Privacy Policy

Last updated: 18 October 2026

GrownCo Media (“GrownCo”, “we”, “us”, “our”) is a business registered in India (GSTIN 24GAXPP1055B1ZM) with its office at A-504, The Crown, Opp. Kalhar Bungalows, Gangotri Circle, Nikol, Ahmedabad 382350, Gujarat, India. You can reach us at info@growncomedia.com.

This Privacy Policy explains what personal data we collect, why we collect it, how we protect it and what rights you have. It is written to meet India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the rules made under it. If you are outside India, we also respect the rights given to you by the privacy laws of your country.

1. Who this policy applies to

This policy covers everyone whose personal data we handle: visitors to our website, people who contact us or send a brief, our clients and their team members, people who appear in or provide material for the videos we produce, and job applicants.

2. What we collect

Information you give us

• Enquiries and briefs: name, email, phone or WhatsApp number, company, website, budget range and the details of your project.
• Clients: billing name and address, GSTIN, payment details needed to raise invoices, and the contact details of your team members.
• Project materials: logos, product photos, footage, scripts, brand guidelines and anything else you send us to make your content.
• Likeness and voice data: when you order an AI avatar, digital twin or voice clone, the photos, video recordings and voice recordings of the person being recreated, together with their written consent (see section 5).
• Job applications: name, contact details, CV, portfolio links, experience, expected salary, notice period and your answers to application questions.
• Messages: emails, WhatsApp messages and call notes about your project.

Information collected automatically

• Technical data: IP address, browser and device type, pages visited and the time of your visit, kept in server logs for security and to stop spam.
• Cookies and similar technologies: see our Cookie Policy.

We do not ask for sensitive data such as health information, religion, caste or financial account passwords, and we ask you not to send it.

3. How and why we use your data

Purpose	Data used	Basis
Reply to your enquiry and send a quote	Contact and brief details	Your consent when you submit the form
Produce and deliver your project	Project materials, team contacts, likeness data	Our contract with you and the written consent of the person featured
Invoicing, taxes and accounts	Billing details, GSTIN, payment records	Legal obligations under GST and income-tax law
Hiring	Application details and CV	Your consent when you apply
Keep the website secure and working	Technical data, essential cookies	Legitimate use for security and fraud prevention
Understand how the website is used	Analytics cookies, if enabled	Your consent, which you can withdraw
Occasional updates about our services	Email address	Your consent; every email has an opt-out

We do not sell your personal data, and we do not use it for any purpose that is incompatible with the reason you gave it to us.

4. AI tools and the people who help us

We use trusted third-party services to run our business: website hosting, email and messaging, cloud storage, invoicing and payments, analytics (if enabled) and AI generation and editing tools. These providers only receive the data they need to do their job. Where an AI tool offers a setting that stops your material from being used to train its models, we turn it on. We never upload more personal data to an AI tool than a project requires.

5. Likeness, face and voice data

Recordings of a person’s face and voice need extra care, so we follow these rules:

• We only collect them after the person has given separate written consent that describes how the AI twin or voice will be used. For a company, the person featured must sign, not only the company.
• We use them only to create the content agreed with that client, and never for anyone else.
• We store them in access-restricted folders, shared only with the team working on the project.
• We delete the source recordings and the trained avatar or voice model within 90 days after the project or retainer ends, or sooner if the person asks, unless the person agrees in writing that we keep them for future work.

Read more in our AI Content, Likeness & Consent Policy.

6. Sharing your data

We share personal data only with: the service providers described in section 4; freelancers who work on your project under confidentiality obligations; professional advisers such as our accountant or lawyer; and government or law-enforcement authorities when the law requires it. If our business is ever merged or sold, your data would move to the new owner under the same protections.

7. Transfers outside India

Some of our service providers store or process data outside India. When this happens, we use providers with recognised security standards, and we follow any restrictions the Government of India sets on transfers to particular countries.

8. How long we keep data

• Enquiries that don’t become projects: up to 24 months.
• Project files and communication: up to 24 months after the final delivery, so we can help with re-edits, unless you ask us to delete them sooner.
• Likeness and voice data: see section 5.
• Job applications: up to 12 months, so we can contact you about future roles, unless you ask us to delete yours.
• Invoices and accounting records: 8 years, as required by Indian tax law.
• Server logs: up to 6 months.

9. How we protect your data

We use HTTPS encryption on our website, password-protected and access-restricted systems, private storage for CVs and project files, and two-step verification on our key accounts. No method of storage or transfer is 100% secure, but if a personal data breach happens that affects you, we will tell you and the Data Protection Board of India as the law requires.

10. Your rights

Under the DPDP Act and other applicable laws you can:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete or update your data;
• ask us to erase your data when it is no longer needed for the purpose you gave it (we may keep records the law requires us to keep);
• withdraw any consent you have given, as easily as you gave it;
• nominate another person to exercise your rights if you die or become unable to do so;
• raise a complaint with us, and then with the Data Protection Board of India.

Email info@growncomedia.com with the subject “Privacy request”. We reply within 30 days. We may ask you to confirm your identity before acting on a request.

11. Children

Our website and services are for businesses and adults. We do not knowingly collect personal data from anyone under 18. If a project needs to feature a child, we only proceed with verifiable written consent from the child’s parent or legal guardian, and we never use a child’s data for tracking or targeted advertising.

12. Links to other websites

Our website links to and embeds content from other sites, such as YouTube, Google Drive, Vimeo and Instagram. Their own privacy policies apply when you use them.

13. Changes to this policy

We may update this policy as our services or the law change. We will change the “Last updated” date at the top, and if the changes are significant we will make that clear on this page.

14. Contact and grievance officer

For any question, request or complaint about your personal data, contact our Grievance Officer:

Grievance Officer, GrownCo Media
A-504, The Crown, Opp. Kalhar Bungalows, Gangotri Circle, Nikol, Ahmedabad 382350, Gujarat, India
Email: info@growncomedia.com

We acknowledge complaints within 48 hours and aim to resolve them within 30 days.