Privacy Policy

Growmium is operated from Victoria, Australia. This policy explains how Growmium collects, uses, stores and discloses personal information when people use growmium.co, create a Growmium account, use the business dashboard, contact us, or tap a Growmium NFC review card.

We aim to handle personal information transparently and consistently with applicable Australian privacy requirements, including the Privacy Act 1988 (Cth) where it applies to us.

Account information. We collect details such as your email address, account identifier and authentication status. Authentication is provided through Supabase. Growmium does not store your password in plain text.

Business information. We may store a business name, the Google review destination nominated for that business, account-to-business access details, account roles and related setup information.

Review-card tap data. When a Growmium NFC review card opens its business review link, we record the relevant business and the time of the tap so we can provide activity analytics. A recorded tap does not tell us whether a Google review was ultimately submitted.

Technical and security information. Our hosting, authentication and infrastructure providers may process information such as IP address, browser or device information, request details, cookies, security events and diagnostic logs as part of operating and protecting the service.

Communications. If you contact us, we may retain your message, contact details and information needed to respond or provide support.

Growmium is not designed to collect sensitive information and we ask users not to submit it unless genuinely necessary.

We use information to create and secure accounts, connect accounts to businesses, operate NFC review cards and review links, redirect customers to the nominated Google review destination, provide tap analytics, maintain and improve the service, prevent abuse, troubleshoot problems, communicate about accounts and support requests, comply with legal obligations, and protect Growmium and its users.

We do not sell personal information. We do not use review-card taps to determine whether a person left a review or what rating they gave.

Growmium uses cookies or similar browser storage where needed to keep users signed in, maintain secure sessions and operate the website. These are functional parts of the service. We do not currently use the Growmium site for third-party advertising or behavioural advertising.

We use third-party providers to operate Growmium. These currently include Supabase for authentication and database services and Vercel for website hosting, delivery and application infrastructure. When a customer taps a Growmium review card, they are sent to a Google service selected for the relevant business. Google then handles information under its own terms and privacy practices.

We may also disclose information where required by law, to respond to lawful requests, to investigate fraud or security incidents, to protect legal rights, or as part of a genuine business restructure or transfer subject to appropriate safeguards.

Some of our technology providers operate global infrastructure. As a result, personal information or technical data may be processed or accessible outside Australia, including in countries where our service providers operate. We take this into account when choosing providers and configuring the service.

We use reasonable technical and organisational measures designed to protect information, including authenticated access, row-level database controls and reputable infrastructure providers. No internet service can guarantee absolute security.

We retain information for as long as reasonably needed to provide the service, keep appropriate business and security records, resolve disputes and meet legal obligations. We may delete or de-identify information when it is no longer reasonably required, subject to legal or operational retention needs.

You may ask us to access or correct personal information we hold about you, or request deletion where appropriate. We may need to verify your identity before acting on a request and may retain information where the law permits or requires us to do so.

Contact: hello@growmium.co.

If you have a privacy question or complaint, contact us at hello@growmium.co with enough detail for us to understand the issue. We will aim to investigate and respond within a reasonable period.

Where the Privacy Act applies, you may also have the right to contact the Office of the Australian Information Commissioner if a privacy issue cannot be resolved with us first.

At the date of this policy, Growmium does not process card payments through the website. If online payment processing is introduced, payment information may be handled by a specialist payment provider and this policy will be updated where needed before that functionality is relied on.

We may update this policy as Growmium changes, including when new product modules or data practices are introduced. The current version will be published on this page with its effective date.