Grow Biz OS Privacy Policy
Effective 30 October 2026 · Version 1.0 · Applies to the Grow Biz OS public website and authenticated application.
Who operates Grow Biz OS
Grow Biz operates Grow Biz OS, a business operating system for CRM, clients, sales, projects, tasks, team operations, documents, finance visibility, reports and optional integrations. This policy covers the public website at https://os.thegrowbiz.online and authenticated application at https://app.thegrowbiz.online. Contact for privacy matters: ai.thegrowbiz@gmail.com.
Information we process
Depending on how you use the service, information may include names, email addresses, phone numbers, organization and user roles, account identifiers, login activity, support or demo enquiries, technical and security logs, and business records submitted by authorized customers: lead and client contacts, proposals, tasks, projects, invoices, documents, calendar events and related activity. We may process information about individuals entered by a customer's authorized users.
Purpose and organizational responsibility
We use information to operate and secure Grow Biz OS, authenticate users, provide organization-specific workflows and reports, respond to enquiries, perform requested integrations, prevent abuse and meet legal obligations. Customers decide what business information to enter and are responsible for having authority to collect, disclose and manage it. We do not intentionally expose one customer organization's records to another through normal authorized use.
Account and organization visibility
Grow Biz OS is designed for organizations with role-based access. Members may see information allowed by their assigned permissions, and organization administrators control access. Calendar events imported by an authorized user become records visible to appropriately authorized colleagues in that Grow Biz organization, not just the importing Google account owner. A confirmation checkbox is required before importing Google events.
Optional Google Calendar access
Google Calendar connection is optional. A signed-in Grow Biz OS user must choose Connect Google Calendar and grant Google's authorization. Grow Biz OS requests the Google Calendar events scope (https://www.googleapis.com/auth/calendar.events) for user-initiated event import and export. Data accessed can include event titles, descriptions, dates and times, attendees, locations, event identifiers and modification details. We do not request access to the user's Google email or unrelated Google products through this connection.
How calendar import and export work
The current integration supports manual user-triggered event import and export, not continuous automatic background synchronization. When exporting, Grow Biz OS may create or update events in the authorized Google Calendar; importing copies supported Google event information into the customer's Grow Biz organization. Linked-event identifiers, update markers and stored comparison snapshots are used to detect changed or conflicting events. Conflicts are reported instead of silently overwriting both sides. Recurring, all-day or multi-day import, deletions and certain other event types may not be supported.
Google API Limited Use disclosure
Grow Biz OS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We access and use Google Calendar data only to provide or improve the features the user authorized, protect their security and functionality, or as otherwise permitted by Google's policy. We do not sell Google user data, use it for targeted advertising, or use it to train generalized AI or machine-learning models. Human access to Google user data is limited to circumstances permitted by Google's policy, such as affirmative user agreement, support/security needs, or legal requirements.
Google token protection and stored records
Following authorization, Grow Biz OS stores a Google refresh token encrypted on the server for the selected user's organizational connection, together with connection metadata and linked-event records needed for manual synchronization. OAuth client credentials are server-side configuration. Imported event details are stored as organizational Grow Biz OS data; they may remain in the organization even after the Google connection is removed.
Disconnect, revoke and deletion
You may disconnect Google Calendar inside Grow Biz OS Calendar integrations and separately revoke Grow Biz OS access in Google Account settings. Disconnect removes the saved connection credentials and event-link mappings. It does not automatically erase previously imported events from Grow Biz OS or remove events in Google Calendar. Contact your organization administrator or ai.thegrowbiz@gmail.com for removal of existing imported records, subject to verification and applicable obligations.
Service providers and sharing
To provide Grow Biz OS, information may be processed by infrastructure providers for hosting, database, authentication and security, or through optional integrations a user authorizes. We share data with authorized members of the relevant customer organization, service providers acting for us, or parties where the user directs us or the law requires. We do not sell customer records or Google Calendar data to advertising brokers.
Retention and account requests
Information is retained as reasonably necessary for service delivery, account administration, security, legitimate business records and legal requirements. Different data types, customer arrangements and backup schedules may have different retention periods; we do not promise an unverified uniform retention period. Requests for access, correction, export or deletion may be sent to ai.thegrowbiz@gmail.com. We may verify identity and organizational authority; eligible records are removed from active systems in accordance with applicable law and agreements, while backup copies follow normal protected retention cycles.
Security practices
Grow Biz OS uses authenticated user access and organization-scoped authorization, and encrypts stored Google refresh tokens. We seek appropriate security and access safeguards, but no system is completely risk-free. Users must safeguard passwords, apply suitable organization permissions and promptly report suspected compromise.
Locations, rights and children
Providers may process information in India or other locations where infrastructure is operated, subject to applicable safeguards. Depending on applicable law and your relationship to a customer organization, you may have rights to access, correct or delete personal data or withdraw consent where appropriate. We may refer requests concerning customer-controlled records to the relevant organization. Grow Biz OS is for business use and is not directed to children.
Updates and contact
This policy may be revised as the product, vendor arrangements or legal requirements change. We will publish an updated effective date and provide additional notice or renewed permission where required. Questions, complaints or Google Calendar data requests: ai.thegrowbiz@gmail.com or https://os.thegrowbiz.online/contact.