Last updated: August 2, 2025
This Privacy Policy explains how we collect, use and protect your personal data when you access or use the Grow10x Service (https://grow10x.io/ and all related web features) (the “Service”). It forms part of the Terms of Use you accepted (the “Contract”).
This Privacy Policy is based on the provisions of the data protection laws applicable in your country of residence.
The “Controller” of your personal data under this Privacy Policy is the company that operates the Service pursuant to the Contract.
For complete information about the Controller’s identity, please see the Contract. In this Privacy Policy, we refer to each such company as “Grow10x,” “we,” or “us.”
If you have any questions about how we process your personal data under this Policy, you can contact us at:
E-mail: support@grow10x.io
If you reside in another jurisdiction, please consult the specific channels at the end of this Privacy Policy or contact the Data Protection Officer responsible for your jurisdiction.
The following table outlines the categories of personal data we collect and process. We collect this information directly from you, the data subject.
| Data subjects | Category | Description |
|---|---|---|
| Users | Registration data | Personal data we need to collect to create your Grow10x account. This information includes:
|
| Students | Student Data | If you decide to participate in a Grow10x course, we will likely need to receive some additional information about you. This may include:
|
| Users, students, website visitors, Grow10x event participants | Other Data | By using the Service or interacting with Grow10x's team or website, you may choose to provide us with certain personal data about yourself. In particular, this is the case when you contact the support team about various matters or subscribe to receive informational or promotional materials about the Service. For this, we may collect information about your name, and contact information. Please note that all these actions do not require registration. |
| Users, students, website visitors | Cookie | Grow10x uses cookies, including web beacons (aka “pixels”), and other tracking codes on the platform to improve the quality of your user experience (“Cookie”, or “Cookies”). A cookie is a small, very frequently used text file that the browser installs on your device when you visit a website and then sends information about your visit back to the website when you visit it again. Information collected by cookies may include browser information, Internet activity, and usage data. You can learn more about cookies in our Cookie Notice. |
| Tutors | Tutor Data | Grow10x makes some information available about the tutors who participate in its educational courses. This information includes:
|
| Graduating students | Student Data | Grow10x may already have most of this information (or perhaps all), but some personal data may have changed and need to be updated etc). |
We only process your data when we have one of the legal bases mentioned below:
We may process your personal data to provide you with the Service in accordance with the Contract.
We may process your personal data when we (or a third party) have a legitimate interest in using it in a certain way, provided that such processing is both necessary and balanced against any potential impact on your rights and freedoms. Where the data protection laws of your country of residence recognize “legitimate interests” as a lawful basis for processing, we rely on this legal basis to:
If you reside in a jurisdiction that does not recognize “legitimate interests” as a valid legal basis, we will instead rely on any alternative legal bases provided under that country’s data protection laws.
When required by applicable law, we will process your personal data based on your consent. You may withdraw your consent at any time without affecting the lawfulness of any processing carried out before your withdrawal.
When we need to process your personal data to comply with applicable laws.
The table below defines the following:
| Purpose of the processing of your data | Legal basis | Categories of personal data used for this purpose |
|---|---|---|
| Provision of Service | Performance of Contract | Registration data, student data |
| Provision of educational and career opportunities for graduating students | Consent | Graduating students' data related to education and professional qualification |
| Service improvement | Legitimate Interest | Registration data, student data, other data, cookies |
| Inform active and potential students about our courses and educational opportunities | Consent, legitimate interest | Student data, registration data (with the data subject's consent), other data, tutor data |
| For marketing, promotion, and advertising purposes, including targeted advertising based on your personal data that we collect | Consent, legitimate interest | Other data, student data, registration data (with the data subject's consent), cookies |
| Ensuring the security and integrity of our network and detecting, investigating, and preventing activities that may violate our policies and terms, cause security problems, or be fraudulent or illegal. | Legitimate Interest | Other data, student data, registration data, tutor data |
| Compliance with legal obligations and requests or regulatory | Compliance with obligation legal or regulatory | Registration data, student data, other data, cookies, tutor data |
| Establish, exercise, or defend legal rights | Legitimate Interest | Registration data, student data, other data, cookies, tutor data |
| Perform planning, prepare reports, and make business forecasts | Legitimate Interest | Registration data, student data, other data, cookies, tutor data |
| Conduct research, surveys, and contests | Performance of Contract, legitimate interest, consent | Registration data, student and graduating student data, other data, cookies, tutor data |
| Record video conferences and communications in chats, monitor and improve service quality, and defend legal claims. | Legitimate Interest, consent | Correspondence and calls between users and Grow10x's support team |
When applicable data protection laws require that we process certain personal data only with your explicit consent (or another lawful basis), we will obtain that consent or rely on the appropriate legal ground. In those circumstances, the table above applies only insofar as its purposes, legal bases, and data categories comply with the relevant legal requirements.
