Privacy Notice
Last updated: May 31, 2026
1. Who we are
This Privacy Notice describes how Growberly ("Growberly", "we", "us", "our") collects, uses, and shares personal data when you use the RFP Analyzer service (the "Service"). Growberly is the data controller for the personal data processed under this notice.
2. Personal data we collect
- Account data: name, email address, login credentials.
- Content data: documents (PDF, .docx, .txt) and evaluation criteria you upload to be analyzed.
- Usage data: credit balance, analyses performed, timestamps, feature interactions.
- Technical data: IP address, device identifiers, browser type, cookies, log data.
- Support data: messages you send to customer support.
3. Purposes and legal bases
- Creating and managing your account — performance of a contract.
- Providing AI-powered RFP analysis — performance of a contract.
- Security, fraud prevention, abuse detection — legitimate interests.
- Improving the Service and debugging — legitimate interests.
- Customer support — performance of a contract.
- Compliance with legal obligations (tax, accounting) — legal obligation.
4. Sharing your data
We share personal data only with:
- Paddle.com Market Ltd, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance, invoicing and refunds.
- Service providers / subprocessors such as cloud hosting, database, email delivery, AI model providers, and analytics — strictly to operate the Service.
- Professional advisers (legal, accounting) where necessary.
- Public authorities where required by law.
5. International transfers
Where personal data is transferred outside the UK / EEA, we rely on adequacy decisions or Standard Contractual Clauses to safeguard your data.
6. Retention
We retain account and usage data for as long as your account is active and for a reasonable period afterward to comply with legal obligations or resolve disputes. Uploaded documents are retained only as long as needed to provide and improve the analysis, then deleted or anonymised.
7. Your rights
Depending on your location, you may have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent. You may also lodge a complaint with your local supervisory authority. We respond to verified requests within one month.
8. Security
We use appropriate technical and organisational measures — including encryption in transit, access controls, and audit logging — to protect personal data.
9. Cookies
We use strictly necessary cookies to keep you signed in and to operate the Service. We may also use analytics cookies to understand usage. You can manage cookies through your browser settings.
10. Contact
For privacy questions or to exercise your rights, contact Growberly through the support channels available in the app.