Legal
Privacy Policy
How GrowTricity handles your information, in plain language. Last updated 16 October 2026.
Who we are
GrowTricity teaches practical AI in person in Chandigarh. The course is run by Grupo Pounj Software Exports, a GST- and Udyam-registered firm at SCO 34, Sector 33D, Chandigarh 160020, India. If you have any question about your data, email [email protected] or message us on WhatsApp at +91 89689 91639.
What we collect, and why
We try to collect as little as possible. In practice:
- What you tell us. When you book a free class, message us on WhatsApp, email us or visit, you may share your name, age, learner type, class choice, phone number, an optional email and whatever you write. We use it to confirm your class, contact you about it and run the course.
- Call-back requests. If you leave your name and number for a call back, we keep them with the page you were on and your device's IP address for up to about 13 months, only to call you back and to stop abuse of the form. The franchise enquiry form also asks for your PIN code, your city and a short note about your plan, kept for the same purpose and for the same time.
- Optional WhatsApp lessons and videos. If you separately tick the optional WhatsApp marketing box on the booking form, we record the time, source, copy version and exact wording you accepted. We may then send occasional GrowTricity AI lessons and videos using an approved WhatsApp marketing template. The box starts unchecked, is not required to book, and you can withdraw permission at any time by replying STOP.
- Booking and follow-up. A pending booking carries a one-time code to WhatsApp. When you send it, we record the WhatsApp number that sent it, the chosen class, the confirmation time, the booking status, the reminder-delivery status, and whether you attended, did not attend, or later enrolled. Pending attempts expire after ten minutes and do not reserve a seat.
- The AI assistant ("Pi"). If you chat with our assistant, your messages are sent to an AI service to write a reply. We keep chat logs for up to about 30 days, with obvious personal details removed, only to improve the assistant. You do not have to give your name to use it.
- Site and campaign analytics. We use Google Analytics to understand visits and booking steps. We keep the landing page, the referring website and campaign labels such as UTM source, medium and campaign with a booking, so we can measure which promotion led to a confirmed, attended or paid student. If you arrive from a Google ad, Google adds a click id (gclid, gbraid or wbraid) to the link; we keep it with your booking for the same reason, so that Google can be told which ad led to a booking. If Meta advertising is active, the Meta Pixel and Conversions API may measure the same steps with deduplicated event IDs. This uses cookies or similar identifiers; it does not change whether you can book.
- Technical logs. Our host keeps standard server logs, such as your IP address and browser, to keep the site secure and reliable.
- Device details on a booking. When you submit a booking we record the IP address and browser of the device you used. This is used only to confirm the booking came from a real device and, when Meta advertising is active, to measure whether an ad led to a real student. We clear both from the booking record after seven days.
Google accounts connected by business clients
This section applies only to businesses that hire a Growtricity AI assistant (our "AI employee" service) and choose to connect their own Google account to it. It does not apply to students, free-class bookings or visitors to this site. Growtricity's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Peter full Google access pilot (18 October 2026). If you choose the separate full-access connection, Peter requests your verified identity plus Gmail mail access (mail.google.com), Contacts (contacts), Drive (drive), Sheets (spreadsheets), Form structure editing (forms.body), Form response reading (forms.responses.readonly) and Calendar event editing (calendar.events). This permits reading, creating, updating and deleting supported items, including permanently deleting individual email messages or Drive files. The assistant shows the exact record and proposed change before acting. Sending email or guest notifications and deleting items require your later typed approval; ordinary changes require your approval after the preview. Google does not support editing a received email body or deleting Form responses through these API methods. Your existing connections remain available. Your assistant retrieves business content directly and retains the full-access authorization in protected storage in your VM. GrowTricity handles sign-in/renewal and temporarily holds authorization encrypted for your assistant; acknowledgement clears that temporary encrypted handoff, retaining connection status and token hashes. Requests, previews and results may enter your assistant conversation and its existing private memory in your own Cloudflare account. The local operation journal stores hashes, provider IDs and state, not message or document bodies. Removing the whole GrowTricity app from your Google account can affect all its grants; ask us to disable this additional connection separately if you want to keep the others.
Peter Calendar pilot (18 October 2026). This separate connection requests only your verified Google identity and read-only Calendar events permission (calendar.events.readonly). Peter reads your primary Calendar directly from Google. It cannot create, edit or delete events or send invitations. Your existing assistant connections keep their current permissions. The private link is bound to your verified account. GrowTricity processes the sign-in and token renewal, with temporary authorization encrypted for your assistant; after the assistant acknowledges receipt, only connection status and token hashes remain in this handoff service. Your assistant keeps its authorization in protected storage in your own VM. Calendar answers you request may be included in your assistant chat and its existing private memory. Ask GrowTricity to disable this additional connection; this does not revoke your other Google grants. You can also manage access in your Google account, where removing the whole GrowTricity app may affect all its services.
Earlier business-assistant connection
The paragraphs below describe the earlier connection profile only. The separate Peter pilot profiles above use their stated permissions and storage locations.
