Privacy and data protection

This section explains terms used in this policy to help you understand what we mean by personal data, processing, and related concepts.

We collect certain information from you and automatically through your use of our services to provide, secure, and improve GrowthLmaxSense offerings. The sections below describe categories of data, how we use them, and your options.

You may provide personal data when you sign up, request support, engage with sales, or communicate with us. We use this information to deliver services and respond to requests.

• Contact details: name, email, phone number, company name, job title.
• Account credentials and profile preferences.
• Payment and billing information submitted for purchases or subscriptions.
• Support and communications content, including messages, feedback, and attachments.
• Business data supplied for integrations, such as CRM records and customer lists.
• Marketing preferences and consent choices.

When you interact with our websites and services we automatically collect technical and usage data to operate and improve the platform and protect users.

• Device and browser information, operating system, and version.
• IP address, approximate location, and network details.
• Usage data such as pages visited, features used, session duration, and performance metrics.
• Cookies and identifiers generated by analytics and advertising tools.
• Error reports, logs, and diagnostic information to secure and maintain services.
• Aggregated or pseudonymized data used for research and product development.

We work with trusted third parties to provide functionality such as payments, hosting, analytics, and customer support. These providers process data on our behalf under contractual terms that require appropriate protection.

• Payment processors for billing and transaction handling.
• Cloud hosting and infrastructure providers for data storage and delivery.
• Analytics and performance vendors to measure and improve services.

We use personal data for specific operational and business purposes. Each use is limited to what is necessary for that purpose.

• To provide and operate GrowthLmaxSense services and fulfill contractual obligations.
• To process payments and manage billing-related inquiries.
• To deliver customer support and respond to user requests.
• To personalize user experience and recommend relevant features or resources.
• To monitor, analyze, and improve platform performance and product development.
• To detect, prevent, and respond to security incidents and fraud.
• To comply with legal obligations, such as recordkeeping and regulatory requests.
• To send service-related notifications and, where consent is provided, marketing communications.

Where applicable, we rely on lawful bases to process personal data, such as contract performance, consent, legitimate interests, and legal obligations.

• Performance of a contract: processing necessary to provide agreed services.
• Consent: where you have explicitly agreed to specific processing activities.
• Legitimate interests: for security, analytics, fraud prevention, and business operations, balanced against individual rights.
• Legal obligations: compliance with applicable laws and regulatory requirements.

We use cookies and similar technologies to enable core site functions, remember preferences, and collect analytics. You can manage cookie preferences through your browser or our cookie settings.

Types of cookies include essential cookies for service operation, performance cookies for analytics, functional cookies for preferences, and advertising cookies for targeted content.

Essential, Performance & Analytics, Functional, and Advertising. Essential cookies are required for basic functionality; other categories can be managed or declined.

Manage cookies via the cookie banner, our settings page, or your browser controls. Disabling certain cookies may affect functionality or user experience.

Cookie settings

We limit data sharing to necessary situations and require third parties to protect personal data. Outlined below are common categories and reasons for sharing.

• Service providers authorized to perform tasks such as hosting, analytics, and payment processing.
• Business partners when jointly delivering services or integrations with your consent.
• Legal authorities or courts when required by law or to respond to valid legal requests.
• Acquirers or successors in case of business transfers, mergers, or reorganization.
• Vendors providing marketing tools where you have opted in to marketing communications.
• Security and fraud prevention partners to maintain the integrity of our services.

Data may be stored and processed in jurisdictions outside Singapore to enable service delivery. When transfers occur, we apply appropriate safeguards to protect personal data.

Safeguards may include standard contractual clauses, data processing agreements, limiting access, encryption, and relying on providers with adequate protections.

We retain personal data only as long as necessary for the purposes described, subject to legal and contractual requirements. Retention periods vary by data type and business need.

Account and profile data is retained while the account is active and for a reasonable period after account deletion to support legal and operational needs.

Support communications and messages are retained for customer service, dispute resolution, and recordkeeping for a defined retention period.

System logs, diagnostics, and backup copies are retained for operational troubleshooting, security analysis, and compliance for a limited time.

When data is no longer required we securely delete or anonymize it, unless retention is necessary for legal obligations or legitimate business purposes.

We implement technical and organizational measures to protect personal data from unauthorized access, loss, or misuse. Security controls are reviewed regularly and updated to reflect industry practices.

• Encryption of data in transit and where feasible at rest.
• Access controls, role-based permissions, and logging of administrative activity.
• Periodic security assessments, vulnerability management, and incident response planning.

Depending on jurisdiction and applicable law, you may have rights related to your personal data. We provide mechanisms to exercise these rights and respond within applicable timeframes.

• Right to access the personal data we hold about you.
• Right to request correction or update of inaccurate data.
• Right to request deletion of personal data where permitted by law.
• Right to restrict or object to certain processing activities.
• Right to data portability for information provided in a structured, commonly used format.
• Right to withdraw consent where processing is based on consent.
• Right to lodge a complaint with a supervisory authority in applicable jurisdictions.
• Right to opt out of direct marketing communications at any time.

If you are located in the European Economic Area or the UK, certain GDPR rights may apply. We will respond to requests in line with regulatory requirements and local law.

GDPR provisions may apply when personal data is processed in connection with offering goods or services to individuals in the EEA or when monitoring behavior within the EEA.

• Rights of access, rectification, and erasure as specified under GDPR.
• Right to restriction of processing and to object in certain circumstances.
• Right to data portability for data provided by or generated through the user.
• Right to withdraw consent without affecting processing already carried out under consent.

If you believe your rights under GDPR have been violated, you may raise the matter with GrowthLmaxSense via the contact details below or file a complaint with a relevant data protection authority.

To exercise your rights, contact [email protected] with details of your request and relevant evidence of identity. We will follow verification procedures before responding.

[email protected]

We aim to respond to verified requests promptly and in accordance with applicable law. Response times may vary based on request complexity and legal requirements.

We may send marketing communications where you have opted in or where permitted by law. Communications will clearly indicate how to unsubscribe or manage preferences.

You can unsubscribe from marketing messages at any time using the link in emails, by updating your preferences in your account, or by contacting [email protected].

Our services are intended for professional and adult users. We do not knowingly collect personal data from children under applicable minimum ages. If you believe we have collected such data, contact us for removal.

Our services may contain links to external sites. We are not responsible for third-party privacy practices. Review the privacy notices of those sites before providing personal data.

We limit data sharing to necessary situations and require third parties to protect personal data. Outlined below are common categories and reasons for sharing.

Cookie settings

We may update this privacy policy to reflect changes in our services or legal requirements. Material changes will be communicated via our website or direct notice where appropriate.