Privacy policy

Last updated 22 October 2026

This is how Adealsweden AB processes personal data in Growmint. We have two roles. For our customers' users and for visitors to the website we are the controller. For the contacts a customer adds and emails, the customer is the controller and we are the processor.

1. Controller

Adealsweden AB, Eldarvägen 2, 611 72 Stigtomta, Sweden, reg. no. 559443-5413. Questions about personal data go to hello@growmint.ai.

2. Customers and users

We process this data about people who use the service:

Name and email address, and Google account details if you sign in with Google.
Details about the subscription and payments. Card details are handled by Stripe; we store no card numbers.
How the service is used, in technical logs, to troubleshoot and protect the service.
What you write to us in support requests.

3. Why, and on what basis

To provide the service under the contract with the customer (contract).
For bookkeeping and other legal duties (legal obligation).
To protect the service from abuse and to troubleshoot (legitimate interest).

4. Contacts the customer emails

When a customer uses the service, we process on the customer's behalf data about the contacts the customer adds: email address, and name, job title and website where available, public details from the contact's website, the emails sent and received, and whether the contact has asked for no more email.

The data comes from the customer's own list, from public web pages the service finds from the customer's keywords, or from email in the customer's mailbox.

The customer is responsible for being allowed to contact the recipients and for informing them. By default neither opens nor clicks are tracked in outreach.

5. How AI is used

To sort replies and write reply drafts, the project profile, the thread with the recipient and the customer's approved facts are sent to our AI provider, Anthropic. Under Anthropic's commercial terms the data is not used to train their models. Drafts are never sent to the recipient automatically; the customer sends them.

6. Providers that process data for us

Anthropic (AI for sorting replies and writing drafts).
Stripe (payments and invoices).
Google (sign-in with Google, for those who choose it).
Hostinger (the website and the dashboard).
Our provider of servers for the database, sending and background jobs.
DeBounce or MillionVerifier (checking that a contact's email address exists before the first email goes out; the address is sent to the service).
Serper and Crawlbase (searches from the customer's keywords and fetching public web pages, including contact pages, when the service looks for contacts or reads the customer's website).
Hunter (looking up a public contact address for a website that has none, when that feature is used).
Our email provider for sign-in links (the recipient address and the link).

Outreach and replies are sent and read through the customer's own email provider, which the customer has its own agreement with. We use no managed sending-address services for customers' outreach.

7. Transfers outside the EU and EEA

Where a provider processes data outside the EU and EEA, the transfer relies on the safeguards the provider offers, for example the European Commission's standard contractual clauses. Where each provider processes data follows from the provider's own terms.

8. How long data is kept

Account data is kept while the subscription runs.
90 days after the subscription has ended, the account data is deleted, including contacts, email, reply drafts, mailbox sign-in details and the users. The date is shown on the account's plan page while the account is read-only.
The data may remain in the database backups until those copies are overwritten; the backups are used only to restore the service after a failure. What is held by the provider we send email through (campaigns, contacts and mailboxes there) is not removed by the deletion in our database; it is removed at that provider separately.
Bookkeeping records are kept for seven years under Swedish law. After the deletion, the company name, the details of the subscription and invoices, and a note that the data has been deleted therefore remain.
That an address has asked for no more email is kept while the account data exists, so the request is respected.
Technical logs are kept for a limited time for troubleshooting and security.

9. Your rights

You have the right to know what data we hold about you, to have it corrected or deleted, to restrict or object to processing, and to receive your data (portability). You can complain to the Swedish Authority for Privacy Protection (IMY) or the supervisory authority where you live.

Did you get email from one of our customers and want to know what is held about you, or receive no more email? Reply to the sender, or write to hello@growmint.ai. We pass the request on to the customer and can block the address from further sends from the customer's account straight away.

10. Cookies

The website only uses cookies it needs to work: the sign-in session and protection against forged requests. Your browser also stores your choice of language and appearance. We use no cookies for analytics or advertising, and so no consent banner.

11. Security

Traffic to the service is encrypted (HTTPS). Each customer's data is kept apart from other customers'. Mailbox passwords are used only to send and read email in that mailbox.

12. Changes

We update the policy when the service or the providers change. The date at the top shows when it last changed.