Privacy Policy

Last Updated: 25 Oct 2026

This Privacy Policy explains how Wright & Grow Consulting LLP (“Company”, “we”, “our”, “us”) collects, uses, stores, processes, and protects information when you access or use Wright & Grow (“Platform”, “Service”).

1. Who We Are

Wright & Grow is operated by Wright & Grow Consulting LLP, Pune, Maharashtra, India. For privacy-related questions, you may contact us at support@wrightandgrow.com.

2. Information We Collect

We may collect the following categories of information:

• Account Information: full name, email address, phone number, password hash, login metadata.
• Business Profile Information: company name, industry, employee count, revenue band, ERP/CRM details, owner involvement, products/services summary, and other profile inputs.
• Diagnostic Inputs: business problem selections, answers to diagnostic questions, uploaded or entered business information, and related operational inputs.
• AI Report Data: diagnostic outputs, root causes, solutions, action steps, model metadata, token usage, report generation logs, and timestamps.
• Technical Data: IP address, browser type, operating system, device details, session logs, usage data, error logs, and security logs.
• Communication Preferences: service communication consent, marketing opt-in preference, unsubscribe status.
• Payment / Billing Data: limited transaction metadata, order identifiers, and entitlement data. We do not intentionally store full card details unless explicitly processed and stored by a compliant payment provider.

3. How We Use Your Information

• to create and manage user accounts
• to authenticate users and maintain platform security
• to generate AI-assisted business diagnostic reports
• to save, display, export, and email reports to users
• to respond to support requests and service issues
• to improve product quality, stability, and usability
• to prevent fraud, abuse, misuse, and unauthorized access
• to comply with legal, tax, accounting, and regulatory obligations
• to send service-related messages such as verification emails, report notifications, billing notices, and account alerts
• to send marketing communications only where the user has explicitly opted in

4. AI Processing Disclosure

The Platform uses artificial intelligence technologies to generate business diagnostic insights, summaries, root cause hypotheses, recommended solutions, and action steps based on user-provided inputs.

Certain information you provide may be processed by third-party AI providers, including OpenAI, solely for the purpose of generating requested outputs and improving service delivery, subject to applicable contractual and technical safeguards.

AI-generated outputs may be inaccurate, incomplete, generalized, or unsuitable for a particular business context. Users must independently evaluate outputs before acting on them.

5. Legal Basis / Consent

We process personal data based on one or more of the following: user consent, performance of a contract, compliance with legal obligations, legitimate business interests such as platform security and fraud prevention, and service administration.

By signing up and using the Platform, you consent to the processing of your personal and business information for the purposes described in this Privacy Policy.

6. Service and Marketing Communications

We may send service-related communications through email, WhatsApp, SMS, or phone call where required to deliver the Service, including account verification, report delivery, support responses, payment alerts, and critical operational notices.

Marketing and promotional communications are sent only if you have separately opted in. You may unsubscribe from marketing communications at any time.

7. Cookies and Similar Technologies

We use cookies and similar technologies for authentication, session continuity, security, analytics, and performance optimization.

8. Data Sharing

We may share information with:

• AI service providers for generating outputs
• hosting and infrastructure providers
• email delivery providers
• payment processors
• analytics and monitoring providers
• professional advisors such as auditors, lawyers, or accountants where necessary
• government or law enforcement authorities where required by law

We do not sell your personal data as a standalone data asset.

9. International Data Transfers

Because the Platform may use global service providers, your information may be processed in India or in other jurisdictions where our service providers operate.

10. Data Security

We implement reasonable technical and organizational safeguards, including access controls, authentication measures, secure hosting practices, encryption in transit where applicable, logging, and role-based permissions.

11. Data Retention

We retain data only for as long as necessary for platform operation, legal compliance, dispute resolution, audit purposes, enforcement of agreements, and legitimate business needs.

12. User Rights

Subject to applicable law, you may request:

• access to your data
• correction of inaccurate data
• deletion of your data
• withdrawal of consent, where processing is consent-based
• closure of your account
• cessation of marketing communications

13. DPDP Act / Applicable Privacy Compliance

For users in India, we seek to handle digital personal data in a manner aligned with the Digital Personal Data Protection Act, 2023.

14. Children’s Privacy

The Platform is intended for adult business users. We do not knowingly collect personal data from children.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with the revised effective date.

16. Contact

Wright & Grow Consulting LLP
Pune, Maharashtra, India
Email: support@wrightandgrow.com