not choose. We use a company logo only with separate permission from someone authorised to give it.
  • We record your choice. We keep a record of what you agreed to: your account, the date and time, your exact words, the naming option you picked and the wording of the permission box you saw. This lets us show exactly what was agreed, and lets you check it at any time.
  • You see it before anyone else does. Before we first publish your comment, we email you a preview showing exactly how it will appear. If you reply within 7 days asking us not to use it, we will not. We may shorten a comment or fix spelling, but we never change its meaning; any bigger change needs your approval again.
  • You can withdraw at any time. Turn it off in Grotivo under Settings or email privacy@grotivo.com. We stop any new use within 2 working days and remove it from our website, the Grotivo app and our social media pages within 14 days. Materials already printed or paid adverts already running when you withdraw cannot be recalled, but we will not use them again.
  • Honest reviews only. We publish genuine comments only, exactly as agreed. If someone received anything of value from us (for example a referral reward or free months), we say so alongside their comment.

Trustpilot. We invite people to review Grotivo on Trustpilot, an independent review website. We invite everyone in the same way, whatever rating they gave us, and never only people who seemed happy. After you give feedback, Grotivo may share your name, email address and a reference number with Trustpilot so that Trustpilot can email you a review invitation, at most once a year. Reviews on Trustpilot are published by Trustpilot under its own terms and privacy policy; you choose whether to write one.

We use your comments for marketing on the basis of your consent, which you can withdraw at any time without affecting anything we published before you withdrew. We keep consent records for as long as we use the comment and for 2 years afterwards, so we can show what was agreed.

Cookies and ads measurement

We use essential cookies to keep you signed in, protect forms from bots and remember where you first found us (for example the ad or website that sent you), so we know which channels work. These are needed for Grotivo to work.

We also count visits and clicks on our website and in Grotivo with our own privacy-friendly analytics: which pages are viewed, which links and buttons are clicked, the website or ad that sent you, your device type and country. It uses no cookies and we do not store your IP address; each visitor is counted using a code that changes every day and cannot identify you. We use this only to improve Grotivo and keep it for up to 400 days.

With your permission only, we also use Meta's marketing cookies (the Meta Pixel) and send Meta a small set of sign-up and payment events (for example "started a free trial", with your email address in scrambled, hashed form) so we can measure and improve our Facebook and Instagram ads. We ask before any of this runs, and nothing is sent to Meta if you choose "Essential only". Meta processes this data under its own terms and privacy policy. You can change your choice at any time.

How long we keep data

We keep your company's data while you use Grotivo. Your super admin can download it or ask us to delete it at any time from Settings, and we complete deletions within 30 days. Payment and invoice records are kept as long as tax law requires. Website analytics are kept for up to 400 days. When you use Grotivo for your company, we process the personal data in your workspace on your behalf under our data processing agreement; see our security page for how we protect it and which providers we use.

Your rights

You can request access, correction, export or deletion of your data, or withdraw any consent you have given, at privacy@grotivo.com. For anything else, our support team is at support@grotivo.com.