This Privacy Policy explains how SEINSIGHTS SARL, a French limited liability company with a share capital of EUR 20,000, registered with the Mulhouse Trade and Companies Register under number 814 695 326, whose registered office is at 14 chemin du Planschewasen, 68470 Fellering, France, VAT number FR76814695326 ("SEINSIGHTS", "we", "us" or "our") collects and uses personal data when you visit growthtools.app, use the GrowthTools dashboard, install the GrowthTools script or contact us. It also explains the role we play when GrowthTools widgets run on our customers' websites.
1. Data controller and contact
SEINSIGHTS SARL is the data controller for personal data processed through the GrowthTools website, dashboard and commercial relationship. Our registered office is 14 chemin du Planschewasen, 68470 Fellering, France. For any privacy question or request, contact legal@growthtools.app.
2. Scope of this policy
This policy covers growthtools.app, dashboard.growthtools.app and the related support channels. It does not cover third-party websites, including customer websites where GrowthTools widgets are installed. Those sites have their own privacy notices, and their owners are responsible for them.
3. Personal data we collect
Account and business data
- Name, email address, password (stored in hashed form), company name, role, country, language and communication preferences.
- Account settings, plan, sites and domains, widget configuration, audiences, integrations and API keys.
Billing data
- Plan, billing period, invoices, tax identifiers and payment status.
- Payment method details are collected and processed by Stripe. We receive a token and limited billing information, not your full card number.
Usage and technical data
- IP address, user agent, browser and device type, operating system, language, approximate location derived from the IP address, pages visited, actions taken, timestamps, errors and security events.
- Records of your interactions with the dashboard, widgets, emails and support conversations.
Communications
- Messages you send to support, feedback, survey responses and the contact details you include in them.
Data collected through widgets on customer sites
When GrowthTools widgets run on a customer site, the customer decides what to collect and why. We process that data on the customer's instructions. It may include IP address, user agent, page URL, referrer, approximate location, widget impressions and clicks, conversion events and, where a lead form is used, the information a visitor submits. See section 4 below.
4. Our role when widgets run on customer sites
For personal data collected through widgets on a customer's site, the customer is the data controller and SEINSIGHTS acts as a processor. We process the data only to provide the Service, follow the customer's documented instructions and meet our legal obligations. We do not use visitor data for our own marketing or sell it.
Customers must give visitors an appropriate privacy notice, obtain any consent required for notifications, tracking or emails, and honour opt-outs. Our data processing agreement is available on request at legal@growthtools.app. If you are a visitor and want to exercise your rights, contact the operator of the site you were visiting first. We will assist that customer as required by law.
5. Why we use personal data and our legal bases
| Purpose | Legal basis |
|---|---|
| Create and administer your account, provide the Service, operate widgets and deliver support. | Performance of a contract with you. |
| Process payments, issue invoices and keep accounting records. | Performance of a contract and compliance with legal obligations. |
| Protect the Service, detect fraud and abuse, secure accounts and investigate incidents. | Our legitimate interests in keeping the Service secure and reliable. |
| Understand how the Service is used, fix problems and improve features. | Our legitimate interests in improving our product, or consent where required. |
| Send service messages, security alerts and administrative notices. | Performance of a contract and our legitimate interests. |
| Send product news and commercial offers, including by email. | Consent, or our legitimate interests for existing customers, with an opt-out in every message. |
| Meet legal, tax and regulatory obligations and defend our rights. | Compliance with legal obligations and our legitimate interests. |
Where we rely on legitimate interests, we balance them against your rights and expectations. You may object to that processing at any time, and we will stop unless we have compelling grounds or a legal requirement to continue.
6. Cookies and local storage
We and our providers use cookies, local storage and similar technologies to operate the Service and, where permitted, to measure its use. These technologies fall into the following categories:
- Strictly necessary: authentication, security, load balancing and remembering your choices. The Service cannot work without them.
- Preferences: language, interface settings and dismissed messages.
- Analytics: aggregated statistics that help us understand which pages and features are used.
- Third-party: some providers, such as Stripe on checkout pages or Google Fonts on the marketing site, may receive technical data such as your IP address when their content loads.
Where the law requires consent, we ask for it before setting non-essential cookies, and you can refuse or withdraw it at any time through the consent tool shown on the site or through your browser settings. We do not sell personal data.
7. Who we share data with
We share personal data with service providers that process it on our behalf, under contracts that require confidentiality and security. The main providers are:
| Provider | Purpose | Location |
|---|---|---|
| PlanetHoster | Hosting and infrastructure for the Service | France |
| Stripe | Payments, subscriptions and fraud prevention | Ireland and United States |
| UniOne | Transactional and account emails | European Union |
| Google Fonts | Font delivery on the marketing site | United States and European Union |
We may also disclose data to professional advisers, auditors, insurers or authorities where required by law, to protect our rights or during a corporate transaction. Integrations you enable receive data only when you configure them and on your instructions.
8. International transfers
The Service is hosted in France. Some providers are established in or process data outside the European Economic Area, in particular in the United States. Where that happens, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. You can request more information about these safeguards at legal@growthtools.app.
9. How long we keep data
- Account data: for the duration of your account, then up to 30 days after closure, unless a longer period is required for a legal claim or a legal obligation.
- Billing and accounting records: 10 years from the end of the financial year, as required by French accounting law.
- Server and security logs: generally up to 12 months.
- Widget events and statistics: according to the plan and settings chosen by the customer, then deleted or anonymised.
- Support conversations: up to 3 years after the last contact.
- Marketing data: up to 3 years after the last interaction, or until you opt out.
When data is no longer needed, we delete it or anonymise it.
10. Security
We use technical and organisational measures designed to protect personal data, including encryption in transit, hashed passwords, access controls, least-privilege rules, monitoring and backups. If a breach affects your data, we will notify you and the competent authority as required by law.
11. Your rights
If you are in the European Economic Area, the United Kingdom or another jurisdiction with similar rules, you have the right to:
- access your personal data and obtain a copy;
- correct inaccurate or incomplete data;
- delete data in the circumstances provided by law;
- restrict or object to processing;
- receive data you provided in a structured, commonly used and machine-readable format;
- withdraw consent at any time, without affecting processing carried out before the withdrawal;
- give us instructions about what happens to your data after your death, in accordance with French law.
To exercise a right, email legal@growthtools.app. We answer within one month. If you are not satisfied, you can complain to the French data protection authority, CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France), or to your local supervisory authority.
12. Children
The Service is intended for businesses and professionals. It is not directed to children under 16, and we do not knowingly collect their personal data.
13. Changes to this policy
We may update this Privacy Policy to reflect changes in the Service, our providers or the law. We will publish the new version on this page and update the date above.
14. Contact
For privacy questions, requests or complaints, contact legal@growthtools.app or write to SEINSIGHTS SARL, 14 chemin du Planschewasen, 68470 Fellering, France.