Special Offer: Use code WAITLIST3MONTHS for 80% OFF your first 3 months! Get Started →

Privacy Policy

How we protect and handle your data

Last updated: January 6, 2025

Introduction

Grove ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered Shopify SEO automation platform.

By using Grove, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

  • Name and contact information
  • Company details and business information
  • Shopify store credentials and access tokens
  • Payment and billing information

Store Data

  • Product information (titles, descriptions, images, pricing)
  • Collection and category data
  • SEO metadata and optimization history
  • Website performance metrics
  • Analytics and conversion data

Usage Information

  • Platform usage patterns and feature utilization
  • API calls and automation execution logs
  • Error logs and technical diagnostics
  • Communication preferences and settings

How We Use Your Information

Service Delivery

  • Provide automated SEO optimization services
  • Generate AI-powered content and recommendations
  • Execute bulk optimization tasks
  • Monitor and improve search performance

Platform Improvement

  • Analyze usage patterns to enhance features
  • Develop new AI models and algorithms
  • Improve system performance and reliability
  • Conduct security monitoring and threat detection

Communication

  • Send service updates and notifications
  • Provide customer support and technical assistance
  • Share relevant industry insights and best practices
  • Process billing and account management

Data Security

We implement industry-standard security measures to protect your information:

AES-256 Encryption
SOC 2 Compliant
Multi-Factor Auth
24/7 Monitoring
  • Encryption: All data encrypted in transit and at rest
  • Access Controls: Strict role-based access with MFA
  • Infrastructure: SOC 2 compliant cloud infrastructure
  • Monitoring: Continuous security monitoring and threat detection
  • Compliance: GDPR, CCPA, and other privacy regulations

Information Sharing

We do not sell, trade, or rent your personal information. We only share data when necessary for service delivery or legal requirements.

Service Providers

  • Cloud hosting and infrastructure providers
  • AI and machine learning service providers
  • Payment processing and billing services
  • Customer support and communication tools

Legal Requirements

  • Compliance with legal obligations and court orders
  • Protection of our rights and property
  • Prevention of fraud or illegal activities
  • Public safety and security concerns

Data Retention

We retain your information only as long as necessary to provide services and comply with legal obligations:

Account Data

Active account + 30 days

Optimization History

2 years for analysis

Analytics Data

5 years (aggregated)

Financial Records

7 years (regulatory)

Your Privacy Rights

You have the following rights regarding your personal information:

  • Access: Request copies of your personal data
  • Correction: Request corrections to inaccurate information
  • Deletion: Request deletion of your personal data
  • Portability: Request transfer of your data to another service
  • Objection: Object to certain processing activities
  • Restriction: Request restriction of processing in certain circumstances

To exercise these rights, contact us at [email protected]

Cookies and Tracking

We use cookies and similar technologies to enhance your experience:

  • Essential Cookies: Required for platform functionality
  • Analytics Cookies: Help us understand usage patterns
  • Preference Cookies: Remember your settings and preferences
  • Security Cookies: Protect against fraud and security threats

Third-Party Data Partners

When you visit our website, cookies may be used by our data partners to associate activities with other personal information. You may opt out:

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure adequate protection through:

  • Standard Contractual Clauses (SCCs) for EU data transfers
  • Adequacy decisions for approved countries
  • Additional safeguards and security measures
  • Regular compliance audits and assessments

Contact Us

If you have questions about this Privacy Policy or our data practices:

Privacy Officer

Email: [email protected]

Response Time: Within 30 days

Data Protection Officer

Email: [email protected]

For EU/UK inquiries

Questions About Privacy?

Our privacy team is here to help with any questions or concerns.

Contact Privacy Team