Privacy notice

This notice explains what Grow Today collects when you use the diagnostic assessment, why we collect it, and the choices you have. Grow Today is the service arm of Aureum Capital.

Operating entity

[PLACEHOLDER: legal operating entity name] of [PLACEHOLDER: registered mailing address] is the controller of this information. These placeholders must be completed before publication.

What we collect

• Assessment answers you submit, including your first name, company, email, and optional phone number. This is the information you intentionally provide to receive your analysis.
• First-party product analytics: a per-tab session identifier, which questions were viewed, answered, skipped, or navigated back from, active on-screen time, scroll depth on the analysis and guide, and clicks on product calls to action.
• Coarse technical context: device category, browser family, operating system family, language, timezone, and viewport size bucket.
• Approximate location derived at our edge network: country, region, and city only.
• Referrer host and UTM campaign parameters from your first and last visit.
• Application logs. When you complete the assessment, the submitted payload is written to our server application logs so we can troubleshoot delivery and generation problems.

Storage in your browser

While you move through the assessment, your progress is kept in sessionStorage for the current tab. When you complete the assessment, your completed answer set, including the branch you were routed into, all answers, the contact details you submitted, and the submission time, is written to persistent localStorage under the key "grow-today-assessment". That entry stays on your device until a later completion overwrites it or you clear site data for this site. Your generated analysis is also cached in sessionStorage for the current tab.

What we do not collect

• We do not store IP addresses, in raw or hashed form.
• We do not use canvas, font, or device fingerprinting.
• We do not request browser GPS or precise location.
• We do not copy your free-text business description into analytics records. It stays in the assessment delivery workflow only.
• Grow Today does not currently sell personal information for money. The Whop attribution disclosure described on this page may be treated as a sale, sharing, or targeted advertising under some applicable laws. Where applicable, the required notice and choice are provided through Your Privacy Choices.

Why we collect it

To deliver your assessment and analysis, to contact you about it, to understand where the assessment is confusing or incomplete, and to measure interest in our paid products.

Service providers

• Lovable and Lovable Cloud: hosting for the site, the server functions, the database, and the application logs described above.
• Supabase: database and authentication infrastructure behind Lovable Cloud.
• HighLevel: CRM. A partial lead is sent after the email step, and the completed submission creates or updates the full lead with your answers, optional phone number, and report link so we can deliver the assessment and follow up.
• OpenRouter: model provider. It receives the assessment information needed to generate your written analysis.
• Whop: checkout and payment platform for paid products. With your Marketing consent, Whop browser tracking may receive the event and its properties along with your email, branch, archetype, source, and session timestamp. Verified payment notifications from Whop may be stored by us as the payment identifier, product slug or identifier, amount, currency, purchase time, purchaser email when supplied, and a linked session or identity record when available. We do not retain the raw payment notification, card details, billing address, IP address, or user agent in our database.

Stored assessments and report links

When you complete the assessment we store a report record server-side in our Lovable Cloud database. That record includes the submission identifier, your email, first name, and company, your branch and archetype, your scored axis results, the generated written analysis, generation metadata such as model, timing, and status, the security and access metadata for your report link, and the status of syncing that link to our CRM. The report record does not currently store your raw question-by-question answers. Your full submitted payload is separately sent to HighLevel and written to our application logs, as described above.

Authorized team members can open stored reports through the authenticated internal analytics area. The database rows are not readable by the public site; they are reachable only through server-side code with elevated credentials.

Your own copy of the report is delivered through an individualized bearer link. Anyone holding that link can view the lead-safe version of the report, so treat it as private. The URL contains no email address, company name, or raw answers, and we store only a SHA-256 hash of the random token rather than the token itself. Links stay active until they are rotated, revoked, deleted, or otherwise disabled; rotating a link immediately invalidates the previous one. There is no automatic expiry today. Report links may be delivered or resent through HighLevel.

Automated email and follow-up

Your assessment is generated immediately after you submit it. We may use automated email to deliver the assessment, remind you if you left it incomplete, resend your report, and share relevant next steps or paid offers. You can unsubscribe from promotional email at any time. Declining optional analytics does not stop this operational and follow-up email.

Marketing and attribution technologies

Grow Today may use Whop purchase attribution. It is classified as Marketing. It may load or run only after you give explicit Marketing consent, and declining or later withdrawing Marketing blocks further attribution events. When it runs, the payload can include the event and its properties along with your email, branch, archetype, source, and session timestamp, which lets a purchase be attributed to your visit. Global Privacy Control and Do Not Track signals are treated as a decline.

Checkout links to paid products may include attribution or referral parameters. Grow Today, Aureum Capital, or a participating partner may use those parameters to attribute a purchase or related compensation.

Retention

Optional engagement analytics records are deleted after 12 months. That schedule runs monthly against the analytics tables only. The completed assessment stored in your browser stays on your device until a later completion overwrites it or you clear site data. Application logs follow the operational retention of our hosting platform. Assessment records, report records, and CRM contacts are retained as long as needed to deliver the assessment, follow up with you, operate and secure the service, handle disputes, and meet legal obligations. Transaction records may be retained as needed for refunds, fraud prevention, accounting, and legal obligations. Aggregated, non-identifying metrics may be kept longer.

Your choices

Optional analytics and optional marketing or attribution are separate choices, and each one only runs after you accept it. You can change either decision at any time using the privacy preferences control in the footer. We treat Global Privacy Control and Do Not Track signals as a decline for both.

Declining optional analytics stops engagement measurement: device and browser context, UTM parameters, approximate geo, scroll depth, dwell time, and click tracking are not stored. It does not stop the processing we need to run the service. Without analytics consent we still save your progress, create a partial or full lead after the email step, generate, store, and deliver the assessment you asked for, maintain its report link, sync that link to HighLevel, and follow up with you about the assessment. Only the minimal session, identity, and status data used for those operations is stored. To request a copy or deletion of your data, see your privacy rights below or write to grow@aureumventurecap.com.

Your privacy rights

Optional analytics and optional marketing or attribution are separate categories, and each only runs after an explicit accept. Change either at any time here.

Access, correction, and deletion requests

You may request access to, correction of, or deletion of your information by emailing grow@aureumventurecap.com. Use the subject "Data access request" or "Data deletion request" and write from the address you used in the assessment where possible. Requests are handled manually. We may need to verify your identity before acting, and we review and fulfil requests as required by applicable law. Some records may be retained where permitted or required, including for transactions, fraud prevention and security, accounting, disputes, and other legal obligations.

You can remove the completed assessment saved in your own browser at any time by clearing site data for this site.

What we cannot look up

We do not store IP addresses or device fingerprints, so anonymous sessions that never reached the email step cannot be tied to a person and cannot be individually retrieved.

Email follow-up

Your assessment is generated immediately. We may use automated email to deliver it, remind you if it is incomplete, resend your report, and share relevant next steps or paid offers. Unsubscribe from promotional email at any time using the link in those messages.

Marketing and SMS

Phone numbers are optional and only used if you explicitly opt in on the assessment. Reply STOP to any message to opt out of SMS, or email us to be removed.

Governing law

[PLACEHOLDER: governing law and venue to be supplied by counsel.]

Contact

grow@aureumventurecap.com