Privacy Policy

1. Introduction

GrowthStack ("Company," "we," "us," or "our") is a marketing automation platform operated by Andrew White Consulting LLC, a Texas limited liability company. This Privacy Policy explains how we collect, use, disclose, and protect information from visitors to growthstack.solutions and clients who use our platform services.

By using our website or services, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

Information You Provide Directly

• Contact form submissions: Name, email address, phone number, and business website
• Client onboarding information: Business name, industry, number of employees, current software tools, and billing information
• Communications: Messages, feedback, and support requests you send us

Information Collected Automatically

• Usage data: Pages visited, time spent on pages, referring URLs, and navigation patterns
• Device information: Browser type, operating system, device type, and IP address
• Cookies and tracking technologies: Session cookies, analytics cookies, and similar technologies (see Section 7)

Client Business Data

When you use our platform services, we process data on your behalf including your customer contact information, CRM data, communications history, and campaign analytics. This data is processed as a service provider/data processor under your instructions.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve our marketing automation services
• Communicate with you about your account, services, and updates
• Send you marketing communications about GrowthStack services (with your consent where required)
• Process payments and manage billing
• Comply with legal obligations under Texas and federal law
• Detect, prevent, and address fraud or security issues
• Analyze usage patterns to improve our platform

4. SMS and Text Message Communications (TCPA)

• Client responsibility: Clients using GrowthStack's SMS features are solely responsible for obtaining proper prior express written consent from their message recipients before sending any automated text messages
• Opt-out compliance: All automated messages sent through our platform include opt-out instructions (reply STOP to unsubscribe)
• Message frequency: Varies by client configuration. Message and data rates may apply
• No sharing: Phone numbers collected through our platform are never sold or shared with third parties for marketing purposes
• For questions about SMS communications, contact us at the address listed in Section 12

5. Email Communications (CAN-SPAM Act)

Marketing emails sent through GrowthStack's platform comply with the CAN-SPAM Act. Each commercial email includes:

• A clear identification of the sender
• A valid physical postal address
• A clear and conspicuous unsubscribe mechanism
• Prompt processing of unsubscribe requests (within 10 business days)

Clients are responsible for ensuring their email campaigns comply with CAN-SPAM and any applicable state email marketing laws.

6. Texas Data Privacy and Security Act (TDPSA)

GrowthStack complies with the Texas Data Privacy and Security Act (TDPSA), effective July 1, 2024. Texas residents have the following rights regarding their personal data:

• Right to Know: You may request confirmation of whether we process your personal data and access to that data
• Right to Correct: You may request correction of inaccurate personal data we hold about you
• Right to Delete: You may request deletion of personal data we have collected about you, subject to certain exceptions
• Right to Data Portability: You may request a copy of your personal data in a portable, readily usable format
• Right to Opt Out: You may opt out of the processing of your personal data for targeted advertising, sale of personal data, or profiling

To exercise any of these rights, submit a verifiable request through the contact information in Section 12. We will respond within 45 days as required by the TDPSA.

7. Cookies and Tracking Technologies

We use the following types of cookies and tracking technologies:

• Essential cookies: Required for the website to function. Cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
• Marketing cookies: Used to deliver relevant advertisements. Only deployed with your consent.

You may disable non-essential cookies through your browser settings. Note that disabling cookies may affect website functionality.

8. Disclosure of Your Information

We do not sell your personal information. We may share your information with:

• Service providers: Third-party vendors who assist in operating our platform (e.g., Go High Level, payment processors, cloud hosting providers), bound by confidentiality agreements
• Legal compliance: When required by law, court order, or governmental authority in Texas or under federal law
• Business transfers: In connection with a merger, acquisition, or sale of substantially all assets, with advance notice to affected users
• Protection of rights: To protect the rights, property, or safety of GrowthStack, our clients, or others

9. Data Retention

We retain personal information for as long as necessary to provide our services and fulfill the purposes described in this Policy, or as required by law. Client platform data is retained for the duration of the service agreement plus 90 days following termination, after which it is securely deleted unless retention is required by law.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, use, alteration, and disclosure. However, no method of transmission over the internet is 100% secure. We notify affected users of security breaches as required under Texas law (Tex. Bus. & Com. Code § 521.053).

11. Children's Privacy

GrowthStack's services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we learn we have inadvertently collected such information, we will delete it promptly. If you believe we have collected information from a minor, please contact us immediately.

12. Contact Us

To exercise your privacy rights, submit a complaint, or ask questions about this Policy:

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy on this page with a new "Last Updated" date. Your continued use of our services after any changes constitutes acceptance of the updated Policy.

This Privacy Policy is governed by the laws of the State of Texas. Any disputes arising from this Policy shall be resolved in accordance with Texas law.