1. Who we are
Growth Engine India ("Growth Engine India") provides growth marketing, lead generation, sales enablement, website and content, and AI automation services to businesses. This policy explains how we collect, use, share and protect personal data when you visit our website, contact us, or work with us.
We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, the "DPDP law"), the Information Technology Act, 2000 and rules made under it. Where this policy says "you", it means the individual whose personal data we process (a "Data Principal" under the DPDP law).
2. Personal data we collect
Data you give us
- Enquiries and audit requests: name, company, work email, phone or WhatsApp number, business type, revenue range and the details you write in your message.
- Calls and meetings: notes from discovery calls and, only with your permission, recordings or transcripts.
- Clients: billing contact details, GSTIN, billing address and payment records, and the contact details of people we work with at your company.
Data collected automatically
- Device and browser type, pages visited, referring website, approximate location from IP address, and date and time of visits.
- Cookies and similar technologies, only as described in our Cookie Policy. Analytics cookies are switched off until you allow them.
Data we do not ask for
We do not ask website visitors for financial account details, health data, government ID numbers, biometric data or passwords. Please do not send them through our forms.
The growth calculators on our website run entirely in your browser. The numbers you enter are not sent to us or stored by us.
3. How and why we use it
| Purpose | Data used | Basis |
|---|---|---|
| Reply to your enquiry and schedule a growth audit | Contact details, message | Your consent, given on the form |
| Send proposals, deliver services and manage the engagement | Client contact and project data | Your consent and our contract with your company |
| Invoicing, GST filings, accounting and record-keeping | Billing details, payment records | Legitimate use: compliance with law |
| Understand how visitors use the website and improve it | Analytics data | Your consent through the cookie banner |
| Send occasional updates, guides or invitations | Email address, name | Your separate consent. Every email has an unsubscribe link. |
| Protect the website from spam, fraud and abuse | Technical and form data | Legitimate use permitted by law |
We use personal data only for the purpose it was collected for, or a purpose reasonably connected to it. We do not sell personal data.
4. Data we process for our clients
When we run campaigns, CRMs, WhatsApp flows or AI agents for a client, we often handle personal data of that client's own leads and customers. In those cases the client decides why and how that data is processed and is the Data Fiduciary under the DPDP law. Growth Engine India acts as the client's Data Processor and processes that data only on the client's documented instructions and under a written agreement.
Clients are responsible for obtaining valid consent from their leads and customers, including opt-in for WhatsApp and email marketing, and for complying with TRAI rules on commercial communications. If you are a customer of one of our clients and want to exercise your rights, please contact that business directly. We will help them respond.
5. AI tools and automation
We use AI tools to draft content, summarise calls, qualify leads and automate follow-ups. When personal data is processed by an AI service, we use business-grade services whose terms do not allow them to train their models on our data, and we limit the data shared to what the task requires. Decisions with significant effects on a person are reviewed by a human.
6. Who we share it with
We share personal data only with service providers who help us run our business, under contracts that require them to protect it and use it only for our instructions:
- Workspace, email, documents and storage: Google Workspace
- Website hosting and content delivery
- CRM, email marketing and messaging platforms (for example Zoho, HubSpot or the WhatsApp Business Platform)
- Analytics (Google Analytics, only if you allow analytics cookies)
- AI and automation services described in section 5
- Payment gateways, banks, accountants and auditors
We may also disclose personal data when required by law, court order or a government authority, or to protect our rights, our clients or the public.
7. Transfers outside India
Some of our service providers store or process data on servers outside India. We transfer personal data outside India only as permitted by the DPDP law and will not transfer it to any country or territory the Central Government has restricted.
8. How long we keep it
- Enquiries that do not become projects: up to 24 months from our last contact, then deleted, unless you ask us to delete them sooner.
- Client records: for the duration of the engagement and then as long as needed for legal, tax and accounting purposes. Under Indian tax law this is generally eight years for invoices and books of account.
- Analytics data: 14 months, as configured in Google Analytics.
When personal data is no longer needed, we delete it or make it anonymous, unless the law requires us to keep it.
9. How we protect it
We use reasonable security safeguards, including encrypted connections (HTTPS), two-step verification on business accounts, role-based access, and limiting access to people who need it for their work. Service providers are chosen for their security practices.
If a personal data breach occurs, we will inform the Data Protection Board of India and affected individuals in the form and within the time required by the DPDP law, and take steps to contain it.
10. Your rights and choices
Under the DPDP law you have the right to:
- Access: get a summary of the personal data we hold about you and how we process it.
- Correction and completion: ask us to correct inaccurate or incomplete data and update it.
- Erasure: ask us to delete your data when it is no longer needed, unless the law requires us to keep it.
- Withdraw consent at any time, as easily as you gave it. This does not affect processing done before you withdrew.
- Grievance redressal: raise a complaint with our Grievance Officer.
- Nominate another person to exercise your rights if you die or become incapacitated.
To use any of these rights, email our Grievance Officer (section 14) from the address we have on record, or tell us how to verify your identity. We will respond within the time required by law. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
To stop marketing emails, use the unsubscribe link in any email. To change cookie choices, use "Cookie settings" in the website footer.
11. Children
Our website and services are meant for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.
12. Links to other websites
Our website may link to other websites and platforms. Their privacy practices are their own, and we recommend reading their policies.
13. Changes to this policy
We will update this policy when our practices or the law change. The date at the top shows the latest version. If a change significantly affects how we use your data, we will tell you by email or on the website before it takes effect.
14. Grievance Officer and contact
For questions, requests or complaints about personal data, contact:
We acknowledge complaints promptly and resolve them within the time required by law.