Legal
Privacy Policy
Last updated: 13 October 2026
GrowingAI ("GrowingAI", "we", "us" or "our") is a generative engine optimization (GEO) agency founded by Nitesh Dan Charan and based in Rajasthan, India. We serve clients in the UAE, the USA, the United Kingdom and other markets through thegrowingai.com. This policy explains what personal information we collect on thegrowingai.com, in our free tools, in our chat assistant and over WhatsApp or email, why we collect it and what choices you have.
Who is responsible for your information
For information collected through this website, GrowingAI is the controller (or the business, under US state laws). When we work on a client website or WhatsApp account, we usually act as a processor or service provider for that client, and the client is responsible for its own customers. Our client agreements cover this.
Privacy contact: hello@thegrowingai.com. WhatsApp or phone: +91 63777 67206. Address: Laxmangarh, Sikar and Kishangarh, Rajasthan, India.
Information we collect
- Details you give us: name, business name, email, phone or WhatsApp number, website address, market, budget range and the message you write in our forms, our chat assistant, email or WhatsApp.
- Tool inputs: the website address, keywords or CSV data you enter into a free tool so it can produce a result.
- Technical data: IP address, browser, device type, pages viewed, referring page and approximate location, used for security, rate limits and to improve the site.
- Chat records: the messages exchanged with our chat assistant and a random session identifier stored in your browser.
- Business records: proposals, invoices and project communication if you become a client.
We do not knowingly collect information from children under 16. We do not ask for passwords, card numbers or government identity numbers in forms or chat, and ask you not to send them.
Why we use it, and our legal basis
- To reply to your enquiry and send the quote or report you asked for. Basis: steps at your request before a contract, or legitimate interests.
- To deliver services under a contract and keep business records. Basis: contract and legal obligation.
- To operate, secure and improve the website, tools and chat assistant, and to prevent abuse. Basis: legitimate interests.
- When you ask for a report in a free tool or the contact form, we save your email, website and what you entered in the tool, send you the report, and send up to three follow up emails over about two weeks. Every email has an unsubscribe link and we stop at once when you use it. Basis: your consent.
- To send marketing email or WhatsApp messages. Basis: your consent. You can withdraw it at any time.
- To follow tax, accounting and legal requirements. Basis: legal obligation.
We do not sell your personal information and we do not share it for cross context behavioural advertising.
Who we share it with
We share information only with providers that help us run the business, and only for that purpose:
- Hosting, security and backup providers for this website.
- Email and messaging services, including the WhatsApp Business Platform operated by Meta when you message us there.
- AI model providers that process chat text to generate replies, as described in our AI Use Policy.
- Analytics or search tools, if enabled, as described in our Cookie Policy.
- Accountants, lawyers and payment providers where needed.
- Authorities, where the law requires it, or a buyer if the business is sold, with notice to you where required.
If a CRM or webhook is connected to our lead form, your enquiry is also sent to that system, which is run by us or our provider.
International transfers
We are based in India and our providers may process data in India, the UAE, the USA, the UK, the EU or elsewhere. Where the law requires safeguards for a transfer out of the UAE, the UK or the EU, we rely on the mechanisms it allows, such as adequacy decisions or standard contractual clauses, and we ask providers to protect data to the same standard.
How long we keep it
- Enquiries and chat leads that do not become clients: up to 24 months after the last contact, then deleted or anonymised.
- Client records, contracts and invoices: for the period tax and company law require, usually 6 to 8 years.
- Marketing consent records: while the consent is active, plus the time needed to prove it.
- Server and security logs: up to 90 days unless needed to investigate an incident.
Your choices and rights
Depending on where you live you may have the right to access, correct, delete, restrict or port your information, to object to certain uses, to withdraw consent and to complain to a regulator. Email hello@thegrowingai.com with your request. We may need to confirm your identity and we reply within one month, or sooner where the law sets a shorter time. Region specific details are on our Your Data Rights by Region page.
Security
We use access controls, encrypted connections, rate limits and least privilege access. Chat replies never expose API keys to the browser. No system is perfectly secure. If a breach affects you, we will notify you and the relevant authority as the law requires.
Links to other sites
Our pages may link to other websites, such as client sites and social platforms. Their privacy practices are their own.
Changes
We update this policy when our practices change. The date at the top shows the latest version. For material changes we will add a notice on the site.