The short version
- We collect what we need to run your account and your package, take payments and answer payment disputes.
- We never ask for the password of your Instagram, TikTok or YouTube account, and your card details go straight to Stripe.
- We never sell your personal data.
- No analytics or advertising cookies.
- You can ask to see, correct or delete your data at any time.
1 Who we are
Sterr Technologies OÜ runs Growsterr and is the controller of your personal data under the EU General Data Protection Regulation (GDPR). We're a private limited company registered in Estonia under registry code 17591465, at Tornimäe tn 5, Kesklinna linnaosa, 10145 Tallinn, Estonia.
This policy covers our website (growsterr.com), your Growsterr account and our packages. For anything about your data, write to [email protected].
2 What we collect
- Your account. Your email address and your password, which we store only as a one-way hash, so nobody can read it. If you continue with Google, Google shares your name and email address with us. We also note the language you use on our site.
- Your package. The platform, your public username and profile link, the location you'd like most of your audience to come from, the package and its price, and when it started, renews or ends.
- Your phone number. You give it on the order form so we can stay in touch with you about your package, by phone or message.
- Payments. Stripe handles them. We keep the amount, date and status of your payments, and Stripe's reference numbers for you, your subscription and your payments. Your card details never reach us.
- Delivery numbers. For each day of your package, Linksterr, our delivery network, measures how many people your profile was shown to, the visits it got, the new followers counted and the countries the visits came from. We also keep your account's public follower count and an estimate for the next 30 days. Your dashboard shows the visits, countries and new followers; we keep all of these numbers as delivery records.
- Your acceptance of the terms. When you tick the box on the order form: the date and time, the version of the terms, your IP address and your browser.
- Account activity. Sign-ins, visits to your dashboard (at most one record an hour) and visits to the cancel page, each with the time, IP address and browser. We keep these as evidence in case a payment is disputed.
- How you found us. The page you ordered from, and any campaign tags or ad click ID in the link that brought you, such as
utm_sourceorgclid. - Messages. What you write to us, and the emails we send you.
- Server logs. Like any website, our servers log requests: IP address, page, time and browser.
We never ask for the password of your Instagram, TikTok or YouTube account, and we don't need any access to it.
3 Why we use it
We use your data only for what we collected it for, and each use has a legal basis under the GDPR:
| What we do | Legal basis |
|---|---|
| Run your account and sign you in | Our contract with you (Art. 6(1)(b)) |
| Run your package: promote your profile, measure delivery and fill your dashboard | Our contract with you (Art. 6(1)(b)) |
| Take payments and send the emails your subscription needs: confirmations, renewal reminders, payment problems and cancellations | Our contract with you (Art. 6(1)(b)) |
| Stay in touch with you about your package by phone or message | Our contract with you (Art. 6(1)(b)), and our legitimate interest in looking after our customers (Art. 6(1)(f)) |
| Keep records of your order, your acceptance of the terms, delivery and account activity, and use them to answer payment disputes and prevent fraud | Legitimate interests (Art. 6(1)(f)): preventing fraud, and establishing or defending legal claims |
| Keep our website secure and working | Legitimate interests (Art. 6(1)(f)) |
| Keep accounting and tax records | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we've weighed them against your rights and interests, and you can object at any time (section 8). We don't send marketing emails. If that ever changes, we'll ask for your consent first.
4 Who helps us
We never sell your personal data. We share it only with the services that help us run Growsterr, and only what each one needs:
| Service | What it does for us | What it receives |
|---|---|---|
| Stripe | Payments, the billing page and fraud checks | Your email address, your payment details and the IP address you pay from |
| “Continue with Google” sign-in, only if you use it | Google tells us your name and email address | |
| Resend | Sends our emails | Your email address and the emails we send you |
| Supabase | Our database and file storage | The data in your account |
| Render | Hosts our website and servers | Everything that passes through our website, including server logs |
| Linksterr | Our delivery network: runs the promoted campaigns that show your profile to people, and measures delivery | Your platform, username and target location, your package with its price and dates, and your account's follower count. Never your email address, phone number or payment details |
| Google Fonts | Delivers our typefaces when a page loads | Your IP address and browser details |
Stripe and Google also handle some of this data as independent controllers, under their own privacy policies: Stripe for its own fraud prevention and legal duties, Google for your Google account. When we talk on WhatsApp, WhatsApp handles those messages under its own terms.
We may also share data when the law requires it, for example with tax authorities or courts, and with Stripe and your card issuer when a payment is disputed (Terms, payment disputes).
5 Transfers outside the EEA
Our company is registered in the EU, in Estonia. Some of the services above are based in the United States or process data there, and our own team also works from outside the European Economic Area, including from Turkey, reaching your data only through our own systems and under this policy.
When a service outside the European Economic Area receives personal data, it's protected by the EU–US Data Privacy Framework, where the provider is certified under it, or by the European Commission's Standard Contractual Clauses. Write to us if you'd like the details.
6 How long we keep it
- Your account, packages, delivery numbers and activity records: for as long as your account is open.
- When you ask us to delete your account: we delete or anonymize your data within 30 days, except what we must keep. That's the payment and invoice records accounting law requires us to keep (in Estonia, generally 7 years), and the records about a subscription that we need while a payment can still be disputed (up to 18 months after your last payment) or while a dispute is open.
- Orders you started but didn't pay for: they stay in your account so you can finish them, until you ask us to delete them or your account.
- Server logs: kept for a short time by our host, then deleted.
7 Security
We use encrypted connections (HTTPS) everywhere, store passwords only as one-way hashes, give access only to the people who need it, and choose providers that protect data to high standards. If a breach ever puts your data at risk, we'll tell you and the authorities as the law requires.
8 Your rights
Under the GDPR, you can ask us to:
- show you the personal data we hold about you, and give you a copy;
- correct anything that's wrong or incomplete;
- delete your data, with the exceptions in section 6;
- restrict how we use it;
- hand over the data you gave us in a machine-readable format;
- stop using it where we rely on legitimate interests, if you object;
- stop using it where you gave consent, if you withdraw it.
Write to us at [email protected], ideally from the email address on your account. We may ask you to confirm it's you. We answer within one month, and we don't charge for it.
We don't make decisions about you based only on automated processing that have legal or similarly significant effects.
You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or to the data protection authority where you live or work.
9 Age
Growsterr is for adults. You must be 18 or older to create an account or buy a package, and we don't knowingly collect personal data from children. If you think a child has given us personal data, tell us and we'll delete it.
10 Cookies
We use only the cookies our website needs to work, and no analytics or advertising cookies. Our Cookie Policy lists them.
11 Changes to this policy
We'll update this policy when our service or the law changes, and change the date at the top of this page. If a change matters, we'll tell account holders by email before it applies.
12 Contact
- Company
- Sterr Technologies OÜ
- Registered in
- Estonian Business Register (e-Äriregister)
- Registry code
- 17591465
- Address
- Tornimäe tn 5, Kesklinna linnaosa, 10145 Tallinn, Estonia
- [email protected]
- +90 541 448 75 61
Questions or requests about your data? Write to us; a person on our team will answer.