Privacy and Cookie Policy

GrowerAI Platform FZ-LLC (licence no. 105762, registered with the Dubai Development Authority) runs thegrower.ai, our marketing website, and the Grower platform at the-grower.com, our AI marketing platform that helps teams plan, execute, optimize and streamline their marketing. In this policy, “Grower”, “we” and “us” mean GrowerAI Platform FZ-LLC.

We have offices at Dubai Media City, Building 5, Dubai, United Arab Emirates, and at 71 Lower Baggot Street, Dublin D02 P593, Ireland.

For any question or request about your personal data, email info@thegrower.ai. The same address reaches our data protection contact.

For the data we collect through thegrower.ai, and for the accounts, billing and support of people who use the Grower platform, Grower decides how the data is used. Under data protection law, that makes us the controller.

Inside the platform, our customers connect their own ad accounts, analytics and CRM, and upload their own data. We process that data on the customer’s behalf and only on their instructions, under the Data Protection Addendum in our Terms and Conditions (Exhibit C). For that data the customer is the controller and we are their processor. If a Grower customer holds your data and you want to use your rights, contact that customer first. We’ll help them respond.

We collect only what you choose to send us through a form, plus the technical details that come with any web request.

• Book a demo: first and last name, work email, company, phone number (optional), whether you agree to receive marketing emails, and your answers to the short quiz on the demo page.
• Contact: the topic you pick (sales, support or media), your name, email, organization (optional), your message and any interests you select.
• Newsletter and roadmap updates: your email address and where on the site you signed up (the footer, the blog or the roadmap).
• Free tools (the calculators at /tools): the numbers and choices you enter, the result we calculate, your work email, your name and company (both optional), and whether you agree to receive marketing emails.
• Template downloads: which template you downloaded, your work email, your name and company (both optional), and whether you agree to receive marketing emails.

With each form we also record the page you sent it from, your browser’s user agent and the referring page. If the link that brought you to the site carried campaign details, we record those too, with the first page you landed on: UTM parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) and ad click IDs (gclid, fbclid, li_fat_id).

We use your IP address to block repeated or automated submissions. With your submission we store only a salted one-way hash of it, never the address itself.

Our host, Railway, keeps standard server logs of requests to the site, such as the IP address, time, page requested and browser type, so we can run and secure it.

Form submissions are stored in our database at Supabase, in Ireland (EU). Only our server can read them, and only the Grower team members who handle enquiries can see them.

• Your account: your name, email, job title and department, your login details, and your organization’s name, website, headquarters country, business type and industry.
• Connected channels: when you connect ad channels, analytics or a CRM, we access them with your authorization and only within the permissions you grant (view, create, edit or delete). We use channel data only to deliver the service. Google Analytics access is read-only and limited to aggregated metrics. We don’t download or store user-level data from Snapchat Ads, and we don’t access Meta lead forms, CRM data or private audience files, or use LinkedIn lead data or user-level analytics, unless you separately approve it. You can change or revoke access at any time. Exhibit D of our Terms and Conditions sets out the rules for each channel.
• What you create and upload: plans, personas, budgets, campaigns, creatives and files.
• Usage data: information the platform generates about how it is used, which we use to monitor and improve the service. We share it outside Grower only in aggregate, in a form that can’t be linked to you or your company.
• Billing: card payments by Visa or MasterCard in AED, processed through our card payment provider. We keep a record of each transaction for billing and refunds, and email you a payment confirmation within 24 hours.
• Support: what you send us through our helpdesk or the in-app chat, and the contact details that come with it.

We use personal data only for the purposes below. The GDPR and the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) require a legal basis for each one, shown in brackets.

• To answer you: replying to demo, contact and support requests and arranging walkthroughs (steps you asked for before a contract, and our legitimate interest in answering business enquiries).
• To give you what you asked for on the site: showing your free tool results and analysis, and sending you a template, and following up about them (steps you asked for, and our legitimate interest in following up on business enquiries).
• To provide the platform: running your account, connected channels, support and billing (performance of our contract with you or your company).
• To send marketing emails and newsletters: only if you signed up, or ticked the box on the demo form, a free tool or a template download (your consent, which you can withdraw at any time with the unsubscribe link in any email or by writing to us).
• To see which of our campaigns bring people to the site: using the campaign details sent with a form (our legitimate interest in measuring our own marketing).
• To measure how the site is used, and to show you our ads on other sites: with analytics and marketing cookies, only if you allow them (your consent, which you can withdraw at any time in Manage your cookie preferences).
• To keep the site and platform secure: rate limits, hashed IP addresses, server logs and spam checks (our legitimate interest in preventing abuse).
• To improve our products: using aggregated usage data (our legitimate interest).
• To meet our legal duties: tax, accounting, sanctions rules and lawful requests from authorities (legal obligation).

We share personal data only with the providers that help us run Grower, the platforms you choose to connect, and the parties listed at the end of this section.