Accordingly, the lawful bases we rely on to process your personal data may differ depending on the data protection laws in your country of residence.
Disclosure of Your Personal Data
We may disclose your personal data to the following recipients, to the extent required or permitted by applicable law and in line with your legitimate requests:
All third parties listed above may only process your personal data for the specific purposes of performing their contractual functions and are prohibited from using it for any other purpose.
When you purchase our courses or other products, you may be redirected to external websites operated by our trusted payment service providers. Once your payment is completed, we only receive confirmation of the transaction status.
We do not collect, access, or store any of your payment details (e.g., card numbers, bank account information).
We have no control over and cannot view any information you enter on the payment provider’s site.
All payment processing is handled directly by the third‑party provider under its own privacy policy.
Please note that any data you submit during checkout is subject to the provider’s terms and privacy practices, over which Grow10x has no control.
Our Privacy Policy explains how we collect, use, protect, and disclose your personal data within the Grow10x Service. However, the Service may include links to external websites and platforms not operated by Grow10x, for example, Zoom and other video‑conferencing or webinar tools that enable you to attend classes online.
WE STRONGLY RECOMMEND THAT YOU REVIEW THE PRIVACY POLICY OF ANY THIRD-PARTY SITE OR SERVICE YOU ACCESS THROUGH OUR SERVICE.
Grow10x is a global company. We may transfer, store, and process your personal data outside your country of residence, including in the United States, the European Economic Area (“EEA”), Brazil, and other jurisdictions where our subprocessors and service providers operate. These transfers enable us to deliver, host, and support the Service worldwide.
| Key details for each transfer | Form of Transfer |
|---|---|
United States: cloud hosting, data backup, customer support, analytics, marketing, R&D Brazil: analytics, email delivery, localized marketing. Other jurisdictions where our processors maintain data centers, strictly to perform contracted functions. | Electronic transfers over secure, encrypted channels (e.g. HTTPS). Data may be stored on servers operated by our cloud and service providers. |
To ensure your data receives adequate protection, we rely on one or more of the following, as permitted by applicable law:
For full transparency on our international data transfer practices, including complete lists of recipients and detailed data processing agreement(s), data subjects may request more information by contacting us at support@grow10x.io (see Section 1) or the designated Data Protection Officer, as indicated in the jurisdiction-specific sections.
We retain your personal data only for as long as necessary to fulfill the purposes described in Section 3 of this Privacy Policy, while your account is active and for up to seven (7) years thereafter (or longer if required to meet legal obligations). Once that period expires, we will securely delete or irreversibly anonymize your personal data.
We implement appropriate physical, technical, and organizational safeguards proportional to the sensitivity of the personal data we collect to help protect against accidental loss, unauthorized access, or disclosure. These measures include, but are not limited to:
Please note that, while we strive to protect your data, no security measures are completely impenetrable. We cannot guarantee that information you transmit to us over the Internet will never be intercepted.
