Version 2.0 · Effective: July 15, 2026 · Last Revised: July 15, 2026
Growthy Inc. ("Growthy," "we," "us") provides an AI-assisted bookkeeping software platform. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit growthy.com (the "Site") or use the Growthy application (the "Service").
One important distinction up front: if you are a bookkeeper, accountant, or business using Growthy, the data you upload or connect may contain information about other people — your clients and their personnel, and your own employees, vendors, and customers ("Client Data"). We process Client Data on your behalf and at your direction — see Section 4. This Policy's descriptions of our own collection and use apply to information about you (our visitor, user, or customer).
1. INFORMATION WE COLLECT
| Category | Examples | Source |
|---|---|---|
| Account & contact | Name, email, business name, and authentication identifiers (sign-in is managed through our authentication provider) | You / our authentication provider |
| Billing | Plan, transaction history. Payments are processed by Stripe; we do not store full card numbers | You / Stripe |
| Financial data you submit | Transactions, accounts, ledgers, documents you upload or connect for bookkeeping | You; Plaid and linked financial institutions at your direction (may include Client Data — Section 4) |
| Usage & device | Pages viewed, features used, browser/device type, IP address, referring URL, timestamps | Automatic |
| Cookies & similar | Login state, preferences, analytics identifiers | Automatic (Section 6) |
| Communications | Support requests, survey responses, demo requests | You |
The Site and Service are not directed to children, and no person under 18 may create an account. We do not knowingly collect personal information directly from children under 13. Data our customers submit (Client Data) may concern a minor — for example, a minor appearing in a client's payroll or transaction records; the customer is responsible for having the authority and any consent required to submit that data. If you believe personal information has been submitted to us without proper authority, or that a child under 13 has provided us personal information directly, contact privacy@growthy.com; we will coordinate with the relevant customer where applicable and address it, including deletion where required.
2. HOW WE USE INFORMATION
- Provide, secure, support, and improve the Site and Service
- Generate bookkeeping suggestions and reports from the data you submit (Section 3)
- Process payments and manage subscriptions
- Communicate with you: transactional and administrative messages, and — with opt-out available at any time — product updates and marketing
- Monitor for fraud, abuse, and security incidents
- Comply with law and enforce our agreements
3. AI AND AUTOMATED PROCESSING
Growthy is an AI product, so here is exactly what that means for your data:
- The Service uses machine learning, including pattern learning from the data in your account, to suggest transaction categorizations and reconciliation matches. This learning improves suggestions within your account.
- We do not use your data — including Client Data — to train foundation models. Where we use third-party AI infrastructure providers, we use commercial API offerings under terms that do not permit the provider to train its models on your data. Our current AI-provider list is available on request at privacy@growthy.com.
- We use pattern learning within your account to improve your own suggestions, and de-identified and aggregated data — data that no longer identifies, and cannot reasonably be used to identify, you, your clients, or any individual — to improve the categorization system for everyone. We do not attempt to re-identify it, and we contractually prohibit recipients of it from attempting to re-identify it.
- AI outputs are suggestions and can be wrong. The Subscription & Software License Agreement requires human review before outputs are relied on; our public Disclaimer page summarizes that requirement.
- We do not make automated decisions about you that produce legal or similarly significant effects.
4. CLIENT DATA — WHEN OUR CUSTOMERS UPLOAD OTHER PEOPLE'S INFORMATION
If a Growthy customer (for example, a bookkeeping firm) uploads or connects data containing other people's information — their clients' records, or their own employees, vendors, and customers — the customer, not Growthy, decides what is collected and why. We process Client Data on the customer's instructions to provide, secure, and support the Service and to create the de-identified and aggregated improvement data described in Section 3 (and in Sections 5.2–5.4 of the Subscription & Software License Agreement); we do not use identifiable Client Data for marketing, and we do not sell it. The data-processing terms that govern our processing of Client Data — roles, instructions, confidentiality, assistance, and subprocessor obligations — appear in Section 5.7 of the Subscription & Software License Agreement. If you are an end client of a Growthy customer and have questions about your data, please contact that firm directly; we will support their response.
5. HOW WE SHARE INFORMATION
We do not sell personal information — as "sale" is defined under applicable state privacy laws, including exchanges for monetary or other valuable consideration — we do not share it for cross-context behavioral advertising, we do not permit third parties to use it for their own marketing or advertising, and no third-party advertising or retargeting pixels are in use on the Site.
We disclose personal information only to:
- Service providers that process it on our behalf for the business purposes described in this Policy, under the applicable contractual terms with each provider, in these categories: payment processing (Stripe), bank account connections (Plaid — data Plaid collects is also described in the Plaid End User Privacy Policy), cloud hosting and database infrastructure, authentication, AI processing (see Section 3), analytics, email delivery and customer messaging, and forms. Our full current service-provider list is available on request at privacy@growthy.com.
