GrrrGrowth Extension and App

•

Extension settings saved in Chrome sync, currently the configured app URL.

•

Upwork page information that you choose to capture by clicking the send button, including page URL, page title, job title, selected text, visible page text, notes, and a raw payload with user agent and capture timestamp.

•

Job listings from the Upwork searches you asked the extension to watch, meaning the job title, link, and identifier of each result, so the app can tell you which ones are new.

•

Account and workflow records you create in the companion app, such as proposals, workday logs, proposal intakes, client records, and proposal learning records.

•

Basic technical data needed to operate the service, such as timestamps and server logs.

•

To let you send an Upwork job post to your configured app and get a proposal draft back, and to tell you when a search you asked us to watch turns up something new.

•

To store and organize proposal and workday records for your own workflow.

•

To generate optional AI drafts, proposal advice, and learning records when you use the AI features.

•

To see which kinds of questions members ask the AI about their jobs, so we can improve it. Each question you ask is saved with a short topic. Deleting a chat deletes its words; the topic and its cost stay, with no words attached.

•

To authenticate your account, secure the service, and troubleshoot problems.

•

With the app backend you configure in the extension settings, so the capture can be stored and processed.

•

With Clerk, which handles sign-in and account management, and with Neon, which hosts the database your records are stored in.

•

With Vercel, which hosts and serves the app.

•

With OpenAI, only when you use the AI enrichment or advice features. The intake and proposal fields you submit may be sent to OpenAI to generate a proposal draft, advice, or embeddings.

•

With Stripe, which processes payments if you subscribe. Card details go to Stripe directly and are never held by us.

•

With Migadu, which sends the emails the app owes you, such as sign-in and account notices.

•

With Telegram, only if you link a Telegram account yourself, and only to deliver the notifications you asked for.

•

With service providers that host, secure, or help operate the app. We do not sell personal data.

•

The extension reads Upwork pages only. It does not monitor your browsing, and it collects nothing from any other site.

•

Capturing a job is user initiated: the extension reads the page you are on at the moment you click the draft button on that page.

•

Watched searches work differently, and only for searches you saved yourself. On the schedule you set, the extension opens each saved Upwork search in a background tab, reads the job titles and links it lists, closes that tab, and sends those listings to your account so it can tell you what is new. No other page is opened or read this way.

•

The extension uses Chrome storage to remember its app URL setting, and the browser permissions needed to read the Upwork pages described above, to show you a notification when a watched search finds something, and to copy a finished draft to your clipboard when you turn on auto-copy.

•

Necessary cookies are always on: Clerk sets a session cookie so you stay signed in, and there are cookies that protect sign-in and form submissions from cross-site attacks. Without these the app cannot sign you in.

•

Optional cookie categories are functional, analytics, and marketing/advertising. Your choices are remembered in this browser under gg-cookie-consent, and signing in works either way.

•

Functional cookies remember optional app preferences. Analytics cookies count which pages and features are used. Marketing/advertising cookies support ads, attribution, campaign measurement, or similar tracking.

•

If you allow it, PostHog records which pages and features are used and ties that to your account id once you are signed in, so we can see where people get stuck. It does not record your screen, and it is not used for advertising.

•

We do not sell personal data. Where legally required, we provide opt-out controls for sale, sharing, targeted advertising, and applicable browser privacy signals.

•

You can change your mind at any time using the button below, and you can block or clear cookies or site storage in your browser, though clearing the necessary ones means you will not stay signed in.

•

GrrrGrowth is operated by Ingenix Online Inc, a company registered in Quebec, Canada. Ingenix Online Inc is the controller of the personal data described here.

•

Under Quebec's Law 25, the person responsible for the protection of personal information is the President of Ingenix Online Inc, reachable at support@grrrgrowth.com.

•

If we ever suffer a confidentiality incident that presents a risk of serious injury, we will notify the people affected and the Commission d'accès à l'information, as Law 25 requires.