Below, you’ll find a table outlining your rights and their descriptions as they apply to your jurisdiction.
| Right | Description |
|---|---|
| Access and Confirmation | You may ask Grow10x to confirm whether or not we process your personal data. If so, you may access this personal data and request that we explain certain details of the processing. |
| Rectification (correction of incomplete, inaccurate, or outdated data) | You may ask us to correct your personal data if it is inaccurate. If this is in conformity with the purposes of processing, you may request the rectification of incomplete or inaccurate personal data. |
| Deletion or anonymization | You may ask us to eliminate or anonymize personal data related to you as per applicable law. For example, this applies when (1) personal data is no longer necessary for the purposes of processing; (2) you revoke your consent for the processing, and there is no other legal basis for the processing; 3) if personal data is unnecessary or has been processed in non-compliance with applicable law. |
| Restriction of processing | You may request the restriction (blocking) of certain personal data to limit the future process data as per applicable law. This applies if (1) you contest the accuracy of the personal data; (2) you ask to restrict the use of personal data when the process is non-compliant with applicable law ; (3) you need to limit the processing of personal data to protect your rights, while Grow10x no longer needs the personal data; (4) you object to the data processing based on the legitimate interests pursued by us or a third party. |
| Objection to processing (if provided to the data subject according to applicable laws) | You may object at any time, for reasons related to your particular situation, to the processing of personal data related to you if it is based on one of the hypotheses of consent exemption, in case of non-compliance with applicable law. We will cease to process your personal data, unless we can demonstrate a legal basis for the data processing that overrides your interests, rights, and freedoms, or for the compliance with a legal or regulatory obligation or regular exercise of rights. |
| Portability (if provided to the data subject according to applicable laws) | When the data processing is based on your consent or on a contract you signed with us, you may receive the personal data you provided to Grow10x in a structured, commonly used, and machine-readable format and freely transmit this data to another controller. Whenever technically possible, the data subject may also request that Grow10x transmit the personal data directly to another controller. |
| Information about public and private entities with which personal data has been shared | If Grow10x carries out the shared use of your personal data with other public or private entities, you may request information about the entities. |
| Information about the possibility of not providing consent and about the consequences of refusal | When the processing of personal data is based on your consent, you may be informed about the consequences of refusal, should you not provide your consent. |
| Review of automated decisions (if allowed to the data subject according to applicable laws) | When the processing of personal data involves an automated decision, you may request a review of this decision, should it affect your interests. |
To exercise your rights (subject to any legal limitations), please contact us using the details provided in Section 1 of this Privacy Policy or the designated Data Protection Officer, as indicated in the jurisdiction-specific sections.
If our processing relies on your consent, you may withdraw that consent at any time without affecting the lawfulness of any processing carried out before your withdrawal.
To opt out of electronic communications, you can:
Where granted by applicable law, you may lodge a complaint with the data protection authority in your country of residence.
We only collect the personal data strictly necessary to deliver the Service and to fulfill the purposes described in Section 3 of this Privacy Policy.
There is no legal or contractual requirement for you to share your personal data with Grow10x providing such information is entirely voluntary, and you may choose not to disclose any personal data to us.
No Collection from Minors: We do not knowingly collect personal data from anyone under eighteen (18) years of age.
Under‑18 Users: If you are under 18, please do not register for our Service or submit any personal information.
Parental Rights: If you are a parent or legal guardian and believe that your child under 18 has provided us with personal data in violation of this Policy, please contact us using the details in Section 1 of this Privacy Policy.
We may update this Privacy Policy at any time, at our sole discretion. If we make significant changes, we will notify you by appropriate means (for example, via email or a notice on our website). If you do not receive a direct notification, you can always review the latest version here.
Each time we amend this Policy, the “Last updated” date at the top will reflect the change. We recommend that you check this page periodically to stay informed of any updates. All changes take effect immediately upon posting.
If you have difficulty accessing this Privacy Policy online, please contact us using the details in Section 1. We will provide you, at no cost, with a copy of this Policy in an alternative, easy‑to‑read format, upon request.
Please note that we will not collect or process any additional sensitive personal data, such as health information in connection with your request for an alternative format.
You may contact Grow10x, the data controller, to exercise any of your rights provided in this Privacy Policy.
According to the Brazilian General Data Protection Law and applicable regulations, Grow10x has appointed Grow10x as Data Protection Officer (DPO). You may contact the DPO through the e-mail address support@grow10x.io.
The email address support@grow10x.io is also designated for official communications with Brazilian National Data Protection Authority (“Autoridade Nacional de Proteção de Dados” or “ANPD”).
