Privacy & Data Protections
Your workspace privacy and secure contract data is our priority. Read about our security practices and how we protect your data.
Last updated: November 1, 2026
Outline Navigation
1. Privacy Commitment
At Growlanzo ("Platform", "we", "us", or "our"), your privacy is a foundational pillar of our service architecture. Unlike legacy freelancing platforms that rely on static database scraping and third-party advertising tracking, Growlanzo is built to coordinate real-time workspaces with the highest standard of client and freelancer confidentiality.
This Privacy Policy details what information we collect, how it is utilized for real-time synchronization and AI matchmaking, the security measures we employ to safeguard it, and your rights under applicable data protection laws, including the Indian Digital Personal Data Protection (DPDP) Act, 2023 where applicable.
We Do Not Sell Your Data
We do not sell, trade, or license your personal profile information, project parameters, messaging logs, or canvas files to third-party ad networks or data brokers, and we do not intend to do so. If this ever changes, we will update this policy and, where required by applicable law, seek your consent.
2. Information We Collect
To power our real-time coordination ecosystem, we collect data across three primary layers:
A. Account & Profile Information
Includes registered names, email addresses, verified credentials, portfolios, base rates, declared skills, and avatar images.
B. Real-Time Workspace Canvas Transactions
When active in a project workspace, our synchronization engines parse and log task cards on your Kanban board, collaborative scratchpad text entries, real-time message threads, and files uploaded to the shared asset locker. This helps coordinate states stay in sync on both freelancer and client screens in real time.
C. Payment & Verification Parameters
Escrow payment coordinates, withdrawal methods (UPI IDs, bank account details with IFSC), and transaction history are stored securely to comply with international KYC (Know Your Customer) and anti-money laundering (AML) protocols. We do not store credit card PIN details on our servers; payment card data is handled by our payment processors in accordance with their security standards.
3. Data Usage & AI Matching
Your data is processed strictly to coordinate, improve, and protect the platform features:
- AI-Driven Matchmaking: Our Postgres semantic algorithms parse freelancer skill tags and client project descriptions. The matches are updated dynamically without exposing private contact credentials, preventing preemptive system circumvention.
- Escrow Transactions: Verified billing identifiers coordinate directly with secure escrow pools through our payment processor.
- Service Notifications: Critical updates (funding of milestone, new task card creation, chat ping, or dispute raise) trigger instant client/freelancer notification loops.
- Grow Coins Leaderboard: Top referrers are displayed publicly by display name and avatar only. Email addresses, phone numbers and coin balances are never published. Contact support to have your display removed.
4. Security & Data Protection Practices
Security is important to us. We use industry-standard technical and organizational security measures designed to protect personal information:
- Encryption at Rest: We employ industry-standard encryption to help protect stored data, including user databases, canvas assets, and profiles.
- Encryption in Transit: Data transmitted between your device and our services is protected using industry-standard transport encryption (e.g., TLS).
- Security Best Practices: We follow industry-standard security practices including encryption in transit and at rest, and we are working toward formal third-party security certifications as we scale. Our infrastructure is hosted on trusted cloud providers with physical and network security controls.
- Dispute Isolation: In the event of a raised dispute, the workspace asset locker is placed into read-only isolation to help prevent modification or tampering of evidence while our mediation team reviews the logs.
5. Asset Retention Policies
We retain active data only for as long as necessary to maintain operational continuity, provide coordinate workspace safety, and adhere to legal tax filings:
- Active Workspaces: Completed workspace canvases (Kanban status history, finalized notes) remain archived on your client and freelancer dashboard for reference unless both sides explicitly consent to delete the archive.
- Financial Records: Transactional logs, escrow allocations, and platform fee billing details are retained for a minimum of seven (7) years to comply with standard audit and taxation requirements.
- Account Deletion: Upon filing a profile deletion request under account settings, we will use reasonable efforts to delete your public profile and matches from the database, typically within a few business days. Cached analytical weights are generally purged within 30 days, subject to applicable retention obligations.
6. Identity Verification (KYC) & Verified Badge
Growlanzo verifies the identity of freelancers and clients to build trust, prevent fraud and duplicate accounts, and satisfy applicable anti-money-laundering (AML) obligations. This section explains exactly what we collect, why, how it is processed, and what the Verified badge means.
A. What We Collect & Why
- Identity details: PAN number, full name as printed on the document, and (where provided) date of birth — used solely to verify your identity and confirm the record belongs to you.
- Document images: Uploaded front/back copies, used only to review your submission and removed once review is complete. We do not retain raw identity documents longer than necessary for the verification purpose.
- Verification records: Status, provider/reference ID, timestamps, and masked (non-sensitive) metadata. We do not store your PAN in plain text; it is stored in a format that cannot be used to reconstruct the number, and never displayed publicly. We never store Aadhaar information unless a lawful basis requires it, and we do not claim to perform government-authorized Aadhaar authentication.
B. Automated Processing & Development Mode
Verification is processed automatically by our systems. During Growlanzo's pre-launch / development phase, verification may be performed through our development verification mode, which runs automated platform checks instead of a third-party identity verification provider. Verification records produced this way are clearly labelled internally as such.
The Verified badge indicates your verification status on the Growlanzo platform. It is not a government-issued identity certification and should not be represented as one. Once a third-party verification provider is configured, new verifications run against that provider, and we may re-verify previously automated records.
C. Third-Party Providers & Consent
When a verification provider is active, we share only the minimum information required for verification (e.g., PAN, name, and date of birth) with that provider, under contractual safeguards, solely for the purpose of verifying your identity. We never sell your identity data. You give explicit consent before any submission, and you may withdraw consent or delete your account at any time; withdrawal may affect your ability to use verification-gated features.
D. Retention & Your Rights
Verification records are retained while your account is active and thereafter only where required by law (e.g., anti-money-laundering and tax record-keeping). All rights in Section 8 below (access, correction, erasure, withdrawal of consent) apply to verification data, including the right to request correction of a name mismatch or deletion of your verification records.
8. Data Protection & Your Rights
Growlanzo is an India-first platform, and your data is protected in accordance with applicable Indian data protection law, including the Digital Personal Data Protection (DPDP) Act, 2023. We extend the following rights to all users regardless of location:
- Right to Access: You may request a copy of the personal data we hold about you in a structured, portable format.
- Right to Correction: You may request correction of inaccurate or incomplete personal information.
- Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements (e.g., financial records retained for 7 years).
- Right to Withdraw Consent: You may withdraw consent for data processing at any time, though this may affect your ability to use certain platform features.
As Growlanzo expands to other regions, we will extend equivalent rights to users in those jurisdictions in accordance with local law (e.g., GDPR for EU users, CCPA for California users).
International Transfers: Where we process or transfer personal data to jurisdictions outside your country of residence, we take steps intended to help ensure that such transfers are subject to appropriate safeguards where required by applicable law.
To execute any data request or download your workspace history, submit a support ticket through our AI assistant and we'll process your request.
9. Privacy Administration
If you have questions, comments, or seek to file an appeal regarding the processing of data in a disputed contract workspace, please contact our designated Data Protection Officer (DPO): Muhammad (Founder & CEO) at growlanzo.own@gmail.com. We acknowledge privacy requests within 24 hours and aim to resolve them within 15 days.
Have a privacy question?
Create a support ticket and we'll get back to you — all requests are handled securely.