Privacy Policy

Who we are

Growyn ("Growyn", "we", "us") is a marketing-autopilot platform operated by EDMA Group. This policy explains what data we collect when you use growyn.app and the Growyn application, why we collect it, and the choices you have. Contact for anything in this policy: [email protected].

Data we collect

Account data: your name, email address, password (stored hashed), and organization details you provide at signup.

Content you create: marketing strategies, funnel plans, research inputs, social media drafts, schedules, and the results you record. This is your working data — we process it solely to provide the product.

Connected platform data: if you connect an account (LinkedIn, Facebook, Instagram, Threads, X, TikTok, YouTube, Meta Ads, or Google services such as Google Analytics, Search Console, Tag Manager, Calendar, and Google Ads), we store the access tokens the platform issues, the basic profile, page, or account information needed to act on your behalf, and — where you authorize it — the data described for that platform below, such as engagement metrics for the posts Growyn published.

Usage and technical data: log data, device and browser information, and product-usage events used to operate, secure, and improve the service.

How we use connected platform data

Data received from connected social platforms is used for exactly two purposes: publishing the content you approved, at the times you approved, to the accounts you connected; and retrieving performance metrics for that published content so the product can report results back to you and improve your future content recommendations.

We do not sell platform data. We do not use it for advertising. We do not share it with third parties except the subprocessors listed below, acting on our instructions. Our use of data received from each platform complies with that platform’s developer terms, including the Meta Platform Terms, the LinkedIn API Terms of Use, the TikTok Developer Terms, and the Google API Services User Data Policy.

Google user data

If you connect a Google account, Growyn requests only the access each feature needs, and only when you turn that feature on: Google Analytics (read-only) to show your GA4 reports in Analyze; Search Console (read-only) to show the search queries and pages your site ranks for; Google Tag Manager (read, edit, and publish) to audit your container and — only when you approve a proposed change — add the missing tag or trigger, create a version, and publish it, with a one-click rollback; Google Calendar to read your free/busy times and create, update, or cancel the meetings people book through your booking page; YouTube to publish the videos you approved and read their view counts; and Google Ads to create the campaigns you configure (paused until you start them), pause or resume them when you ask, and report their results.

Growyn’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. We use Google user data only to provide and improve the user-facing features described here, we do not sell it, we do not use it for advertising, and humans at Growyn do not read it except with your consent, for security, or where the law requires. We do not use Google user data to develop, improve, or train generalized AI or machine-learning models; where an AI provider processes it to produce a feature you asked for, it does so under our instructions and does not keep it for training.

You can disconnect Google in Settings › Connections at any time, which deletes the stored tokens, or revoke Growyn’s access from your Google Account at https://myaccount.google.com/permissions.

YouTube API Services

Growyn uses YouTube API Services to publish the videos you approve to your YouTube channel and to read the statistics of those videos. By connecting YouTube you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms), and Google’s handling of your data is described in the Google Privacy Policy (https://policies.google.com/privacy). You can revoke Growyn’s access to your YouTube data at any time through the Google security settings page (https://security.google.com/settings/security/permissions).

TikTok

If you connect TikTok with Login Kit, Growyn reads your display name and avatar to show which account a video will be posted to, posts the videos you approve with the privacy, interaction, and disclosure settings you choose for each video, and reads the view, like, comment, and share counts of those videos. Nothing is posted to TikTok without your approval and consent for that specific video.

AI processing

Growyn uses large language models (provided by Anthropic, OpenAI, and Google) to generate and score marketing content from the inputs you provide. Your content is sent to the model provider for processing under our agreement with them and is not used by Growyn or the provider to train models.

Subprocessors

We use a small set of providers to run Growyn: DigitalOcean (hosting, database, and job queue), Supabase (authentication and media storage), Cloudflare (content delivery and network security), Anthropic, OpenAI, and Google Gemini (AI processing), Stripe (payments), and Resend (transactional email). Each processes data only as needed to provide its service to us and under our instructions.

Data retention and deletion

We keep your data while your account is active. You can delete individual content at any time inside the product.

To delete your account and all associated data — including any data obtained from connected social platforms — email [email protected] from your account email, or use the account-deletion option in Settings. We complete deletion within 30 days and confirm it to you. Disconnecting an account in Settings › Connections immediately deletes our stored tokens for that platform and stops all further data access.

Your rights

Depending on where you live (including under the GDPR if you are in the EU/EEA), you may have rights to access, correct, export, restrict, or delete your personal data, and to object to certain processing. Exercise any of these by emailing [email protected]. You may also lodge a complaint with your local supervisory authority.

Security

Access tokens for connected platforms are stored encrypted. Data in transit is protected with TLS. Access to production systems is restricted and logged.

Changes

If this policy changes materially, we will notify account holders by email and update the date at the top of this page.