• Railway: hosts the website and its servers (EU and US).
• Supabase: stores form submissions and site content, including images (EU, Ireland).
• Cloudflare: delivers images from cdn.thegrower.ai and protects the site against attacks and abuse. Its Web Analytics counts visits and measures page speed without cookies or browser storage.
• Anthropic: its Claude AI writes the analysis on our free tools. It receives the numbers and choices you enter and the result, not your email, name or company (US).
• Google Workspace: our company email and documents, so it holds the emails you exchange with us.
• Zendesk: our helpdesk and the platform’s in-app support chat.
• Brevo and SendGrid: send our emails, including newsletters and service emails.
• Google Analytics (only if you allow analytics cookies): measures visits, pages read and which forms are sent. We send it the name of the form, never your name or email.
• HubSpot, Google Tag Manager, Google Ads, and AdRoll with its advertising partners (only if you allow marketing cookies): HubSpot links your visits to the details you send us in a form and runs its chat; HubSpot and AdRoll load Google Ads and Meta’s pixel to measure our ads; AdRoll shows our ads on other sites and shares an identifier with its partners, such as Xandr and The Trade Desk, so they can do this.
• Userpilot: runs the in-app guides and help centre inside the platform. To show you the right guidance it receives your user ID, name, email, job title, department, plan, sign-up date and your organization’s details.
• Our card payment provider: processes Visa and MasterCard payments in AED.
• Platforms you connect: Google, Meta, LinkedIn, Snapchat and the other channels and trackers you connect exchange data with Grower only as you authorize. Their own privacy policies cover the data they hold.

The site’s images load from cdn.thegrower.ai, served by Cloudflare, and its fonts from thegrower.ai itself. Like any web request, these receive your IP address and browser details.

We also share data with our affiliates where they help deliver the service, and with authorities or professional advisers when the law requires it.

We work from the UAE and Ireland, and our providers process data in the EU, the US and other countries. When personal data leaves the EU/EEA or the UAE for a country whose data protection rules haven’t been recognized as adequate, we rely on safeguards the law accepts, such as the European Commission’s Standard Contractual Clauses, which our Data Protection Addendum already uses for platform data.

• Form submissions: as long as we need them to answer and follow up with you, then for as long as we have a legitimate business reason, such as keeping a record of our conversation. Ask us and we’ll delete yours sooner.
• Newsletter sign-ups: until you unsubscribe or ask us to delete your email.
• Platform accounts and customer data: for as long as the agreement runs. When it ends, the customer chooses whether we delete or return its data, unless the law requires us to keep it.
• Billing records: as long as tax and accounting laws require.
• Server logs: for a limited period set by our hosting provider.
• Your cookie choice: in your browser until you clear its storage.
• Analytics and marketing cookies: for the durations in the table below, and only if you allowed them.

The site and the platform are served only over HTTPS. Form submissions sit in a database protected by row-level security that only our server can read, and only the Grower team members who handle enquiries can see them. We store a hash of your IP address, not the address. Everyone at Grower with access to personal data is bound by confidentiality. If a breach affects your data, we’ll tell you and the relevant authority as the law requires.

Depending on where you are, the GDPR (in the EU/EEA, including Ireland) and the UAE Personal Data Protection Law give you the right to:

• Access the personal data we hold about you and get a copy.
• Correct data that is wrong or incomplete.
• Delete your data, unless the law requires us to keep it.
• Take it with you in a portable, machine-readable format.
• Object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw your consent wherever we rely on it. This doesn’t affect what we did before you withdrew it.
• Complain to a supervisory authority: Ireland’s Data Protection Commission, the authority where you live in the EU, or the UAE Data Office.

To use any of these rights, email info@thegrower.ai from the address your data is linked to, or tell us how we can confirm it’s you. We reply within one month. For data a Grower customer added to the platform, we pass your request to that customer and help them respond.

thegrower.ai always uses two small entries in your browser’s storage, and Cloudflare, which protects the site, can set security cookies. Railway, our host, sets none. Analytics and marketing tools run only if you allow them, in the banner on your first visit or in Manage your cookie preferences, and set the cookies listed below.

AdRoll’s advertising partners also set their own cookies on their own domains when marketing cookies are on. We can’t read or delete those; see AdRoll’s privacy notice to opt out of them.

If you switch a category off, we delete its cookies on thegrower.ai and its tools stop on your next page.

The Grower platform at the-grower.com uses its own cookies and browser storage to sign you in and keep your session secure. The choices on this page apply to thegrower.ai.

Choose which cookies this site may use. Strictly necessary cookies are always on. Your choice is saved in this browser as grower-cookie-prefs. You can come back here at any time from the Cookie settings link at the bottom of every page.

Grower is built for businesses and isn’t meant for anyone under 18. We don’t knowingly collect personal data from children. If you think a child has sent us their data, email info@thegrower.ai and we’ll delete it.

When we change this policy, we post the new version on this page and update the “Last updated” date at the top. This version was last updated on 13 October 2026.

Email info@thegrower.ai with any question or request about your personal data, or use our contact page. You can also write to us at either office:

• Dubai: GrowerAI Platform FZ-LLC, Dubai Media City, Building 5, Dubai, United Arab Emirates.
• Dublin: 71 Lower Baggot Street, Dublin D02 P593, Ireland.