Legal Center

Terms, privacy, cookies, and trust documentation designed for customers, legal teams, IT, and procurement.

HelloGrowthCRM legal — terms, privacy and cookie policies

Why These Documents Matter

Strong CRM vendors typically keep legal, privacy, and trust documentation in one place so buyers do not have to hunt through product pages for operational answers. We have taken the same approach here. This Legal Center brings together the pages most often requested during procurement, security review, privacy evaluation, and commercial diligence.

The Terms of Service explain account use, billing, acceptable use, ownership boundaries, and customer responsibilities. The Privacy Policy explains how personal data and customer data are handled. The Cookie Policy covers website technologies and consent. The Trust Center summarizes certifications, encryption, subprocessors, hosting, and incident response information.

If you are evaluating HelloGrowthCRM for rollout, procurement, or vendor onboarding, these pages are intended to be read together. That gives a more complete picture of operational responsibilities, data handling, platform safeguards, and review readiness than any single page can provide on its own.

Accessibility Statement

Our commitment to inclusive web experiences, WCAG-oriented goals, and how to request assistance or alternative formats.

Delete your account

How to request account deletion in the app or by email, what data we delete, and what we may retain for legal compliance.

Terms of Service

Commercial and product terms for account use, billing, acceptable use, suspension, and customer responsibilities.

Acceptable Use Policy

Prohibited content, communications and dialer rules, AI usage, and how violations are reported and enforced.

Privacy Policy

How we collect, use, disclose, retain, and protect personal data, including DPDPA, GDPR, and CCPA rights.

Cookie Policy

Cookie categories, consent controls, analytics providers, marketing preferences, and browser-level controls.

Privacy rights (DPDPA, GDPR & CCPA)

How individuals in India, the EEA, UK, and California can exercise access, deletion, correction, and related privacy rights.

Submit a privacy request

Self-serve form for DSAR / DPDPA grievance / GDPR / CCPA requests. Acknowledged within 48 hours.

Data Processing Agreement

Full DPA template with TOMs, sub-processors, SCCs and DPDPA terms — read on screen, print, or request a counter-signed copy.

Sub-Processors

Current subprocessors and infrastructure partners involved in hosting, analytics, communications, payments, and support operations.

Refunds & Cancellation

Cancellation rules, 14-day annual refund window, Razorpay / Stripe / PayPal processing timelines.

Service level summary

High-level availability expectations, links to the public status page, and how to obtain enterprise SLAs.

Vulnerability disclosure

How security researchers can report vulnerabilities responsibly before public disclosure.

Trust Center

Security, subprocessor, encryption, availability, incident response, and compliance information for procurement and security reviews.

Legal change log

Privacy Policy · May 9, 2026
Section 12 incident-notification timeframes (72hr) and Section 13 DPDPA §9 minors clauses added.
Data Rights · May 9, 2026
DPDPA rights summary added; self-serve DSAR form launched at /legal/data-rights/request.
DPA · May 9, 2026
Full inline DPA with TOMs and SCCs published; print / save-as-PDF supported.
AUP · May 9, 2026
New Acceptable Use Policy published at /legal/aup.
Refunds · May 9, 2026
New Refunds & Cancellation policy with Razorpay, Stripe, and PayPal handling.
Cookie Policy · May 9, 2026
Cookie banner upgraded to granular Necessary / Analytics / Marketing categories.
Terms of Service · Apr 1, 2026
Clarified AI-assisted output responsibilities and suspension language.

These summaries are meant to speed up review, not replace the full policy text. Whether you are reviewing billing, retention, cookies, subprocessors, access controls, or incident handling, each page is written to answer a specific operational question clearly.