Last updated 27 August 2026
Privacy policy
Growflow is available worldwide, so this policy is written to meet UK GDPR and EU GDPR standards - the highest bar we serve customers under - alongside general good practice for every other region.
Who we are
Growflow ("we", "us") operates growflow.app. For anything about this policy or your data, contact info@zeroflowers.com. We are the data controller for the personal data described below.
What we store
Your account details (email, workspace name), the brand profile you build (colours, fonts, voice rules, positioning), content you generate or upload, prospect and outreach data, and usage records for the features you run. Passwords are stored only as salted hashes.
How AI processing works
The material you provide - your website's public pages, descriptions you type, images you upload - is sent to Anthropic's Claude API to build your brand profile and generate content. It is used to serve your workspace, not to train models.
Why we're allowed to process it
We process account and content data to perform our contract with you (running the service you signed up for), and usage data under our legitimate interest in keeping Growflow reliable and secure. Where we ever ask for anything beyond that, we'll ask for your consent first.
Who else sees it
We share data only with the processors that run the service: Stripe (payments), our hosting and database provider, Google (only if you choose Google sign-in), and Anthropic (AI generation). Each is bound by contract to use it solely to provide their service to us, not for their own purposes.
International transfers
Some of these processors operate outside the UK/EEA, including in the US. Where that happens, we rely on the safeguards built into their own compliance programmes (such as standard contractual clauses) to keep your data protected to UK/EU standard wherever it is processed.
What we don't do
We don't sell your data, and we don't post anything anywhere on your behalf without an explicit approval step in the product.
Cookies
One session cookie keeps you signed in. There is no third-party advertising tracking on this site.
Payments
Card details are handled by Stripe, our payment processor; they never touch our servers.
How long we keep it
Deleting your workspace removes its brand profiles, content and prospect data within 30 days, except where we're required to keep billing records for longer by law. Contact the workspace owner or support to request deletion.
Your rights
Under UK/EU GDPR you can ask to access, correct, delete, restrict or export your personal data, and object to how we use it - write to info@zeroflowers.com. If you're not satisfied with our response, you can complain to your local data protection authority (the ICO, if you're in the UK).
Age
Growflow is for people aged 16 and over. We don't knowingly collect data from anyone younger.
Changes to this policy
If we make material changes, we'll update the date at the top of this page and, for significant changes, tell you directly.