•

Captured records are kept until you delete them from the app, delete your account, or request deletion.

•

When you delete your account, your data is kept for 14 more days and then erased permanently. See “Deleting your account” below.

•

Extension settings remain in Chrome sync until you change them, clear them, or uninstall the extension.

•

If you want data removed, use the app controls where available or contact the developer using the support contact published with the extension listing.

•

You can delete your account yourself at any time, without asking us: sign in, open Settings, and use Delete this account under the Account tab.

•

Deleting signs you out everywhere immediately and stops the extension from capturing anything else.

•

Your data is then held for 14 days so you can change your mind. Sign back in during that window and cancel the deletion, and your account is restored exactly as it was.

•

After 14 days we permanently erase your proposals, proposal intakes, clients, workday logs, job alerts and seen jobs, templates, capture settings, email preferences, any linked Telegram account, your sign-in, and any matching entry on our waiting list.

•

We keep invoices and payment records for as long as tax and accounting law requires, and a dated note that your deletion request was carried out. That note contains no personal data beyond your former account identifier.

•

If you would rather not use the button, email support@grrrgrowth.com and we will delete the account for you within one month, as GDPR requires.

•

We use access controls and authentication in the companion app so records are tied to your account.

•

No system is perfectly secure, but we aim to minimize data collection and restrict access to the records you create.

•

GrrrGrowth is operated from Canada. Service providers such as Neon, Vercel, OpenAI, Stripe, and Migadu may process data in other countries, including the United States.

•

Where required, we rely on appropriate safeguards for these transfers, such as standard contractual clauses offered by the provider.

•

Wherever you live, you can ask us to see the personal data we hold about you, get a copy of it, correct it, or delete it.

•

A copy of your data comes as a file a computer can read (JSON or CSV), so you can keep it or move it to another service. It covers your account, proposals, proposal intakes, clients, workday logs, job alerts and seen jobs, templates, and settings.

•

To ask, email support@grrrgrowth.com from the address on your account and say what you want. If you write from another address, we will ask you to confirm the request from your account address first, so nobody else can get your data.

•

Requests are free. We only refuse or charge where the law allows it, for example for requests that are clearly unfounded or repeated, and we will tell you why.

•

Deletion is also self-serve: the Delete this account control in Settings does it without you having to ask, on the timeline described under “Deleting your account”.

•

European Union, United Kingdom, and similar regions (GDPR): you can also object to or restrict certain processing, and take your data to another service (portability). We answer within one month. For complex requests we may take up to two more months, and we will tell you within the first month if we need it. You can complain to your local data protection authority.

•

Our legal basis under the GDPR for processing account and workflow data is performance of our service to you and our legitimate interest in operating and improving it.

•

Quebec (Law 25): you can access and correct your personal information, ask for it in a structured, commonly used technological format, and ask that it be sent to another organization. We answer within 30 days. You can complain to the Commission d'accès à l'information.

•

Rest of Canada (PIPEDA): you can access and correct your personal information. We answer within 30 days. If we need more time we will tell you, as the law allows. You can complain to the Office of the Privacy Commissioner of Canada.

•

United States: residents of California and of other states with consumer privacy laws (such as Virginia, Colorado, Connecticut, Utah, Texas, and Oregon) can ask to know, access, correct, delete, or get a portable copy of their personal information. We answer within 45 days, and may extend once by 45 more days where the law allows, telling you why. You will not be treated differently for using these rights.

•

California residents can also use an authorized agent to make a request for them. We may ask the agent for your signed permission and ask you to confirm your identity.

•

If we refuse a request and you live in a US state that gives you the right to appeal, reply to our answer saying you appeal. We will review it and answer within the time your state law sets, usually 45 to 60 days, and tell you how to contact your state attorney general if you disagree.

•

Where applicable, you may opt out of sale, sharing, and targeted advertising, including through browser signals such as Global Privacy Control. We do not sell personal data.