How you connect. We give you a private one-time link. You tap Connect Google, sign in to Google and tap Allow. Google then shows you exactly which permissions you are giving. You can stop at any point and nothing is saved.
What the assistant can use, and what for. Each permission is used only to do the tasks you give your assistant:
- Drive files it creates (drive.file). To save the documents, sheets, forms and other files it makes for you, and to write the Google Docs you ask for. It cannot see or open your other Drive files.
- Sheets (spreadsheets). To read and update the spreadsheets your assistant works in, such as your lead list or a tracker you already keep.
- Forms (forms.body). To edit the questions of a form you already have, when you ask. Forms the assistant creates are covered by the Drive permission above. It does not read the answers people give (no responses permission).
- Calendar events (calendar.events). To create, read and update events in your calendar and to add a Google Meet link to a meeting you ask it to set up. Our code does not delete events.
- Send email (gmail.send). To send the emails you ask it to send, from your own address. It cannot read your inbox or your other mail.
- Business Profile (business.manage). To read and update your Google Business Profile when you ask: for example your hours, a post, or a reply to a review.
How it is stored. When you tap Allow, Google gives us a long-lived access key for your account (a refresh token), not your password. We store that key encrypted (AES-GCM) in our Cloudflare database, locked to your one-time link. During your setup it is moved into your own Cloudflare account and we delete our copy; until then it stays only in that encrypted store. The key is never shown on a screen and never written to a log. Your Google data itself (the text of a document, the rows of a sheet, the contents of an email) is read or written while your assistant works on a task and is not copied to Growtricity's storage. The assistant's reasoning runs on a server Growtricity operates. The data it needs for a task passes through that server in memory while it works and is deleted when the task is done; it is not stored there. To write a reply or complete a task, the task text may be sent to the AI service you have signed in with, such as your own ChatGPT account, under that service's terms, with model training turned off in that account's data settings; we check this with you during setup.
What we never do with it. We do not sell your Google data, use it for advertising, share it with data brokers, or use it to build or train our own AI models. We do not transfer it to anyone else, except to the services needed to run your assistant as described here, for security, or where the law requires. No one at Growtricity reads your Google data, except with your clear permission when you ask for support, to investigate abuse or a security problem, or where the law requires.
How to take access back and delete it. You can remove Growtricity's access at any time from your Google account's third-party apps and services page. Our key then stops working at once. You can also email [email protected] or WhatsApp +91 89689 91639 and we will revoke the key at Google and delete our encrypted copy within seven days, and confirm to you. When your service with us ends, we do the same without being asked. Anything your assistant created stays in your own Google account; we do not delete your files.
Who we share it with
We do not sell your data. We use a few services to run the site:
- Google. Analytics, Fonts, the embedded map, and the AI models that write the assistant's replies. For business clients who connect a Google account, Google's own APIs carry the work your assistant does in your Drive, Sheets, Forms, Calendar, Gmail and Business Profile, as described above. If you choose “Find address with Google” on the enrolment form, the area or street you search is sent to Google Maps to suggest addresses. You can enter your address manually instead. Your name, phone number and payment reference are not sent with an address search.
- Cloudflare. Hosting, security and the booking storage for the website.
- WhatsApp and Meta, and our WhatsApp gateway. When you choose to message us on WhatsApp, WhatsApp carries the conversation, and our gateway checks the booking code, sends the confirmation and class reminders, and may measure an advertising conversion when Meta advertising is active. Where a conversion is measured, we send Meta a protected (hashed) form of your name, email and phone number, together with the IP address and browser recorded with your booking.
- Resend. Sends the instructor a confirmed-booking email and, if you give an email address, your optional email confirmation.
Each has its own privacy terms. We share only what these services need to work, or what the law requires.
Cookies
The site uses cookies for analytics and, if ads are running, to measure them. You can block or delete cookies in your browser settings. The booking still works, although campaign attribution may be incomplete.
How long we keep it
Pending booking attempts expire after ten minutes and are removed from time to time. We keep confirmed booking, attendance, enrolment and delivery records only as long as reasonably needed for class administration, safety, accounting, legal obligations, campaign measurement and handling a request or dispute. The IP address and browser recorded with a booking are cleared after seven days. Assistant chat logs are kept about 30 days. A business client's encrypted Google key is kept until it is moved into the client's own Cloudflare account during setup, or until the client removes access or asks us to delete it (within seven days), or the service ends. Analytics data follows each analytics provider's configured retention.
Your choices
You can ask what personal information we hold about you, ask for a correction, ask for erasure where we are not legally required to keep it, or raise a grievance by emailing [email protected]. If you opted into WhatsApp lessons and videos, reply STOP to any promotional message to withdraw that permission. We handle these requests under India's applicable data-protection law.
Children
This course is for adults aged 24 to 48. We do not knowingly collect information from children.
Changes to this policy
If we change how we handle data, we update this page and the date at the top. This version is dated 16 October 2026.
Questions about your data
Email [email protected] or WhatsApp +91 89689 91639. Grupo Pounj Software Exports, SCO 34, Sector 33D, Chandigarh 160020. The course terms are on the terms page.