Privacy Policy
Last updated: 11 July 2026
The short version: your data stays in your country, it is used only to run GrowOS for you, and it is not used to train outside models. The rest of this page is the detail behind that.
What we collect
We hold what you give us and what the service needs to run. That means the contact details you send us, what you tell us about your business during discovery, the content in your workspace, the data in apps you choose to connect, and technical records of what the platform did — which agent ran, when, and on whose say-so.
Where it lives
Your data is stored on Civo, a sovereign cloud, so it stays in your country under its own laws. Civo carries ISO 27001, SOC 2 and Cyber Essentials Plus. Your data is encrypted while it moves between services, and your business runs in its own workspace on the platform.
How it is used
One purpose: running GrowOS for you. Your discovery answers exist to design your agents and workflows. Your workspace content exists so your agents can do the work. Sensitive work runs through relaxAI, which runs open-source models inside the same sovereign environment your data already lives in — the models read your data, but the data never leaves to reach the model. Nothing is shared with an outside AI provider, and your data is not used to train outside models.
Connected apps
When you connect an app, your agents act in it with the access you granted and nothing more. We do not copy that app’s data wholesale; agents read what a job needs, when the job runs. You can revoke any connection at any time from the platform.
Who else touches it
No one buys, rents or borrows your data. It is handled by the infrastructure the service runs on — Civo for hosting and relaxAI for model processing, both inside the sovereign environment described above — and by the service providers we use to deliver email you have asked for. Each works under contract, for us, for the purposes on this page.
How long we keep it
For as long as you have an account, so your agents keep their memory and their record of work. When your account closes, or when you ask, we delete your content. Ask at [email protected] and we will confirm when it is done.
Your rights
You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how it is handled. UK data protection law backs those rights, and if you are unhappy with our answer you can complain to the Information Commissioner’s Office. Start with an email to [email protected]; a person replies, usually within a day.
Changes to this policy
If we change how we handle your data, we update this page and the date at the top, and we tell account holders directly about any change that matters.
Contact
Anything on this page, or anything not on it: [email protected].