Privacy Policy

1. Who we are

Grow Impact OS is a product of [LEGAL ENTITY NAME] (“we”, “us”), registered at [REGISTERED ADDRESS, COUNTRY]. You can reach us at success@growimpactos.com.

[Name and contact of the data protection officer or privacy contact, if one is appointed.]

2. Two roles: your account and your ministry's data

For your own account (name, email, sign-in, billing), we decide how and why the data is used. We are the controller.

Ministries use Grow Impact OS to manage information about their applicants, students, staff and supporters. For that information the ministry is the controller and we act as its processor, only following the ministry's instructions. If you are an applicant or student, contact the ministry first about your data.

3. What we collect

• Account data: name, email address, a securely hashed password, language and theme preferences.
• Consent records: when you confirmed you are 18 or over, which version of these documents you accepted, and your choice about promotional email.
• Workspace data that a ministry enters or collects (programs, applicants, notes, payments records). This can include sensitive categories such as health or religious information when a ministry chooses to collect it.
• Billing data processed by Stripe. We never see or store full card numbers.
• Technical data: IP address, browser and device type, and security logs.
• Support conversations with our assistant and by email.

4. Why we use it, and our legal bases

• To provide the service and manage your subscription (performance of a contract).
• To keep the service secure, prevent abuse and improve it (legitimate interests).
• To send you service and account emails, such as confirmations, security notices and billing messages (contract and legitimate interests).
• To send promotional emails, only if you opted in (consent), which you can withdraw at any time.
• To meet legal obligations such as tax and accounting rules.

5. Who we share data with

We use trusted providers to run the service. They process data only on our instructions:

• Supabase: database and sign-in. [Confirm hosting region: EU]
• Vercel: application hosting.
• Stripe: payments and subscriptions.
• Resend: sending emails.
• [AI provider]: powers our support assistant. The assistant is not given applicants' personal data. [Confirm before launch]

6. International transfers

Some providers may process data outside the European Economic Area. Where that happens we rely on approved safeguards such as Standard Contractual Clauses. [Lawyer to confirm.]

7. How long we keep data

We keep account data while your account is active. If a subscription ends, the workspace becomes read-only and its data is kept for [90 days] before deletion, unless you ask for earlier deletion. Billing records are kept as long as tax law requires. [Lawyer to confirm periods.]

8. Your rights

Under the GDPR and similar laws you can ask to access, correct, delete or export your data, to restrict or object to certain uses, and to withdraw consent at any time. You can also complain to your local data protection authority.

Email success@growimpactos.com and we will respond within one month. For information a ministry holds about you, contact that ministry.

9. Cookies

We use only essential cookies and similar storage: your sign-in session, your language, your light or dark theme and your selected workspace. We do not currently use advertising or analytics cookies. [Update if this changes.]

10. Age

Grow Impact OS is for people aged 18 or over. We do not knowingly collect data from children.

11. Changes

When we make material changes we will update the version date above and notify account holders. Previous versions are available on request.