Growfer.AI
Peakweb

Privacy Policy

Last updated: August 5, 2026

1. Introduction

Welcome to Growfer.

Growfer (“the Service”) is operated by Peakweb Inc.(“Peakweb,” “we,” “our,” or “us”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices available to you.

By using Growfer, you acknowledge the practices described in this Privacy Policy.

2. Information We Collect

Account Information

When you create an account, we collect information necessary to provide the Service, including:

  • Email address
  • Company name (if provided)
  • Authentication information supplied through WorkOS

Audit Information

When you request a Growfer audit, we collect and process information required to generate your report, including:

  • Website URL
  • Competitor websites you choose to submit
  • Audit scores, findings, recommendations, and generated reports

Your audit history is associated with your account so you can access previous reports.

Billing Information

If you purchase Growfer services, payments are processed securely by Stripe.

We do not receive or store your full payment card details. We retain limited billing information such as Stripe customer identifiers, subscription identifiers (where applicable), invoices, and payment history.

Automatically Collected Information

When you use the Service, we automatically collect certain technical information, including:

  • IP address
  • Browser and device information
  • Pages visited
  • Date and time of requests
  • Diagnostic and error information

This information helps us operate, secure, and improve Growfer.

3. How We Use Your Information

We use your information to:

  • Provide and operate Growfer
  • Generate website audit reports
  • Maintain your account
  • Process payments
  • Send transactional emails, including account notifications and audit completion messages
  • Improve the quality, performance, and usability of the Service
  • Detect abuse, fraud, and unauthorized access
  • Comply with legal obligations
  • Enforce our Terms of Service

Where required by law, we process analytics and similar technologies only after receiving your consent.

[PO: confirm the GDPR Art. 6 lawful basis we are relying on for each purpose above, if a formal mapping is required.]

4. AI Processing

Growfer uses artificial intelligence to generate audit findings, scores, and recommendations.

To produce these reports, we may send information related to the website you submit—including the website URL, publicly available website content, and any competitor domains you provide—to trusted AI service providers that help generate the requested audit results.

We do not use your personal account information to train public AI models.

We also do not use customer-submitted websites, audit reports, or account information to train proprietary AI models owned by Peakweb.

5. Cookies and Similar Technologies

Growfer uses cookies and similar technologies to operate the Service and improve your experience.

Necessary Cookies

These cookies are required for the Service to function, including:

  • Authentication
  • Security
  • Session management
  • Cookie preference storage

These cookies cannot be disabled through our cookie settings.

Analytics Cookies

With your consent, we use Google Analytics 4 to better understand how visitors use Growfer, including which features are used and how users interact with the platform.

Session Replay

With your consent, we use FullStory to better understand user interactions and identify usability issues. FullStory is configured to mask sensitive form inputs and personal information wherever practical.

[PO: confirm the status of a signed Data Processing Agreement (DPA) with FullStory and its data-residency configuration, and add that detail here.]

You can update or withdraw your consent at any time using the Cookie Settings link available on the website.

The table below lists the specific cookies the Service sets, sourced from our cookie-consent configuration:

Cookie namePurposeDurationConsent required
c15tStores your cookie-consent choices per category (necessary, functionality, measurement, experience, marketing). Written by the consent banner when you Accept, Reject, or Save preferences. Also mirrored in your browser’s localStorage.1 yearNo — this is the consent record itself
_ga, _ga_*Google Analytics 4 — distinguishes unique users, aggregates usage metrics. Set by the GA4 SDK only after you grant the measurement consent category.Set by Google — see note belowYes
Session / auth cookieAuthentication state (WorkOS-issued session token). Strictly necessary for account access.7 daysNo — strictly necessary
FullStorySession replay and UX diagnostics. Loaded only after you grant the measurement consent category (same gate as GA4). Inputs are masked at the SDK level (see above).Set by FullStory — see note belowYes

The _ga/_ga_*and FullStory cookie durations are configured by those vendors, not by our application code, so we do not restate a specific figure here; see Google’s and FullStory’s own cookie/privacy documentation for their current retention window. The c15t duration above is our own consent-manager configuration (verified default).

6. Service Providers

We work with trusted third-party providers that help us operate Growfer.

These providers process information only as necessary to perform services on our behalf.

ProviderPurpose
WorkOSAuthentication and account management
StripePayment processing
AWSDatabase, storage, and infrastructure
VercelWebsite hosting and serverless infrastructure
ResendTransactional email delivery
SentryError monitoring
UpstashRate limiting and abuse prevention
Google AnalyticsWebsite analytics (with consent)
FullStorySession replay and usability analysis (with consent)
PerplexityAI-powered audit generation
Google PageSpeed InsightsWebsite performance analysis

We may also disclose information when required by law or when reasonably necessary to protect our rights, users, or the security of the Service.

7. Data Retention

We retain your account information and audit history while your account remains active.

If you delete your account, we will delete or anonymize your personal information within a reasonable period unless we are required to retain certain information for legal, accounting, tax, fraud prevention, or other legitimate business purposes.

Technical logs and diagnostic information are retained only for as long as reasonably necessary to operate, secure, and improve the Service.

8. Your Privacy Rights

Depending on where you live, you may have rights under applicable privacy laws, including the right to:

  • Access your personal information
  • Correct inaccurate information
  • Delete your personal information
  • Receive a copy of your personal information
  • Object to or restrict certain processing
  • Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@peakweb.io.

We will respond within the time required by applicable law.

9. International Data Transfers

Growfer and its service providers may process information in countries other than your own, including the United States.

Where required by applicable law, we rely on appropriate contractual or legal safeguards for international transfers of personal information.

10. Business Transfers

If Peakweb is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction, subject to applicable law.

11. Children's Privacy

Growfer is intended for business users and is not directed to children.

We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to remove it.

12. Security

We use industry-standard administrative, technical, and organizational safeguards to protect your information.

These measures include encrypted communications, access controls, infrastructure security provided by our hosting partners, and ongoing monitoring of our systems.

No method of transmitting or storing information is completely secure, and we cannot guarantee absolute security.

13. Third-Party Websites

Growfer may contain links to third-party websites or services.

We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing personal information.

14. Sale or Sharing of Personal Information

We do not sell your personal information.

We also do not share your personal information for cross-context behavioral advertising as those terms are defined under applicable privacy laws.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will provide notice through the Service or by email where appropriate before the changes become effective.

The “Last updated” date at the top of this page indicates when this Privacy Policy was most recently revised.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Peakweb Inc.

3200 S Downing St
Englewood, CO 80113
United States

Email: privacy@peakweb.io

[PO: add a data-protection-representative / EU representative contact (GDPR Art. 27) and supervisory authority reference, if required for your jurisdiction.]