- Professional advisors (lawyers, accountants, auditors) under confidentiality obligations.
- Legal and safety recipients when we believe in good faith that disclosure is necessary to comply with law or legal process, enforce our agreements, or protect the rights, property, or safety of Growthy, our users, or the public.
- A successor in a merger, acquisition, financing, or sale of assets. Your information may be among transferred assets; this Policy will continue to apply to it, and we will notify you of any material change in practices.
De-identified and aggregated data that does not identify, and cannot reasonably be used to identify, you or your clients may be used, and shared in aggregate statistical form (for example, product usage statistics), for analytics and Service improvement. We commit not to re-identify it, and we contractually prohibit recipients (other than the general public receiving aggregate statistics that cannot reasonably be re-identified) from attempting to re-identify it. (For subscribers, Section 5.4 of the Subscription & Software License Agreement states the same commitments contractually.)
6. COOKIES AND ANALYTICS
We use session and persistent cookies for login state, preferences, and analytics (feature usage, page views, navigation paths). You can control cookies through your browser settings; disabling them may break login and preferences.
- Do Not Track: like most sites, we do not currently respond to browser "Do Not Track" signals; the rights in Section 10 are available to everyone regardless of browser signals. (Disclosure per CalOPPA, Cal. Bus. & Prof. Code §22575(b)(5)–(6).)
- Third-party tracking: our analytics providers collect usage data on our Site at our direction; we do not permit third parties to collect personal information about your activities across other websites over time for their own purposes.
7. HOW WE PROTECT INFORMATION
We maintain administrative, technical, and organizational safeguards designed to protect personal information, appropriate to the sensitivity of the data; specific controls vary with the system and data involved. Data moving between you and the Service is encrypted in transit (TLS). No system is perfectly secure; we cannot guarantee against every unauthorized access, but Section 9 describes what we do if a breach occurs.
8. RETENTION
| Data | Retained |
|---|---|
| Account & billing records | Life of account, and thereafter as needed to meet tax, accounting, audit, and legal obligations |
| Financial data you submit (incl. Client Data) | Life of account; after termination, exportable for 30 days, then deleted within 90 days after the export window closes (no later than 120 days after termination), with residual backup copies purged within a further 90 days (no later than 210 days after termination), except legally required retention (per Section 5.5 of the Subscription & Software License Agreement) |
| Usage, analytics, and support data | No longer than reasonably needed for the purposes in Section 2, then deleted or de-identified |
9. SECURITY INCIDENTS
If a security incident results in unauthorized acquisition of, or access to, personal information — including encrypted information where the encryption key or credential was, or is reasonably believed to have been, acquired — we will provide the notices applicable law requires (including Texas Business & Commerce Code §521.053 and other state breach-notification statutes) without unreasonable delay after we become aware of the incident, and we will not wait for final confirmation before beginning required notifications. Where we process Client Data on a customer's behalf, we will notify that customer without undue delay after becoming aware of the incident so the customer can meet its own notification obligations to its clients (see Section 5.6 of the Subscription & Software License Agreement); notice to individuals appearing in Client Data is the customer's responsibility unless applicable law requires otherwise. We will cooperate with regulators as required.
10. YOUR RIGHTS AND CHOICES
- Marketing opt-out: use the unsubscribe link in any marketing email. We will still send administrative messages.
- Access, correction, deletion, portability: you may request a copy of your personal information, correction of inaccuracies, deletion of your data (subject to legal retention), or an export of your data (for Service data, export is governed by Section 5.5 of the Subscription & Software License Agreement). Email privacy@growthy.com; we will verify your identity and respond within 45 days of a verifiable request, extendable where applicable law permits (with notice to you).
- Appeal: if we decline a request, you may appeal by replying to our decision email with "Appeal" in the subject; we will respond within the time applicable law requires and in any event within 60 days. Texas residents may also submit complaints to the Texas Attorney General at https://consumercomplaints.oag.texas.gov.
- Depending on where you live, you may have additional rights under state privacy laws; we honor the rights above for all users regardless of location.
11. INTERNATIONAL USERS
Growthy is operated from the United States and the Service is intended for U.S. customers. If you access it from elsewhere, you understand your information will be processed in the U.S., where data-protection laws may differ from your jurisdiction's.
12. CHANGES TO THIS POLICY
We will notify you of material changes by email to your account address and by prominent notice on the Site at least 30 days before they take effect. Non-material clarifications take effect on posting. Each published version is numbered and dated so you can tell what changed and when. For subscribers, this Policy is incorporated into the Subscription & Software License Agreement: a change to this Policy that materially expands the use of Customer Data (as defined in that agreement) is also a change to that agreement and follows its Section 17, applying no earlier than your next renewal unless you affirmatively accept it sooner.
13. CONTACT US
Growthy Inc. 131 Continental Dr, Suite 305, Newark, Delaware 19713 privacy@growthy.com