Privacy Policy

This Privacy Policy explains how GrowKong Group and its affiliates (“GrowKong,” “we,” “us,” or “our”) collect, use, disclose, and protect personal information when you visit our website, create an account, and take part in the GrowKong creator program (together, the “Services”).

For people in the European Economic Area (“EEA”) and the United Kingdom (“UK”), GrowKong Group is the “controller” of your personal information unless we say otherwise. You can reach us at:

GrowKong Group
5511 Caprock Summit Dr
Austin, TX 78738, United States
privacy@growkong.com

Information you give us

• Account data — your email address and the credentials you use to sign in (passwords are stored in hashed form by our authentication provider; we never see them in plain text).
• Profile data — your name or creator handle, avatar, bio, country/region, connected social accounts, and preferences.
• Identity & verification data — where required to pay you or to meet legal obligations, information such as legal name, date of birth, government-issued ID, and address. This is collected and verified primarily by our payments partner (see How we share information).
• Payout & tax data — the financial account you are paid into and tax documentation (for example, a W-9 or W-8 series form). Full bank/card numbers are handled by our payment processor, not stored by us.
• Content & submissions — the videos, links, promo codes, drafts, community messages, support tickets, and other material you submit to the Services.

Information we collect automatically

• Usage & device data — pages viewed, actions taken, referring pages, IP address, device and browser type, operating system, and timestamps.
• Performance & attribution data — clicks on your tracked links, promo-code redemptions, registrations, and verified paying users that our systems attribute to you, together with the fraud and quality signals used to validate them.
• Cookies & similar technologies — see Cookies and similar technologies.

Information from third parties

• Sign-in providers — if you register with Google, we receive basic profile information (such as your name and email) from that provider.
• Connected platforms — where you connect or post on a third-party platform (for example, TikTok or Instagram), we may receive metrics and identifiers needed to attribute and measure performance, subject to that platform’s rules and your settings.
• Payments, identity & fraud partners — verification results, payout status, and risk signals.

We use personal information to:

• create and administer your account and provide the Services;
• operate the creator program — track results, calculate performance rewards, tiers, bonuses, and any phantom-reward points, and process payouts;
• verify your identity, prevent fraud and abuse, and keep the platform and its economy secure;
• communicate with you about your account, results, payouts, security, and support requests;
• send product updates and marketing where permitted (you can opt out of marketing at any time);
• understand how the Services are used and improve and develop them; and
• comply with legal, tax, accounting, and regulatory obligations and enforce our agreements.

If you are in the EEA or UK, we rely on the following legal bases under the GDPR / UK GDPR:

We and our partners use cookies and similar technologies to keep you signed in, remember your preferences, secure the Services, and measure performance. We group them as:

• Strictly necessary — required to run the site and keep your session secure; these cannot be switched off.
• Functional — remember your settings and choices.
• Analytics — help us understand usage so we can improve the Services.

You can control non-essential cookies through your browser settings. Where the law requires consent for certain cookies, we will ask for it, and we honour recognised opt-out signals (such as Global Privacy Control) where applicable.

We do not sell your personal information. We share it only as described here:

• Service providers (processors) — vendors who help us run the Services under contract, including hosting and database infrastructure, payments and identity verification, email delivery, analytics, and customer support. They may process your information only on our instructions.
• Within our corporate group — with GrowKong Group affiliates that help operate the Services, under appropriate safeguards.
• For legal reasons — where required by law, legal process, or to protect the rights, safety, and property of GrowKong, our users, or the public, and to detect or prevent fraud.
• Business transfers — in connection with a merger, financing, acquisition, corporate reorganisation, or the spin-out or sale of a product line, your information may be transferred as part of that transaction, subject to this Policy.
• With your direction — when you ask us to share information or make it public (for example, on leaderboards or in the community).

We are based in the United States, and we and our providers may process your information in the US and other countries whose data-protection laws may differ from your own. When we transfer personal information out of the EEA, UK, or Switzerland, we use appropriate safeguards — such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum — or another lawful transfer mechanism. You may request a copy of the relevant safeguards by emailing privacy@growkong.com.

We keep personal information for as long as your account is active and as needed to provide the Services. We keep it longer where necessary to comply with legal, tax, and accounting obligations (payout and tax records, for example, are typically retained for several years), to resolve disputes, and to enforce our agreements. When information is no longer needed, we delete it or anonymise it.

EEA & UK (GDPR / UK GDPR)

You may have the right to:

• access a copy of your personal information;
• correct inaccurate or incomplete information;
• erase your information (“right to be forgotten”);
• restrict or object to certain processing;
• data portability (receive your information in a portable format);
• withdraw consent where we rely on it; and
• lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner’s Office).

United States (California and other states)

Depending on where you live, you may have the right to know/access, delete, and correct your personal information, to opt out of the “sale” or “sharing” of personal information and of targeted advertising, and to limit the use of sensitive personal information. We do not sell your personal information, and we will not discriminate against you for exercising your rights. You may use an authorised agent where the law allows.

How to exercise your rights

Email us at privacy@growkong.com. We may need to verify your identity before acting, and we will respond within the time required by applicable law.

We use automated tools and risk signals to detect invalid traffic, fraud, and abuse, and to help determine tiers and reward eligibility. These decisions are not made solely by automated means where that would produce a legal or similarly significant effect on you without meaningful human review. If a decision materially affects you, you can ask us to review it by contacting privacy@growkong.com.

We use technical and organisational measures designed to protect personal information, including encryption in transit, access controls, and row-level security in our data stores. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you and the relevant authorities as required by law.

The Services are intended for adults. You must be at least 18 years old to use GrowKong. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact privacy@growkong.com and we will delete it.

The Services link to and integrate with third-party sites and platforms (such as payment providers and social networks) that we do not control. Their handling of your information is governed by their own privacy policies, and we encourage you to review them.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you through the Services or by email. Your continued use of the Services after an update means you accept the revised Policy.

For any privacy question or request, or to reach our privacy team, contact:

GrowKong Group
5511 Caprock Summit Dr, Austin, TX 78738, United States
privacy@growkong.com

If you are in the EEA or UK and we are required to designate a representative, we will update this Policy with their contact details.