Last updated September 2026
Privacy Policy
This explains what GrowwID stores, why we store it, who else sees it, and how to have it removed. It covers both people who make a card and people who simply open one.
Who this covers
Two different groups of people appear in this policy. There are account holders, who sign up and create a card. And there are visitors, who open somebody else’s card without ever signing up. We hold information about both, and the sections below say which is which.
What we collect from account holders
You decide what goes on your card. Anything you put there is intended to be seen by the people you share it with, and a public card can be opened by anyone who has the link.
- Your email address, which is how you sign in, and your password — which we store only as an irreversible hash, never in readable form. We email you links to confirm your address and to reset your password.
- Everything you put on your card: your name, job title, company, department, location, bio, tagline, contact details, social links, profile photo and nickname.
- The URL you choose for your card.
- Any brochure you upload, which must be a PDF.
What we collect from people who open a card
When somebody opens a card, we record the visit so the card owner can see their analytics. This happens without the visitor signing up.
- IP address.
- Browser, operating system and device type.
- Approximate location derived from the IP address: country, region and city.
- Whether the visit came from a QR scan or a web link.
- The time of the visit.
What we collect when somebody saves their details
A card has a button that lets a visitor leave their own contact details for the card owner. If somebody chooses to use it, we store the first name, last name, email address, phone number and message they entered, and we make it available to that card owner, who can export it.
This is always the visitor’s choice. Nobody’s details are captured just because they looked at a card.
What the card owner can see
Card owners see totals and summaries: how many views and unique views their card had, how many were QR scans, which countries visitors came from, and the contact details people chose to leave. They do not get a list of the individual people who viewed the card.
Who else handles this information
We do not sell personal information, and we do not share it for advertising.
- MongoDB Atlas, where the database is hosted.
- ImageKit, which stores profile photos and uploaded brochures.
- An SMS provider, which delivers your one-time sign-in code.
- A messaging provider, which delivers messages you send through the chat widget.
How long we keep it
Your account and card stay until you ask us to delete them. Analytics records and captured contacts stay until the card they belong to is deleted.
Your choices
One thing to know: the URL of your card is fixed when you create it and cannot be changed afterwards. Choose it with that in mind, because any QR code you print points at it permanently.
- You can edit most of your card at any time from your dashboard.
- You can make your card private or take it offline, which stops it being reachable.
- You can ask us to delete your account and everything attached to it.
- If you are not an account holder and believe we hold information about you, you can ask us to remove it.
Contact us
For anything in this policy, including a deletion request, message us on WhatsApp at +91 86301 23814 or use the chat widget on the site.