Privacy Policy

Last updated: June 10, 2026

1. Data We Collect

When you use Growdn, we collect the following categories of data:

• Account Information: Email address, username, and encrypted Instagram credentials
• Usage Data: Automation settings, target hashtags, comments, DM templates, and interaction statistics
• Follower Data: When you import follower data, we temporarily process Instagram profile information
• Payment Data: Processed securely through Paddle.com, our Merchant of Record — we never store your full payment details
• Technical Data: IP address, browser type, device information, and cookies

2. How We Use Your Data

We use your data to:

• Provide, maintain, and improve the Service
• Process payments and manage subscriptions
• Send technical notices, updates, and support messages
• Monitor usage trends and improve our automation engine
• Comply with legal obligations

3. Data Storage & Security

Your Instagram credentials are encrypted using Fernet (symmetric encryption) before being stored. We implement industry-standard security measures including encryption at rest, secure API authentication, and regular security audits. Data is stored on secure servers. Clients based in the European Union keep their GDPR rights, which we honour regardless of where the data is hosted.

4. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account deletion, we delete your data within 30 days. Follower analysis data is retained for 90 days then automatically purged.

5. Your Rights (GDPR)

If you are in the European Economic Area, you have the following rights under the GDPR:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Portability: Receive your data in a structured format
• Right to Object: Object to processing of your data

To exercise these rights, contact us at contact@growdn.com.

6. Third-Party Services

We use the following third-party service providers:

Service	Purpose	Data Shared
Paddle.com	Payment processing (Merchant of Record, EU VAT handling)	Payment info, email, billing country
Proxy Providers	Residential/mobile proxy network	IP address, usage volume
Hosting Provider	Server infrastructure	All encrypted data at rest

7. Cookies

We use essential cookies for authentication and session management. We also use analytics cookies to understand how you use our Service. You can control cookie settings through your browser preferences. See our Cookie Policy for more details.

8. Contact

Data Controller: PT Shananoh And Cie (Growdn), NPWP 1000000008944092
Email: contact@growdn.com
Address: Villa Senyum, Desa/Kelurahan Tibubeneng, Kecamatan Kuta Utara, Kabupaten Badung, Provinsi Bali 80361, Indonesia