This section of the Privacy Policy is valid only for California residents. Where applicable, this section shall prevail over all other parts of the Privacy Policy in case of discrepancies.
Personal information collected during the last 12 months.
The personal information we collect directly from you:
| Categories of data collected | Your data collected by us and why it was collected |
|---|---|
| Identifiers | Depending on the data subject category defined in Section 2, we may collect the following data:
|
| Characteristics of protected classifications under California or federal law |
|
| Commercial information | record of Grow10x services purchased or considered for purchase |
| Geolocation data | No data |
| Financial information | None. Please note that we use third-party payment processors to facilitate your payments and do not store your payment card data. |
| Biometric data | No data. |
| Audio, electronic, visual, thermal, olfactory, or similar information. | No data. |
| Internet/network activity | As described in Section 11: Cookies. |
| Professional or employment-related information | Depending on the data subject category defined in Section 2, we may collect the following data:
|
| Educational information | The highest degree or level of education and your field of study; |
| Device information | No data |
We do not sell your personal information to third parties.
Categories of personal information disclosed during the last 12 months:
| Categories of data disclosed | Types of entities to which your data was disclosed | Reason for data disclosure |
|---|---|---|
| Identifiers, Characteristics of protected classifications under California or federal law, Commercial information, Internet/network activity, Professional information, employment-related and educational | Categories of recipients: Please see Section 4. | Service provision, Improve services, inform active and potential students about courses and educational opportunities, to ensure the security and integrity of our network and detect, investigate, and prevent activities that may violate our policies and terms, cause security problems, or be fraudulent or illegal. for marketing, promotion, and advertising purposes, to comply with legal obligations and requests, establish, exercise, or defend legal rights, perform planning, prepare reports, and make business forecasts; conduct research, surveys, and contests. |
Information that we sell
We do not sell your personal information to third parties.
We have policies and procedures that facilitate the exercise of privacy rights available to California residents under applicable law. If you are a California resident, you may have the right to the following:
As mentioned above, California residents have certain rights to access, delete their personal information, or otherwise exercise their rights under the California Consumer Privacy Act of 2018 ("California Consumer Privacy Act of 2018"). Grow10x will respond to a "verifiable request" from an individual to exercise their rights under the LPCC – that is, when Grow10x receives a request purportedly sent by a particular individual and can verify the individual's identity. The need to verify an individual's identity is crucial for us to protect your information and ensure that it is not shared with someone pretending to be you or someone not authorized to act on your behalf.
To request the removal of information about minors from this website, their parents or guardians may submit a request with the subject "Removal of minors' information." These requests must be submitted by a child's parent or legal guardian; minors cannot send us information via email.
We do not support Do Not Track. Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable "Do Not Track" by visiting your web browser's "Preferences" or "Settings" page.
Third parties may collect data related to you. We cannot control third-party responses to do-not-track signals or other such mechanisms. The use of data related to you by third parties and their responsiveness to do-not-track signals are governed by their respective privacy policies.
If you are a California resident and have any questions about this Privacy Policy, our practices, or your personal information, please contact us using the contact information at the top of this Policy.
(Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia):
Unless otherwise stated by the law of your state of residence, the provisions in Chapter B “Privacy Information for California Residents” will apply to the processing of your data. If you have questions related to your rights or any other aspects of this Privacy Policy, please contact us using the methods outlined in Section 1.
Your Rights under various United Sates state data privacy laws such as the Colorado Privacy Act, Connecticut Data Privacy Act, Delaware Personal Data Privacy Act, Indiana Consumer Data Protection Act, Iowa Consumer Data Protection Act, Kentucky Consumer Data Protection Act, Maryland Online Data Privacy Act, Minnesota Consumer Data Privacy Act, Montana Consumer Data Privacy Act, Nebraska Data Privacy Act, New Hampshire SB 255, New Jersey SB 332, Oregon Consumer Privacy Act, Tennessee Information Protection Act, Texas Data Privacy and Security Act, Utah Consumer Privacy Act, and the Virginia Consumer Data Protection Act.
For residents from the states of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia this section allows you to exercise your rights under the applicable state law.
Submitting a Verifiable Request under the United States’ State Laws.