Privacy Policy
Updated: July 15, 2026
1. Who we are
Growthtyping is operated by Craftled, MB (registration code 305722486, VAT LT100015273316), Eduardo Andre 14-5, LT-02232 Vilnius, Lithuania. Craftled is the controller for personal data processed through growthtyping.com and related product surfaces.
Growthtyping turns growth experiment ideas into on-brand, stakeholder-ready prototypes. Export of prototype files is the product. Related Terms live at /terms.
2. Data we collect
We collect what we need to run accounts, brand ingest, generation, billing, and support. We do not run third-party advertising pixels or product analytics suites today.
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, password hash, verification link | You, via Better Auth |
| Brand profile data | Brand name, site URL, design tokens, tone samples, product copy cues, logos you attach or we extract | You, plus public pages we fetch when you submit a URL |
| Generation and workspace data | Compiled prompts, chats, experiment versions, generated source files, preview bundles, fork tree metadata, export history | Created when you use the product |
| Usage and billing data | Render events, cache hits, cost estimates, plan entitlements, Stripe customer and subscription ids, invoice metadata | Product meters and Stripe |
| Support data | Messages you send to support@growthtyping.com | You |
| Technical logs | IP address, user agent, request path, response code, timestamp | Hosting and application logs |
3. Brand URL ingest
When you add a brand profile, you may submit a public website URL. We fetch that page to extract design tokens, tone samples, logos when available, and product copy cues that steer generation. You can review and override ingested values in the brand editor.
Do not submit URLs or content you lack rights to use. Ingested material is stored with your brand profile and used to compile prompts for prototype generation.
4. AI generation and exports
Prototype generation sends compiled prompts, brand context, and pattern templates to our generation motor through Vercel AI Gateway and underlying model providers. Generated source files and preview bundles are stored in Postgres so you can revisit, fork, and export them.
We log approximate generation cost per render for usage accounting and plan allowances. Cache hits reuse prior renders under a user-scoped key and are not billed as new generations.
Model providers process prompt and brand context as needed to return generated files. Do not put secrets, credentials, or regulated personal data into prompts or brand fields.
5. How and why we use data
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Create accounts, generate and store prototypes, export files, run subscriptions | Contract (Art. 6(1)(b)) |
| Secure the service, prevent abuse, improve reliability, answer support mail | Legitimate interest (Art. 6(1)(f)) |
| Keep tax and accounting records for paid invoices | Legal obligation (Art. 6(1)(c)) |
| Optional marketing email if we ever ask for it separately | Consent (Art. 6(1)(a)) |
We do not sell personal information. We do not use personal data for cross-context behavioral advertising. We do not run automated decision-making that produces legal or similarly significant effects about you.
6. Processors
We share personal data with processors that help operate Growthtyping under data processing terms. Current processors include:
| Provider | Purpose | Location |
|---|---|---|
| Vercel | App hosting, edge delivery, Vercel AI Gateway for model calls | USA / EU |
| Neon | Postgres database for accounts, chats, files, and ledgers | EU (Neon) |
| Stripe | Checkout, subscriptions, customer portal, invoices | USA / Ireland (EU customers) |
| Resend | Transactional auth and product email from mail.growthtyping.com | USA |
| LLM providers via AI Gateway | Generate prototype files from compiled prompts and brand context | Varies by model route |
Transfers outside the EEA or UK rely on Standard Contractual Clauses, the EU-US Data Privacy Framework where applicable, or other lawful transfer mechanisms.
7. Cookies and similar technologies
We use strictly necessary cookies and similar storage for authentication sessions (Better Auth), theme preference, and core product function. These are required to deliver the service you request.
We do not use advertising cookies. We do not currently run a third-party analytics cookie suite. Stripe Checkout and the Stripe customer portal set their own cookies on Stripe-hosted pages. See Stripe's privacy materials for that flow.
8. Retention
| Data type | Retention period |
|---|---|
| Account, brand profiles, chats, generated files | While the account is active, then deleted on request subject to backups and legal holds |
| Billing and invoice records | 7 years under Lithuanian / EU tax rules |
| Technical server logs | Typically 30 days unless needed longer for security investigation |
| Support correspondence | As long as needed to resolve the thread, then according to mailbox policy |
9. Your rights
Under the GDPR, UK GDPR, and CPRA where they apply, you may ask to access, correct, delete, or port personal data, restrict or object to certain processing, and withdraw consent for consent-based processing. California residents may also opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information for cross-context behavioral advertising.
Email support@growthtyping.com to exercise these rights. We respond within the periods required by law and may need to verify your identity. You may lodge a complaint with Lithuania's State Data Protection Inspectorate (VDAI) or your local supervisory authority.
10. Children
Growthtyping is not directed to children under 16. We do not knowingly collect personal data from them. If you believe a child provided personal data, email us and we will delete it.
11. Security
We use TLS in transit, database encryption at rest through our hosted Postgres provider, least-privilege access controls, and dependency updates. No internet system is perfectly secure. You use the service at your own risk.
12. Changes
We may update this policy. The "Last updated" date at the top shows the latest revision. Material changes may be announced by email or an on-site notice. Continued use after the effective date means you accept the revised policy.
13. Contact
Privacy questions and data requests: support@growthtyping.com.
Craftled, MB · Eduardo Andre 14-5, LT-02232 Vilnius, Lithuania · registration 305722486 · VAT LT100015273316.