Growit / o1 · Legal & privacy Privacy Policy Effective October 1, 2026 Growit o1 is operated by JML Tech Studios LLC in Wisconsin and offered to U.S. adults 18 and older. This policy explains how we handle information. Reading it does not grant permission for optional cookies, marketing emails or AI actions. 1. What we collect Account info: email, name, workspace details. Content you provide: prompts, chats, uploaded files, saved work, and information you choose to share with a feature or connected app. Optional measurement: feature interactions, campaign attribution, device/browser information, and coarse location derived by measurement providers, subject to your cookie choices. Payments: billing details are processed by our payment processors; we do not store full card numbers. Logs: IP address and request metadata for security, fraud prevention, and abuse detection. 2. How we use data Provide the account, AI, workspace, and connected features you request, including saving work and applying your preferences. Prevent abuse, enforce terms, and ensure platform security. Communicate about account activity, billing, and support; send optional marketing communications according to the separate email choices you make. Measure use and performance when the relevant optional category is enabled, and use those results to guide product improvements. Optional o1 Chrome page sharing The o1 Chrome panel reads an active tab only when you choose to preview it. You can remove the preview, and its content is sent to o1 only when you choose to include that tab with a message. We send the page title, site origin (not the full URL), selected text, and up to 10,000 characters of visible page text for that reply. Growit sends that content to its configured AI model provider. We save the site origin and title with the chat message, not the captured page text. The reader attempts to exclude form controls and hidden content. You can disconnect the o1 extension session in the panel; an issued session token expires after 24 hours. Optional Act mode sends your task and a limited inventory of the selected tab's visible control labels and roles, plus bounded prior action labels, to Growit and its configured AI model provider. It does not read existing field values or send the tab's full URL to the model. If you explicitly provide a same-site destination URL, Growit receives it to validate the action but withholds it from the model. Browser tasks are limited to the selected tab and a short run. The extension can propose ordinary buttons, same-site navigation, scrolling, and text entry, including an unsent email draft. Buttons and text entry require separate review. If you choose routine scrolling for that task, only scrolling may run without another click; you can pause or stop the task. Identified sending, payment, deletion, publishing, password, verification, and payment controls are excluded. A site can run its own scripts when text is entered or a button is clicked, so inspect the page and draft before relying on the result. 3. Sharing Service providers: Vercel for hosting; Supabase for account and database services; Stripe for payments; Resend for email; and the configured AI, media, or connected-app provider for a feature you use. Optional measurement and advertising providers include Google Analytics, Google Ads, Vercel Web Analytics, and Vercel Speed Insights. Google Tag Manager can deliver configured tags when both analytics and marketing are enabled. These providers receive information according to the enabled feature and their service configuration. Legal: if required to comply with law, protect rights, or respond to lawful requests. Business events: in a merger, acquisition, or asset sale, data may transfer under this policy. AI and connected providers OpenAI processes chat messages, attachments and connected-app context used for your request. OpenAI API content is not used for model training by default. Meta Standard services process images, SAM, voice and transcription; their content is not used to train Meta models. AutoEdit uses Meta to transcribe audio and OpenAI to plan from your brief and transcript. Safety review and provider retention can still apply. When you select Higgsfield in Image Studio, prompts and reference-photo URLs are sent for estimates and generation. Its API terms permit training unless a workspace opt-out has been processed. We do not represent that our workspace has an effective opt-out without verification. Request records can remain while the provider account is active; generated files may expire. Save outputs you need to keep. Only the connected app or custom MCP server used for a request receives its relevant data. Providers can include Google, Microsoft, Notion, Linear, GitHub and other apps you select. Your choices control access, and connected writes require review. Provider details: OpenAI data controls, Meta API terms, and Higgsfield API terms. 4. Data retention Retention depends on the information and its purpose: account and saved work support your use of the service; payment, security, and support records may need to remain for accounting, legal obligations, fraud prevention, or resolving disputes. Providers may retain records under their own policies. Browser storage periods are listed in our Cookie Policy. Studio reference photos are scheduled to expire seven days after their latest use; provider access links can last up to 26 hours. Contact us about retention or deletion of a particular record. 5. Cookies and browser privacy signals Necessary storage supports sign-in, security, checkout, requested draft transfers, and remembering your privacy choice. Functional preferences, analytics, and marketing are separate optional categories. They remain off until you make a current choice; older or invalid preference records do not authorize optional tracking. We record the categories you choose and the time in a first-party preference cookie for up to 180 days, then ask again. We honor Global Privacy Control and Do Not Track by keeping analytics and marketing off, including when an older stored choice enabled them. Cookie choices do not authorize sending an email, publishing content, connecting an app, or using your content with an AI feature. You can change your choice at any time. Withdrawal stops future optional tracking covered by those controls and removes the identified optional storage we can access in your browser. When already-loaded tracking needs to be stopped, we reload the page after saving your change. Withdrawal does not automatically delete records already received by a provider or cookies on another domain. Contact us for requests about previously collected information. Cookie settingsCookie details 6. Your controls and requests Access and update your profile inside the app. Contact our public inbox below to request access, correction, export, deletion, or an appeal. We may need to verify your identity and retain records where there is a lawful reason to do so. Opt out of marketing emails via unsubscribe links (transactional emails remain). Review separate AI, memory, connector, and action controls in the product; accepting cookies does not enable those permissions. Our service is for adults 18 and older. Report a known underage account to our contact below so we can restrict it and assess deletion obligations. Depending on where you live and the laws that apply, you may have additional rights to object to processing, restrict it, or make a complaint to a privacy regulator. Contact us to ask how a right applies to your information. 7. Security We use encryption in transit, access controls, and monitoring. No system is perfectly secure; you are responsible for safeguarding your login credentials. 8. International processing Our service providers may process information in the United States or other countries outside your country of residence. Applicable transfer requirements depend on your location, the data, and the provider arrangement. You can contact us for details about a relevant provider or transfer. Using the website is not treated as consent to a cross-border transfer. 9. Contact and changes Contact JML Tech Studios LLC, Wisconsin, United States, at info@jmltechstudios.com for privacy questions and requests. We update the date above when this policy changes. A change that requires new optional consent will be presented through the consent controls. JML Tech Studios LLC 2310 S Green Bay Rd, Ste C503, Racine, WI 53406, United States info@jmltechstudios.com United States · Adults 18 and older