The Plus Club · 23.10.2026
YOUR DATA. YOUR PROJECT.
Privacy information for the tour planner and campaign studio.
Privacy contactController and contact
The platform is operated by grw+ GmbH, Sophie Friedrich, Nithartstr. 1, 81543 Munich, Germany. Contact: sophie@grwplus.com. This notice supplements the general privacy policy for shared project work on theplus.club.
Project data we process
The workspace stores concepts, roadmaps, ideas, tasks, responsibilities, dates and meeting notes entered by your team. The campaign studio also stores post copy, comments, suggestions, approvals and uploaded files. Changes are documented with account, time and version. A meeting note is not an automatic call recording. Only enter information needed for the project and avoid sensitive information about people who are not involved.
Sources and required information
Information comes from you, authorized project participants or supplied project documents and media. Access requires account details and assignment to the relevant workspace. Without this information we cannot provide personal access. Further project information depends on the agreed collaboration. Providing material for optional AI drafts is not a condition for the other project features.
Purposes and legal bases
We process this information to plan agreed projects, exchange material and review content together. Article 6(1)(b) GDPR applies where necessary for a contract with the individual. For business customer contacts, access management and change documentation we rely on Article 6(1)(f) GDPR. Our legitimate interest is secure, reliable and accountable collaboration. Approving a version in the studio does not publish it.
Access, hosting and file storage
Access is limited to accounts authorized for the customer workspace and authorized grw+ GmbH admins. Read-and-comment accounts see only released posts. Accounts with editing rights can also see editorial drafts. Private Story Lab answers are not included in the visible post data. Authentication, database and private files use Supabase; the web application uses Vercel. Signed file links expire and must not be forwarded. Provider locations and possible international transfers are described in the general privacy policy.
Material rights and optional AI processing
Uploading does not transfer copyright or give blanket publication permission. Specify the author, allowed channels, duration and restrictions. Separate AI permission is off by default. When the AI feature is configured and enabled, the editorial team may send selected, authorized images, video frames and notes to OpenAI to create drafts. Whole videos are not automatically transcribed. Uploading alone does not start processing. Technical AI permission does not replace a legal basis for processing other people's personal data. API requests use store: false; this is not a guarantee that no data is retained. OpenAI may temporarily retain content for security purposes under its data controls. API processing may take place outside the EU; exclusive EU processing is not promised here. Relevant personal and usage rights must also cover this processing.
Retention, deletion and shared versions
Project information is retained while needed for the agreed collaboration, its documentation or legal claims. Statutory retention duties remain applicable. The editorial team reviews deletion requests separately for original files, derived versions and shared documents. Archiving is not deletion. Deleting an account does not automatically remove all shared project records. Outstanding reviews and retention reasons are documented.
Your rights and data export
You may request access, correction, deletion, restriction and portability. You may object to processing based on legitimate interests on grounds relating to your situation and withdraw consent for the future. Use Privacy & Support in your account, the deletion request on a file or sophie@grwplus.com. Personal exports contain your contributions and changes, without exposing other people's internal drafts or private Story Lab answers. You may lodge a complaint with a supervisory authority, including the Bavarian Data Protection Authority (lda.bayern.de).
Examples and local preferences
Examples marked as demos explain how the workspace works. They are not actual customer meetings, commitments, revenue or completed tasks. Changes in an explicitly local exercise are not saved as project data. The browser may remember collapsed help per account. You can reset this preference by clearing local browser storage.