This Privacy Policy explains how GrowRabbitAI ("we", "us", "our") collects, uses, shares, and protects information when you use the GrowRabbitAI software-as-a-service platform ("Service"). We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), where they apply.
1. Information We Collect
a. Account information
When you create an account, we collect your email address, name (if provided), password (stored hashed), and your subscription plan.
b. Farm and usage data
We store the data you enter into the Service — for example cage records, rabbit profiles, breeding logs, kindling and weaning records, feed entries and slaughter records. This data belongs to you.
c. Technical and analytics data
We automatically collect technical information such as IP address, browser type, device type, operating system, pages visited, referring URLs, and timestamps. We use this data to operate, secure, and improve the Service.
d. Payment information
We do not store full credit card or bank details. Payment data is collected and processed directly by our payment processor, Paddle.
2. How We Use Your Information
- To provide, maintain, and improve the Service.
- To process subscriptions, payments, and renewals.
- To send transactional emails (account, billing, security notifications).
- To analyze usage trends and improve features and performance.
- To respond to your support requests.
- To detect, prevent, and address fraud, abuse, or security incidents.
- To comply with legal obligations.
We may send occasional product update emails. You can opt out of marketing communications at any time; transactional emails are required for the operation of your account.
3. Legal Bases (GDPR)
Where the GDPR applies, we process your data on the basis of: (a) performance of the contract (providing the Service you subscribed to); (b) legitimate interests (security, fraud prevention, product improvement); (c) compliance with legal obligations; and (d) consent, where required (e.g., non-essential cookies).
4. Cookies and Tracking
We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. Essential cookies are required for the Service to function. Analytics cookies may be used to measure aggregate usage. You can control cookies through your browser settings; disabling essential cookies may break parts of the Service.
5. Third-Party Services
We rely on a small number of vetted providers to operate the Service:
- Paddle — payment processing and Merchant of Record (subscriptions, invoicing, taxes).
- Cloud hosting and database providers — to host the application and store your data securely.
- Email delivery providers — to send transactional and account-related emails.
- Analytics providers — to understand aggregate usage and improve the Service.
These providers process data on our behalf under appropriate contractual safeguards. We do not sell your personal information to third parties.
6. Data Security
We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS), encryption at rest where applicable, access controls, isolated per-account data, and regular backups. No system is 100% secure; you are responsible for keeping your password confidential.
7. Data Retention
We retain your account data while your subscription is active and for a reasonable period afterwards (typically up to 12 months) to allow account recovery and meet legal, accounting and tax obligations. After that period, your data may be permanently deleted or anonymized.
8. International Transfers
Your data may be processed in countries outside your country of residence. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to protect your information.
9. Your Rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data ("right to be forgotten").
- Restrict or object to certain processing.
- Receive a copy of your data in a portable format.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local data protection authority.
To exercise these rights, email us at privacy@growrabbitai.com. We respond within 30 days.
10. Children
The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us so we can delete it.
11. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be announced in the Service or by email at least 14 days before they take effect.
12. Contact
For privacy questions or requests, contact us at privacy@growrabbitai.com or by post to GrowRabbitAI, Casablanca, Morocco.