Your ideas. Your information.

Who to contact

For privacy questions, access requests, corrections, exports, account deletion, or complaints, email info@growyourwebs.com. Use the email associated with your account so we can verify your request without asking you to send a password. Company information is available at growyourwebs.com.

Information the preview handles

• Account email, account identifier, sign-in details and, where a configured provider returns it, display name.
• Brand names, colors, voice preferences, language, timezone, calendar topics, dates, post captions, notes, approval status and Canva design links that you save.
• Necessary session information stored by the authentication service and in your browser, along with technical request, security and hosting logs.
• Support messages and the contact details you choose to share when you contact GrowYourWebs.

Calendar files are parsed in your browser. When you confirm an import, the selected calendar records are sent to the workspace database; the original file is not uploaded to Planvori storage by this import flow. Do not include passwords, payment-card information, sensitive personal records, or information you are not authorized to share.

Why we use it

We use this information to authenticate your account, save and display your workspace, provide drafts and approvals, respond to requests, prevent misuse, and operate and troubleshoot the service. Where local law requires a legal basis, the relevant basis depends on the purpose: providing the service you request, legitimate security and operational interests where permitted, compliance with legal obligations, or your consent where required. Optional marketing is not part of this preview.

Service providers and international processing

Planvori uses Supabase for authentication, its PostgreSQL database, and private generated-image storage; the configured database is in the Mumbai region. The website and server APIs run on Vercel. Authentication, hosting, support, and operational processing may involve other countries. A database region is not a promise that every copy or category of information stays only in that country.

Canva links open Canva, which operates under its own terms and privacy notice. Instagram publishing, automatic Canva generation and live calendar synchronization are not connected in the current preview. We will update this notice before introducing materially different processing. Google sign-in is available only after its provider is configured; if used, it provides account identity information rather than access to your calendar or social media content.

AI images, API keys and payments

When you request an AI image, Planvori sends your prompt and selected brand name, industry, color and voice to OpenAI. You can choose a customer-owned OpenAI key or configured Planvori credits. Customer keys are encrypted with authenticated encryption and stored in a private, server-only area of the Supabase database; the application displays only the final four characters. We decrypt a key only to make your requested provider call. It is not stored in browser local storage or returned by a settings API. Removing it from Planvori does not revoke it at OpenAI or stop an already-running request.

Generated images are stored in a private Supabase Storage bucket. Image prompts, request status, technical usage, credit balances and order records are stored in the same private, server-only database area and tied to your Supabase account identifier. Image downloads require your authenticated account. You can delete generated images from history; used credits are not restored for deleting a successful image. Supabase and Vercel may process this information internationally.

Dodo Payments, the merchant of record for credit purchases, receives your account email and an internal order reference to create checkout. Dodo collects payment and billing information in its hosted checkout and handles it under its own privacy notice; Planvori does not receive your full card details. Planvori retains order references, payment identifiers and credit records to deliver purchases, prevent duplicate grants and investigate refunds or disputes. BYOK requests are billed by OpenAI under your provider account terms. Contact support for account deletion, including AI and billing records; some transaction records may need lawful retention.

Cookies, storage, analytics and sharing

The application uses necessary authentication storage. Fonts are served with the website. We have not added advertising pixels or optional analytics to Planvori. Hosting providers may keep necessary operational records. See cookies and local storage. We do not operate a personal-data sale or advertising-sharing feature. Information may be disclosed to service providers needed to operate the product or where required by applicable law.

Retention and deletion

Workspace records remain until you delete them or GrowYourWebs processes a verified account or deletion request, subject to lawful retention needs. You can delete individual posts in the workspace and export the calendar. Full account deletion is currently handled through support; it is not an automatic in-app account-delete feature. Provider logs and backups may follow their own retention and deletion cycles. We will explain any applicable exceptions when responding to a request.

Your choices and rights

Depending on the laws that apply to you, you may have rights to access, correct, export, delete, restrict, or object to processing; withdraw consent where processing relies on it; and complain to an applicable supervisory authority. Contact us using the address above. We may need proportionate identity verification and will handle requests within applicable legal deadlines. Do not send identity documents unless specifically necessary and requested through an appropriate channel.

Business customers and other people’s data

If you manage a brand for a client, you must have permission to provide its content and any personal information. GrowYourWebs handles account administration for its own service; handling personal information within customer content may require a separate data-processing agreement. Contact us before using the preview for regulated or sensitive processing.

Children and changes

Planvori is intended for business users aged 18 or over, not children. Contact us if a child has provided information. We will update this notice when the product or its processing changes, with a new date and additional notice where required.

Instagram publishing, when available

If you connect Instagram, Planvori stores your Instagram account ID, username, encrypted access token and token expiry, along with the finished images, saved captions, schedule and delivery status you choose for publishing. Meta receives the approved image and caption when Planvori prepares and publishes the post. A temporary image URL lets Meta fetch that image. Vercel Workflow processes the scheduled job while your browser is closed. Publishing images are stored privately in Supabase.

Disconnect in Connections to remove the saved token and cancel queued posts. You can also revoke access in Instagram’s Apps and websites settings. Posts already published on Instagram remain there. See our Instagram data deletion instructions to request removal of associated images and delivery records. A Meta deletion request revokes the saved connection immediately and creates a deletion request for us to complete; its confirmation page shows the actual status.