Privacy Policy

Last updated: September 4, 2026 · MVP draft for professional review

What we collect

Account data: email address, authentication identifiers, and subscription/billing linkage (payment details are handled by Stripe — we do not store full card numbers).
Site data you ask us to analyze: the URL you submit, crawled public page content (titles, headings, excerpts, technical findings), and derived business understanding.
Analysis artifacts: Growth Checks, opportunities, evidence references, recommendation status/feedback, re-analysis comparisons, and content-package drafts you purchase.
Product analytics: event names and non-sensitive properties needed to understand funnel health (for example Growth Check id, recommendation rank/category). We avoid storing unnecessary sensitive information.
Operational logs: technical error detail, API usage/cost counters, and rate-limit keys required to run and protect the Service.

How we use data

To provide Growth Checks, recommendations, re-analysis, subscriptions, content fulfillment, customer support, abuse prevention, and product improvement. We do not sell personal information.

Third parties

Supabase: authentication and database hosting.
Stripe: payments and subscription billing.
Anthropic: AI models receive prompts derived from crawled/public site content and business context to produce structured analysis and content drafts.
DataForSEO: keyword/SERP research related to topics we evaluate for your site.
Inngest: background job orchestration for multi-step analysis and fulfillment.
Email provider (when configured): transactional messages such as “Growth Plan ready.”
Hosting (Vercel): application hosting and request logs.

Retention

We retain account, Growth Check, and purchase records while your account is active and as needed for billing, security, and legal obligations. We avoid keeping unnecessary raw crawl blobs indefinitely; operational practice is to retain analysis artifacts that power your history and re-analysis. You may request account deletion (see below).

Account deletion

Email support@growmysite.co from your account email to request deletion. We will delete or de-identify account-linked data within a reasonable period, except records we must retain for fraud prevention, accounting, or legal compliance (for example Stripe payment records retained by Stripe under their policies).

Security

We use industry-standard controls including encrypted transport, access-controlled databases with row level security, server-only API credentials, and SSRF protections on URL fetching. No method of transmission or storage is 100% secure.

Contact

Privacy questions: support@growmysite.co