Privacy Policy

01 Who we are

10growth (“we”, “us”) operates the 10growth sales platform. For personal data you enter into your own workspace — your leads, customers, deals and notes — your company is the data controller and we act as your data processor. For data we collect about you as a visitor or account holder, we are the controller.

Our data protection contact is privacy@10growth.com.

02 What we collect

We keep collection to what the product actually needs:

• Account data — name, company, work email, phone or LINE ID, role, and workspace membership.
• Usage data — pages and features used, device and browser type, IP address, and timestamps, so we can support and improve the service.
• Field activity — visit check-ins, including GPS coordinates at the moment a rep taps check-in, and the notes, photos and deal updates they log.
• Business contact data in your workspace — the leads and customers you or we add: business name, address, phone, email, public web presence and our AI fit score.
• Enquiries — what you send us through the demo request form or by email.

We do not collect sensitive personal data (health, religion, biometrics, criminal records) and ask that you do not enter it into free-text fields.

03 Where lead data comes from

Leads in the 10growth directory are business contact details compiled from publicly available sources — company registries, business websites, maps listings and public business social profiles — then enriched by our AI models and spot-checked by our Ops team.

We treat these as business-to-business contact records used for legitimate commercial purposes. If a record about you or your business is wrong, or you no longer wish to be contacted, email privacy@10growth.com and we will correct or remove it across the directory.

04 Why we process it — lawful basis

• Contract — to create your workspace, provide the service, and support your team.
• Legitimate interest — to keep the platform secure, prevent abuse, measure usage and improve features; and to compile B2B business contact records.
• Consent — for marketing emails and for the demo request form. You can withdraw consent at any time.
• Legal obligation — tax, accounting and lawful requests from authorities.

Location data is only captured when a rep actively taps check-in. It is not tracked in the background.

05 Your data stays yours

Every workspace is logically separated per tenant. Your deals, notes, pipeline and customer list are never shared with another company and are never used to build or improve another customer's data.

We do not sell personal data, and we do not use your workspace content to train third-party AI models.

06 Who we share it with

We use a small number of service providers under contract, acting only on our instructions: cloud hosting and database, email and LINE messaging delivery, error and usage analytics, and AI model providers used for lead enrichment and scoring.

We also disclose data where required by Thai law or a lawful order, and to a successor entity in a merger or acquisition, in which case this policy continues to apply.

07 Where data is stored & transfers

Workspace data is hosted in data centres in the Asia-Pacific region. Some processors may handle data outside Thailand; where that happens we require appropriate safeguards and contractual protections consistent with the PDPA before any transfer.

08 How long we keep it

• Workspace content — for as long as your workspace is active, then 90 days after closure, after which it is deleted or irreversibly anonymised.
• Visit and GPS records — 24 months, then aggregated into statistics with the coordinates removed.
• Enquiry and demo requests — 24 months from last contact.
• Billing and tax records — as required by Thai law.

09 Your rights under PDPA

You may ask us to: access a copy of your data, correct it, delete it, restrict or object to processing, withdraw consent, receive it in a portable format, or lodge a complaint with the Personal Data Protection Committee.

Email privacy@10growth.com and we will respond within 30 days. If your data sits inside a customer's workspace, we will pass the request to that company as controller and support them in answering it.

10 Security

Data is encrypted in transit (TLS) and at rest. Access is role-based and limited to staff who need it, with audit logging. We keep backups and review access regularly. If a breach affects your personal data, we will notify you and the authorities as the PDPA requires.

11 Cookies

Our website uses cookies that are strictly necessary for sign-in and security, plus analytics cookies to understand which pages are useful. You can refuse non-essential cookies without losing access to the product.

12 Changes to this policy

If we make a material change we will notify workspace owners by email and in the app at least 14 days before it takes effect. The date at the top of this page always reflects the current version.