Privacy Policy

GrowXLabs ("we", "us") is a small senior team that builds custom internal apps, AI & automation, and dashboards for growing businesses. For privacy-related requests, we are the data controller for any information collected through this website.

From the contact form. When you submit our contact form, we collect the name, email address, and message you provide, along with timestamp and basic technical metadata (user-agent, referring page) attached to that submission.

From visiting the site. We use Vercel Analytics to record aggregated, anonymised page views — pages visited, referrer, country, device class. No cookies are set for analytics, and individual visitors aren't identified or fingerprinted.

From your browser. Like every web server, our host (Vercel) processes the standard request data your browser sends — IP address, user-agent, request path — to serve the page and protect against abuse. These logs are short-lived.

• To respond to your inquiry when you contact us.
• To understand which content people find useful so we can improve the site.
• To run, secure, and debug the website itself.

We don't use your information for advertising, profiling, or any other purpose beyond the above.

We don't sell, rent, or trade your information. We share it only with the small set of service providers we use to operate the site, each of whom processes data on our instructions:

• Supabase — stores contact form submissions and page content. Hosted in Sydney, Australia.
• Vercel — hosts the website and provides anonymous analytics. Global edge infrastructure.
• Resend — if enabled, delivers the notification email we receive when you submit the contact form. Your message is included so we can reply.

We may also disclose information when legally required (court order, lawful request from a public authority).

This site doesn't set cookies for marketing, advertising, or cross-site tracking. Vercel Analytics is privacy-first and cookieless. Authentication cookies are set only if you sign in to the admin area (which doesn't apply to public visitors).

Contact form submissions are kept until you ask us to delete them, or until they're no longer needed for the conversation that started them. Aggregated analytics data is retained per Vercel's defaults (typically 30–90 days). Server access logs are short-lived (Vercel default).

Depending on where you live, you may have legal rights over the information we hold about you, including the right to:

• Access a copy of your information
• Correct information that's wrong or out of date
• Delete information we no longer need to keep
• Object to or restrict certain processing
• Receive your information in a portable format
• Withdraw consent (where we relied on consent)

To exercise any of these, email us at team@growxlabs.com. We respond within 30 days, usually faster. You may also have the right to complain to a supervisory authority (e.g. your local data protection regulator).

Our infrastructure is global. Your information may be processed in a country different from where you live. We use providers that maintain appropriate safeguards (standard contractual clauses, adequacy decisions) for transfers from the EU/UK and other regulated regions.

This site is intended for businesses and adult professionals. We don't knowingly collect information from children under 16. If you believe we have, contact us and we'll delete it.

We may update this policy as our practices evolve or regulations change. The effective date at the top will reflect the latest update. Material changes will be flagged on this page or in direct communication where appropriate.

Questions, requests, or concerns about this policy or your information: team@growxlabs.com