Privacy Policy

Who we are

GrowWithU builds automations, AI agents, and paid ad campaigns for small and midsize businesses. The website and service are operated by Ori Danan, Rehovot, Israel, who is also the data controller for the information collected on the website, meaning the person who decides why and how it is used. We provide online services from Israel to clients worldwide. For any question about this policy or the information we hold about you, reach out on WhatsApp or by phone at +972 58-793-9274, by email at contact@growwithu.net, or through our Contact page.

What data we collect

• Contact form: your full name, phone number (with its country code), email address, the area of interest you picked (services for your business / learning), the consents you ticked, and the page you sent the form from. If you agreed to receive updates, we also keep the details of the campaign that brought you to the site (UTM).
• Lead form in the chat: your name, phone number, and a short summary of what you asked in the chat.
• Spam protection: to block automated submissions by bots, we count how many requests were sent from each IP address and each phone number in the last 24 hours. The count is stored only as a one-way hashed value, from which the IP address or phone number can't be recovered, and it is deleted automatically after 24 hours.
• Country detection: to suggest the right phone country code in the form, our hosting provider works out from the IP address which country you are browsing from, and passes us only the country code. To limit the rate of requests to the chat and the voice assistant (protection against overload), the IP address is held in the server's temporary memory only.
• Access logs: our hosting provider (Vercel) automatically records technical access data, such as the IP address, browser type and the page opened, in logs that are kept for a short time for security and operations. We don't use them to identify visitors.
• Direct communication: if you contact us by phone, WhatsApp, or email, we keep the details you give us so we can respond to and handle your inquiry. A WhatsApp message also goes through WhatsApp, owned by Meta, under its own terms and privacy policy.
• Chat with the website assistant: the messages you type to the assistant are processed by OpenAI to write a reply, through our automation system (n8n). Answers are based on the website's content, which is stored with Supabase. The conversation is not kept in n8n's system logs, unless something went wrong, and then for up to 7 days. To improve the assistant, we keep the questions typed in the chat in a Google spreadsheet, without a conversation ID and without contact details: phone numbers, email addresses and long numbers are removed from the text automatically. The questions are deleted after 90 days. Please don't type personal details in the chat beyond what is needed. The conversation is also kept in your browser, so it doesn't disappear when you move between pages, and is removed from there when you close the tab. If you share your name and phone number in the chat, we keep them the same way as a contact form inquiry.
• Voice call with the website assistant: if you choose to talk to the voice assistant, the call (its audio and transcript) is recorded and kept with ElevenLabs for up to 90 days, so we can answer you and improve our service. The call starts only after you tap "Start call". If you share your name, phone number, or details about your business during the call, we keep them the same way as a contact form inquiry.
• Google Analytics: we use Google Analytics to count visits and understand what works on the website: which pages were viewed and for how long, where you came from (for example a Google search or a campaign), device and browser type, approximate country and city, and actions on the site such as a WhatsApp click, starting a voice call or submitting an inquiry, without your name, phone number or the content of your inquiry. Google Analytics does not store your IP address. It loads only after you accept analytics cookies, and if you withdraw that consent it stops collecting.
• Microsoft Clarity: we use Microsoft Clarity to understand how the website is used and to improve it. Clarity records mouse movements, clicks and scrolling, and creates heatmaps and session recordings. Anything you type into form fields is masked and not stored. Clarity loads only after you accept analytics cookies in the cookie banner, and if you withdraw that consent, it deletes its cookies and stops collecting data.
• Google Tag Manager: the tool that loads Google Analytics and other measurement tools. It also loads only after you accept analytics or marketing cookies. Until you give consent, no analytics or marketing tool loads or collects any information.

Why we use your data

• To get back to you and handle your inquiry.
• To send you an email confirming we received your inquiry.
• To send you updates, tips and offers, only if you agreed to that.
• To understand how the website is used and improve it, only if you accepted analytics cookies.
• To improve the chat assistant, based on the questions people ask it.
• To protect the website against spam, overload and abuse.
• To meet our legal obligations.

Do you have to give us your data?

There is no legal obligation to give us any data. It is up to you and your consent. If you don't give us your name and a phone number or email, we won't be able to get back to you about your inquiry, but you can still browse the website, use the chat without sharing any details, or message us on WhatsApp.

Emails and updates

• When you submit an inquiry on the site, you agree that we may get back to you about it by phone, WhatsApp or email. This consent covers your inquiry only. It is not consent to marketing.
• After you send the form with an email address, we send you one email confirming we received your inquiry. This is a service message, not a marketing one.
• The form also has a separate checkbox, unticked by default, where you can choose to receive updates, tips and offers from GrowWithU by email and WhatsApp. Only people who tick it will get marketing messages from us.
• We keep a record of your consent: what you agreed to, when, from which form and in what wording. When you leave your details in the chat or during a voice call, we also record that you asked us to get back to you, when and where.
• You can withdraw marketing consent at any time without giving a reason: with the unsubscribe link in any marketing email, by replying "STOP" to any marketing WhatsApp message, or by contacting us at +972 58-793-9274 or contact@growwithu.net. After you withdraw we will stop sending marketing messages, but we will still follow up on the inquiry you already submitted, if you wish.

