At GrowX Global FZ-LLC (“GrowX Global”, “we”, “our”, “us”), we are committed to protecting your privacy and ensuring that your personal and financial data is handled responsibly, transparently, and securely.
This Privacy Policy explains how we collect, use, store, share, and protect your data when you use our mobile application, web platform, APIs, or other services that connect you with licensed financial institutions under the Central Bank of the UAE (CBUAE) Open Finance Framework.
Our Privacy Policy complies with:
By using our services, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree, please stop using our services immediately.
GrowX Global FZ-LLC is a UAE-registered financial technology company (Trade License No. [Insert]) operating as a Third Party Provider (TPP) under the CBUAE Open Finance Framework.
We provide the following regulated open finance services:
We act as a data controller when collecting your personal data directly and as a data processor when handling data obtained from your bank under your explicit consent.
We process your data lawfully and transparently for the following purposes:
| Purpose | Example | Legal Basis |
|---|---|---|
| Providing open finance services | Displaying aggregated bank account data | Explicit consent |
| Payment initiation | Executing user-authorized transfers | Explicit consent |
| Fund confirmation | Verifying available balance | Explicit consent |
| Compliance | Audit, AML/CFT, and reporting to CBUAE | Legal obligation |
| Service improvement | Security, diagnostics, and analytics | Legitimate interest |
| Customer support | Responding to inquiries | Contractual necessity |
We never use your data for advertising or resale, and we will never access your bank credentials.
You will be asked to explicitly authorize GrowX Global before any access to your financial data is made. Consent is collected digitally via the GrowX Global app or portal, where you will see:
You may revoke consent at any time by:
Upon revocation, all tokens and access permissions are immediately invalidated.
We do not sell, lease, or trade your personal or financial information. Data is shared only under the following circumstances:
We ensure all third-party processors maintain the same or higher level of data protection.
We retain your data only as long as required to fulfill the purposes described in this Policy or as mandated by law.
| Data Category | Retention Period | Post-Period Action |
|---|---|---|
| Consent records | 5 years (CBUAE requirement) | Archived or anonymized |
| Transaction data | 5 years | Deleted or anonymized |
| Technical logs | 12 months | Deleted automatically |
| Customer support data | 2 years | Securely deleted |
| Analytics data | Non-identifiable | Retained indefinitely |
After expiration, data is securely erased using AES-256 deletion protocols or anonymized.
In case of a data breach, we will notify both you and the CBUAE within 24 hours, as required by regulation.
Contact privacy@growx.global — response within 30 days as per PDPL Article 13.
No third-party marketing cookies are used.
Services are intended for users aged 18+. Data from minors is deleted upon discovery.
Our app or website may link to third-party sites. We are not responsible for their privacy practices.
By using GrowX Global’s services, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your data.
GrowX Global FZ-LLC
Empowering Open Finance in the UAE securely and responsibly.