GroWorth Linkedio Data Processing Agreement (DPA)

Effective Date: 8 April 2025

This DPA forms part of the overall Terms of Use between GroWorth Trust (“GroWorth”, “we”, “our”) and you (“Controller”, “you”, “your”) in connection with the use of the Linkedio platform and services.

 

1. Definitions

  • “Controller”: You, the subscriber, user, or organization who determines the purposes and means of processing personal data.
  • “Processor”: GroWorth, acting on behalf of the Controller in the provision of Linkedio services.
  • “Data Subject”: A natural person whose personal data is processed.
  • “Personal Data”: Any information relating to an identified or identifiable Data Subject.
  • “Processing”: Any operation performed on Personal Data.
  • “Data Protection Laws”: Includes GDPR and any applicable privacy legislation.

 

2. Subject Matter, Purpose, and Scope

GroWorth processes Personal Data solely to deliver Linkedio services including knowledge base management, marketing automation, analytics, and integrations with third-party platforms as outlined in the Terms of Use: https://groworth.io/index.php/terms-and-conditions/ and all related policies/agreements.

This includes but are not limited to:

  • Web analytics
  • CRM and accounting integrations
  • AI-based content generation
  • Social media scheduling
  • Service performance analysis
  • Sub-user and client relationship management

 

3. Obligations of the Processor (GroWorth)

GroWorth shall:

  • Process Personal Data only in accordance with documented instructions from the Controller
  • Inform the Controller if any instruction infringes applicable law
  • Provide secure hosting within the EU using OVH infrastructure
  • Ensure confidentiality and training of its personnel
  • Support the Controller with subject access requests
  • Assist the Controller in conducting data protection impact assessments
  • Notify the Controller without undue delay of any Personal Data Breach
  • Not sell, share, or combine Personal Data for unrelated commercial purposes
  • AI Disclaimer
  • The Processor may integrate Large Language Models (LLMs) or other third-party AI systems to support features of the Linkedio service. Any data processed by such AI tools will be subject to anonymization where feasible, and the outputs are considered provisional. The Processor assumes no liability for the outcomes of such AI-based processing.

4. Use of Sub-Processors

  • Sub-processing is permitted only with adequate data protection terms
  • GroWorth publishes its sub-processor list and will notify Controllers before making changes
  • The Controller may object to sub-processors on reasonable legal grounds

5. Data Transfers

GroWorth hosts all data on OVH servers in the EU. If data is transferred internationally, it shall be protected by Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

Open Source Software Usage Notice

Use of Open Source Components

The Linkedio platform, provided by GroWorth Trust, incorporates and relies on open-source software components developed and maintained by third-party communities. These components are used in accordance with their respective open-source licenses, including but not limited to the MIT License, GNU General Public License (GPL), GNU Affero General Public License (AGPL), and Apache License 2.0.

We acknowledge the valuable contributions of these open-source communities and provide attribution as required. A complete list of open-source components used in the Linkedio platform, along with license details, is available upon request and may be published in the platform documentation or legal information section.

Compliance with Open Source Licenses

GroWorth Trust commits to honoring the license terms of all open-source components included in its platform. Where required by license terms, source code and related materials are made available either through the Linkedio website or via request to legal@groworth.io. GroWorth does not assert ownership over any open-source components beyond those developed and maintained by our organization.

Disclaimer

Use of open-source components is provided “as is” and without warranty of any kind. GroWorth disclaims all liability for any damages or issues arising directly or indirectly from third-party open-source components.

6. Security

GroWorth maintains appropriate technical and organizational safeguards, including:

  • Data encryption (in transit and at rest)
  • Regular security assessments
  • Access control and audit logging
  • Vulnerability management and penetration testing

Details are available in our Privacy Policy

7. Rights of Data Subjects

GroWorth will:

  • Help Controllers respond to requests for access, correction, deletion, or data portability
  • Process such requests securely and within legally required timeframes

8. Return or Deletion of Data

Upon subscription termination:

  • Personal Data will be deleted or returned to the Controller unless retention is required by law

9. Responsibilities of the Controller

The Controller shall:

  • Ensure that the collection and processing of data complies with applicable law
  • Provide lawful instructions to GroWorth
  • Inform data subjects about the processing and obtain necessary consents
  • Maintain a lawful basis for all data provided to GroWorth

10. Liability

Each party’s liability is governed by the Terms of Use. GroWorth’s liability is limited except in cases of gross negligence or willful misconduct.

11. Integration with Legal Policies

This DPA should be read in conjunction with the following:

12. Final Provisions

  • Updates to this DPA will be communicated via the service or email
  • This DPA is governed by South African law
  • For any concerns, email: privacy@groworth.io

Annex 1 – Description of Processing

  • Categories of Data Subjects: Users, Sub-users, Micro Enterprises, donors, customers
  • Categories of Personal Data: Name, contact details, CRM data, financial data, IP addresses, social media metadata
  • Purpose: Provision of Linkedio services, user support, analytics, marketing automation, token usage management
  • Duration: For the duration of service usage and as long as required by law