Legal · Privacy Policy

Privacy Policy

What we collect, what we don't, why.

How grow-it handles data for the extension, its agents, the Telegram bot and on-chain billing. Plain English, no dark patterns.

Effective October 11, 202614 sections~5 min read
01

Overview

grow-it provides a browser extension, a backend service and a Telegram bot for AI-assisted engagement on X. This Privacy Policy explains what we collect, why we collect it, how long we keep it, and how you can contact us.

02

Data we collect

We may collect:

  • Account data: name, email address, verification status, and session data.
  • Extension settings: voice settings, model preference, selected skill pack, agent settings and modes, onboarding state, and related preferences.
  • User context: your persona, tone, language mix, niche focus and the saved context grow-it uses to keep your replies consistent.
  • X profile: the X handle and user id you sign in with, and the public profile details the extension reads to confirm which X account is active.
  • Engagement data: post URLs, post IDs, post text, generated replies, action status, timestamps and activity logs, including a record of posts already engaged per X account so agents don’t engage the same post twice.
  • Agent sessions and analytics: which agent ran, in which mode, for how long, what it did (replies, likes, follows, unfollows, profile visits), posts it skipped and why, and the credits it spent.
  • Follow ledger and X event log: the accounts agents followed or unfollowed for you and when, and the responses and refusals X returned, so agents can avoid repeating work and back off when X refuses.
  • Growth targets and whitelist: the usernames and X Lists you give agents such as Connection Builder and Sorsa Score, and the handles, X Lists and keywords on your whitelist.
  • Telegram page data: X links visible in the Telegram Web chats where you use the grow-it toolbar, the chat names, and each link’s status.
  • Telegram account link: if you link Telegram, your Telegram user id, username, display name and profile photo, and the messages you exchange with the grow-it bot.
  • X page data: visible post content needed to engage, generate and post replies.
  • Install and update data: an install id for each browser profile where grow-it runs, the extension and app versions, periodic heartbeats, and update results.
  • Payment data: wallet addresses, transaction hashes, chain name, chain ID, token, token amount, confirmation count, invoice number, and payment status.
  • Device and request data: IP address, user agent, and logs needed for security, abuse prevention, rate limits, debugging, and reliability.
  • Support data: messages you send to [email protected].
03

Data we do not collect

“No X password. No Telegram password. No data sold. No ad targeting.
  • We do not ask for or store your X password.
  • We do not ask for or store your Telegram password.
  • We do not sell personal data.
  • We do not use your data for third-party advertising.
04

How we use data

We use data to:

  • Authenticate users.
  • Verify email addresses.
  • Generate AI replies.
  • Run your agents and show you what they did.
  • Maintain credits and usage limits.
  • Deliver over-the-air updates and check that installs work.
  • Send you messages from the grow-it Telegram bot when you link Telegram.
  • Verify on-chain payments.
  • Generate receipts and invoices.
  • Provide support.
  • Improve reliability and product safety.
05

Developer Help diagnostics

If you explicitly enable Developer Help in the extension and grow-it support assigns an active capture policy, an affected run may include the target tweet, generated reply, relevant composer or error DOM, allowlisted X reply network errors, runtime errors, and performance timing. Capture stops when you revoke consent or the policy ends.

  • Developer Help never captures screenshots, cookies, authorization headers, wallet or authentication secrets, or unrelated Telegram chat content.
  • Raw deep diagnostic evidence expires after 30 days; sanitized run summaries and failure fingerprints may be retained for reliability analysis.
  • Chrome DevTools Protocol capture is separately controlled by support and remains off unless both consent and the active policy permit it.
06

AI providers and processors

grow-it may send post text, profile settings, your user context and generation context to AI service providers through OpenRouter or similar model routing providers to generate replies. The router passes the request to the company that runs the chosen model. Do not include secrets, passwords, or highly sensitive personal information in content you submit to grow-it.

07

Payment processing

Payments are made on public blockchains. Transaction hashes, wallet addresses, token transfers, and chain data may be publicly visible on-chain. grow-it stores payment metadata for billing, support, and accounting records.

08

Browser extension user data statement

grow-it uses user data only to provide the features described in the extension and on this website. We do not sell user data or use it for unrelated advertising. Our use of extension data is limited to authentication, running agents, reply generation, updates, payment verification, support, and product operation.

09

Sharing

We share data only with service providers needed to run the product, including:

  • Email provider, Resend
  • AI provider or model router, OpenRouter, and the model providers it routes to
  • Telegram, through the Telegram Bot API, for messages from the grow-it bot when you link Telegram
  • Analytics or logging tools if used
  • Legal, accounting, or security providers when necessary
10

Retention

  • Account data is kept while your account is active.
  • Payment and invoice records are retained as needed for accounting and legal obligations.
  • Usage and action logs, agent sessions, the follow ledger and the X event log are retained as needed for reliability, analytics and to keep agents from repeating work.
  • Install records and heartbeats are retained while the install is active and as needed for reliability.
  • Support emails are retained as needed to resolve requests.
  • You may request deletion by contacting [email protected].
11

Security

We use HTTPS, access controls, hashed passwords, session protections, and restricted admin access. No internet service can be guaranteed completely secure.

12

User choices

You can update settings, stop any agent, edit your growth targets and whitelist, unlink Telegram from the extension, stop using or uninstall the extension, clear local extension data, request account deletion, and contact support.

13

Children

grow-it is not intended for children under 13.

14

Changes

We may update this Privacy Policy. When we do, we will update the effective date.

Questions about this page?
Email support