Privacy Policy

Last updated: June 14, 2026 | Effective date: June 1, 2025

    Summary: GrowBusinessHub is a business management platform. We collect only the data necessary to operate our services. We do not sell your data to third parties. When you connect your Google Business Profile, we access only the data required to display and manage your business listings and reviews.
  

1. Who We Are

GrowBusinessHub ("we", "us", or "our") is a unified business management platform operated at growbusinesshub.online. We provide tools for store review management, Google Business Profile integration, attendance tracking, digital menus, and related business services.

For privacy-related questions, contact us at: support@growbusinesshub.online

2. Information We Collect

2.1 Account Information

Name, email address, and username when you register
Password (stored as a bcrypt hash — never in plain text)
Last login time and IP address for security

2.2 Business Data You Provide

Store name, address, contact details, and logo
Customer reviews submitted through your QR-linked review pages
Employee attendance records
Menu items, hotel details, and other module-specific data

2.3 Google Business Profile Data (via Google API)

    Important — Google API Data Use: When you connect your Google Business Profile, GrowBusinessHub accesses your Google Business Profile data using the official Google Business Profile API. We use this access only to:
    Display your business listings and locations
Display your Google reviews within your dashboard
Allow you to reply to reviews on your behalf
Allow you to view and update your business information (name, phone, website, hours, description)

    

    We do not use Google Business Profile data for advertising, profiling, or any purpose beyond providing the above features to you. We do not share your Google data with third parties.
  

2.4 OAuth Tokens

When you connect your Google account, we store your OAuth access token and refresh token in our secure database. These tokens are used solely to authenticate API requests on your behalf. Tokens are encrypted in transit (HTTPS) and stored securely. You can revoke access at any time from your Google Account settings or by disconnecting GMB from your dashboard.

2.5 Usage and Log Data

Pages visited, actions taken within the dashboard
IP addresses and browser user-agent for security logging
QR code scan counts and review submission timestamps

3. How We Use Your Information

To provide, operate, and improve the GrowBusinessHub platform
To authenticate your account and maintain security
To display your store reviews and Google Business Profile data within your dashboard
To send transactional emails (password resets, notifications) if configured
To generate QR codes and review pages for your customers
To analyse aggregate platform usage (never individual user profiling)

4. Google API Services — Limited Use Disclosure

GrowBusinessHub's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we confirm that data obtained through Google APIs is:

Used only to provide or improve the features described in this Privacy Policy
Not used for serving advertisements
Not transferred to third parties except as necessary to provide our service
Not used for determining creditworthiness or for lending purposes
Not used to develop, improve, or train generalised AI or machine learning models

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:

Google LLC — when you connect your Google Business Profile, API requests are made to Google's servers on your behalf
Hosting provider — our servers are hosted on Hostinger; they have access to server-level data per their own privacy policy
Legal requirements — if required by law, court order, or government authority

6. Data Retention

Account data is retained as long as your account is active
Review submissions are retained indefinitely unless you request deletion
Google OAuth tokens are deleted when you disconnect your GMB account
Activity logs are retained for 90 days for security purposes

7. Data Security

We take data security seriously. Measures include:

All data transmitted using HTTPS/TLS encryption
Passwords hashed using bcrypt (cost factor 12)
OAuth tokens stored in a secured database with restricted access
Login attempt limiting and account lockout after failed attempts
CSRF token protection on all forms

8. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Revoke Google OAuth access at any time via Google Account settings
Disconnect your Google Business Profile from your dashboard

To exercise any of these rights, contact us at support@growbusinesshub.online

9. Cookies

GrowBusinessHub uses session cookies to maintain your login state. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies. Session cookies are deleted when you log out or close your browser.

10. Children's Privacy

GrowBusinessHub is a business management tool not intended for use by persons under 18 years of age. We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact:

GrowBusinessHub Support
Email: support@growbusinesshub.online
Website: https://growbusinesshub.online