How we use cookies

• Essential cookies, always on and can't be turned off: cc_cookie, which remembers your cookie choice, and NEXT_LOCALE, which remembers whether you chose the Hebrew or English site. In addition, your chat with the assistant is kept in the browser's storage until you close the tab, and if you click "Pause animations", that choice is saved in your browser (gwu-motion) so animations stay paused on the next pages.
• Analytics cookies, only after you accept them: Google Analytics _ga and _ga_3M3CZTVSH8, kept in your browser for up to 13 months, Microsoft Clarity cookies, such as _clck and _clsk, and Microsoft and Bing cookies that Clarity uses.
• Marketing cookies, only after you accept them: no advertising tools are active on the website right now. If we add any, we will update this page.
• Analytics and marketing cookies load only after you click "Accept all" or allow them through "Customize" in the cookie banner. You can change your preferences at any time using the "Cookie settings" link at the bottom of every page.

How long we keep data

• Inquiry and lead details, including consents: 24 months from your most recent inquiry, after which they are deleted. If you ask, we will delete them sooner.
• Chat conversations: not kept in n8n's logs, unless something went wrong, and then for up to 7 days.
• Chat questions, without contact details: 90 days.
• Voice call recordings and transcripts: up to 90 days with ElevenLabs.
• Google Analytics data: 14 months, after which Google deletes it.
• Spam protection counts: 24 hours.
• Hosting provider access logs: a short time, under Vercel's policy.

Who we share data with and where it is stored

• Our lead management system (CRM), built on Supabase and stored in Ireland, in the European Union: lead details, consents and campaign details.
• Resend, in Ireland: sends you an email confirming we received your inquiry.
• Upstash, in Ireland: stores the spam protection counts, only as hashed values and for 24 hours.
• Google (Google Sheets): a copy of lead details in our spreadsheet, and a separate spreadsheet of chat questions without contact details.
• Telegram: a notification to us about a new lead, without a name, phone number or the content of the inquiry. Only if something breaks and the lead system is unavailable are the lead's details sent to us on Telegram, so the inquiry isn't lost.
• n8n: the automation system that passes messages and inquiries between our systems and keeps activity logs.
• OpenAI: processes chat messages to write replies.
• Supabase: also stores the knowledge base of website content that the assistants answer from. It contains no personal data.
• ElevenLabs: the voice call provider, which processes the call and stores its recording and transcript.
• Microsoft (Clarity) and Google (Google Analytics and Google Tag Manager): only after you accept cookies. We have accepted Google's data processing terms, and data sharing with Google for other purposes is turned off.
• Meta (WhatsApp): if you message us on WhatsApp.
• Vercel: the website's hosting provider.
• Lead details are stored mainly in Europe (Ireland). Other providers, such as Google, OpenAI, ElevenLabs, Microsoft, Meta, Vercel, n8n and Telegram, may store or process data outside Israel and outside Europe, including in the United States. When data is transferred from Europe to another country, we rely on the safeguards the providers offer, such as the EU Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework.
• We don't sell or rent your information to third parties for anyone else's advertising.

Data of our business clients (CRM)

When we set up a WhatsApp bot and a CRM for a business, we process that business's lead details (such as name, phone number and the content of the inquiry) on its behalf and only according to its instructions. The business is responsible for its customers' data, and we act as a data processor for it. We do not use this data for any other purpose, we do not sell it, and we delete it or hand it over to the business when the engagement ends.

Data security

Data on the website travels over an encrypted connection (HTTPS). Access to the systems that hold lead details is limited to us and protected by passwords and access keys, and the systems talk to each other over secure connections. No system is completely immune, but we work to reduce risks, and if a security incident affects your data, we will act as the law requires.

Your rights

• Ask for a copy of the data we hold about you (right of access).
• Ask us to correct data that is wrong or out of date.
• Ask us to delete your data from our systems, including chat conversations and voice call recordings and transcripts.
• Withdraw any consent you gave at any time, for example for marketing or cookies.
• To use these rights, reach out on WhatsApp or by phone at +972 58-793-9274, or by email at contact@growwithu.net. We will reply within 30 days.
• If you think we didn't handle your request properly, you can complain to the Israeli Privacy Protection Authority.

For visitors from the European Union (GDPR)

• Legal basis for using your data: consent, for analytics and marketing cookies, marketing messages and the voice call recording; steps before entering into a contract, to get back to you about the inquiry you sent; and legitimate interest, to protect the website against spam, keep it secure and improve the service.
• Your rights: access, correction, deletion, restriction of use, objection to use, data portability (getting your data in a common format), and withdrawing consent at any time, without affecting any use made before you withdrew.
• Transfers outside Europe: see the section "Who we share data with and where it is stored".
• Complaints: you can lodge a complaint with the data protection authority in the country where you live or work.
• Response time: we will reply to your request within one month.
• Automated decisions: we don't make automated decisions about you that have legal or similarly significant effects. The assistant in the chat and the voice call only answers questions.

Changes to this policy

We will update this policy when something changes. The updated version will appear on this page, and the date of the last update is shown at the top.