Privacy Policy

GrowFleet is a product of Apps 365 Ltd, a company registered in England & Wales (company 13955007), registered office 20-22 Wenlock Road, London, N1 7GU ("we", "us"). We are the data controller for the personal data described here. This policy explains what personal data we collect, why, our lawful bases, how long we keep it, who we share it with, and your rights. We aim for the shortest honest version.

Our lawful bases

We process enquiry and customer data to provide the service and perform our contract with you, to run, secure and improve the platform (our legitimate interests), and to meet legal and accounting obligations. The advertising pixel on this website runs only on your consent, which you can withdraw at any time.

What we collect

• Enquiries: if you email us, we hold your email address and what you wrote, to reply and follow up.
• Customers: account details (name, email, business name), billing records, and the content and connection data you place in your GrowFleet instance.
• Website: standard server logs (IP address, pages requested) for security and reliability, and - only if you accept it - a Meta advertising pixel (see Cookies and the Meta pixel below). No tracking runs until you opt in.

Where it lives

Customer instances are hosted on servers in the UK/EU. Each customer's instance is isolated: your data is not pooled with other customers'.

International transfers

Your instance and its data are hosted in the UK/EU. Where a processor we rely on operates outside the UK/EU - for example some AI model providers - we only use providers that offer UK GDPR-compliant transfer safeguards, such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

What we never do

• Sell your data to anyone.
• Use one customer's content or results to serve another customer.
• Post, spend or publish anything from your accounts without your approval.

Third parties we rely on

We use carefully chosen processors to run the service: hosting and content-delivery providers, AI model providers for content generation, a social publishing partner, and email delivery. Each processes data only on our instructions under a written agreement, and a current list of these subprocessors is available on request. Your platform accounts remain yours; we access them only through the connections you authorise and you can revoke access at any time.

Your connected services and the data they touch

When you connect a platform, GrowFleet accesses it only through the connection you authorise, and you can disconnect at any time. What we access is deliberately limited:

• Social networks - you sign in on the platform's own secure page, so we never see your passwords. We store your public handles and aggregate performance and audience figures (followers, reach, engagement, and age / gender / location bands) - never data that identifies an individual follower.
• Advertising accounts (Meta, Google, TikTok, LinkedIn) - aggregate ad metrics only (spend, impressions, clicks, conversions). No individual is identified.
• Shopify - your product catalogue and, only if you grant it, aggregate sales per product. The orders request is limited to totals and excludes your customers; we never request access to your customer records.
• Stripe - amounts, currency and a product reference for revenue reporting; never cardholder names or card details.
• WhatsApp - if you use it, we store the contacts and messages of people who message you so you can reply and honour opt-outs; you can erase them at any time.
• Meta Conversions API - if you enable it, matched conversion events are sent to Meta with email and phone hashed (SHA-256) before sending; GrowFleet stores none of it.

A full, per-connection breakdown of exactly what each connection reads and stores - and how to disconnect it or erase the data - is available inside your GrowFleet account and on request.

Cookies and the Meta pixel

We keep this to a minimum. Strictly necessary items (remembering your light/dark theme choice) are stored on your device and need no consent - they carry no tracking.

The only advertising technology on this site is the Meta pixel, and it is off by default. It loads only after you click Accept on our cookie banner. If you accept, it sets a Meta cookie (_fbp) and shares page views and enquiry events with Meta so we can measure how well our own ads perform. If you reject, or ignore the banner, nothing loads and no data goes to Meta. You can change your mind at any time using the Cookie settings link in the footer. Our legal basis is your consent under UK PECR and UK GDPR, and you can withdraw it whenever you like.

Retention and deletion

Enquiry emails are kept as long as useful for the conversation. Customer instance data is kept while your subscription is active. On cancellation we export your data to you on request, destroy your instance within 30 days, and confirm deletion in writing.

Your rights

Under UK GDPR you may request access to, correction of, or deletion of your personal data, and you may complain to the ICO. Contact us via our contact page and we will respond within one month.