Privacy Policy for Growth Assistant

Last Updated: August 4, 2026

Thank you for using Growth Assistant ("we," "us," or "our"). This Privacy Policy explains how we collect, use, share, store, and protect personal data when you visit https://growthassistant.io (the "Website") or use our software, assistants, APIs, integrations, and related services (together, the "Service").

By using the Service, you acknowledge this Privacy Policy. Our Terms of Service at https://growthassistant.io/tos also apply.

If you use Growth Assistant on behalf of a company, "you" includes that company. Where you upload or sync personal data about other people (for example contacts, leads, or message participants), you are responsible for having a lawful basis to do so.

————————————————————
1. Who We Are
————————————————————

Growth Assistant provides a growth execution platform that connects your AI tools to Content, Virtual, and Sales Assistants so they can help you publish, engage, message, automate, discover leads, and run outreach on connected social and messaging accounts.

For privacy questions or requests, contact: support@mail.growthassistant.io

We operate from the Netherlands and process personal data in accordance with the EU General Data Protection Regulation (GDPR / AVG) and applicable Dutch law.

————————————————————
2. Roles: Controller vs Processor
————————————————————

2.1 Account and billing data
For your Growth Assistant account, subscription, support tickets, and Website analytics, we act as a data controller.

2.2 Customer Content from Connected Accounts
When you connect social/messaging accounts or import contacts, we process content and personal data on your instructions to provide the Service (posts, media, inbox messages, comments, contacts, tags, automation logs, outreach activity, and similar). For that Customer Content, you are typically the controller and we act as a processor — except where we must process data for our own legitimate interests (security, abuse prevention, billing disputes, legal compliance).

You must only connect accounts and process third-party personal data if you are allowed to do so under applicable law and the relevant platform terms.

————————————————————
3. Information We Collect
————————————————————

3.1 Information you provide
• Identity and contact data — name, email address, and similar profile fields
• Account credentials — authentication data for your Growth Assistant login (we do not see your password if you sign in via a third-party identity provider such as Google)
• Billing data — subscription status, invoices, and payment-related identifiers; full card details are handled by our payment processor and are not stored in full on our servers
• Support and communication data — messages you send to support, feedback, and related correspondence
• Configuration data — assistant settings, automation rules, broadcast/sequence content, templates, approval preferences, and workspace settings

3.2 Connected Account data
When you connect Instagram, LinkedIn, Facebook, TikTok, YouTube, Pinterest, X, Reddit, WhatsApp Business, or other supported channels, we may process:
• account identifiers, usernames, profile metadata, and connection status
• content you publish or schedule (captions, media, thumbnails, metadata)
• inbox and comment data (messages, senders, timestamps, thread metadata)
• engagement and insights available through the platform APIs
• contacts, tags, custom fields, and CRM-related records you create or sync
• outreach/lead records used by the Sales Assistant (profiles, notes, status, follow-up history), where enabled

The exact fields depend on the platform, your account type, and the permissions you grant.

3.3 AI client / MCP connection data
If you connect Claude, ChatGPT, OpenClaw, or another compatible AI/MCP client, we may process OAuth tokens, client identifiers, workspace/API credentials, tool-call requests, and execution logs needed to authenticate the client and carry out actions you authorize.

3.4 Automatically collected technical data
• IP address, device/browser type, approximate location derived from IP, referral URLs
• cookies and similar technologies (see Section 9)
• usage logs, feature usage, error logs, and security events
• timestamps and metadata about agent actions performed through the Service

3.5 Information from partners
If you join via a partner, course, or reseller offer, we may receive enrollment, trial, or plan information needed to activate your access.

We do not intentionally collect special categories of personal data (such as health or political opinions). Please do not submit such data unless necessary and lawful. Message content you sync may incidentally include sensitive information; you remain responsible for that content.

————————————————————
4. How We Use Personal Data
————————————————————

We use personal data to:
• create and manage accounts, workspaces, and assistant enrollments
• authenticate you and connected AI clients
• connect and maintain Connected Accounts
• execute Content, Virtual Assistant, and Sales Assistant features you enable (publishing, inbox, automations, broadcasts, contacts/CRM, lead discovery, outreach, insights)
• process trials, subscriptions, invoices, and access control (including cutting off access when a trial or subscription ends)
• provide customer support and send service/transactional emails
• monitor security, prevent abuse, enforce our Terms, and investigate incidents
• improve reliability, safety controls, rate limiting, and product experience
• comply with legal obligations and respond to lawful requests
• communicate product updates or material policy changes

We do not sell your personal data.

————————————————————
5. Legal Bases (GDPR)
————————————————————

Depending on the context, we rely on:
• Contract — to provide the Service you request (account, assistants, Connected Account execution, billing access)
• Legitimate interests — to secure the Service, prevent abuse, improve features, and communicate important service information, balanced against your rights
• Consent — where required (for example certain cookies/marketing), which you may withdraw
• Legal obligation — where we must retain or disclose data to comply with law

If we act as your processor for Customer Content, we process that data on your documented instructions as needed to provide the Service.

————————————————————
6. How We Share Data
————————————————————

We share personal data only as needed to operate the Service:
• Infrastructure providers — hosting, databases, file/media storage, logging, and security tooling
• Payment processors — to process subscriptions and invoices
• Email delivery providers — for transactional and service messages
• Social and messaging platforms — to connect accounts and perform actions you authorize (posting, messaging, reading inbox/insights, etc.)
• AI hosts / MCP clients you choose — tool requests and responses necessary for those clients to work with Growth Assistant
• Partners — limited enrollment/billing status if you purchased or activated through a partner offer
• Professional advisors and authorities — where required by law, legal process, or to protect rights, safety, and security
• Business transfers — if we are involved in a merger, acquisition, or asset sale, data may transfer under appropriate safeguards

Service providers are engaged to process data on our behalf under confidentiality and data-protection obligations. We do not allow them to use your data for their own unrelated marketing.

We do not publicly name every subprocessors' commercial brands in customer UI, but we will provide reasonable information about categories of processors on request at support@mail.growthassistant.io.

————————————————————
7. International Transfers
————————————————————

We may process and store data in the Netherlands/EU and in other countries where our providers operate. Where personal data is transferred outside the EEA/UK, we use appropriate safeguards such as Standard Contractual Clauses or an adequacy decision, unless another lawful transfer mechanism applies.

————————————————————
8. Retention
————————————————————

We keep personal data only as long as needed for the purposes above:
• Account and billing data — for the life of the account and thereafter as required for tax, accounting, and legal claims
• Connected Account data and Customer Content — while your enrollment is active and for a reasonable period after disconnection or termination to allow recovery, dispute handling, and secure deletion; you may request earlier deletion subject to legal holds
• Action/execution logs — for security, debugging, abuse prevention, and service quality, then deleted or anonymized
• Support correspondence — as needed to resolve issues and maintain records
• Cookies — according to their lifespan (see Section 9)

When data is no longer needed, we delete or anonymize it, unless retention is required by law.

————————————————————
9. Cookies and Similar Technologies
————————————————————

We use cookies and similar technologies to:
• keep you signed in and secure sessions
• remember preferences
• understand Website usage and improve performance
• support fraud prevention

Essential cookies are required for the Service to function. Where non-essential cookies require consent under applicable law, we will request it. You can also control cookies through your browser settings; disabling some cookies may limit functionality.

————————————————————
10. Security
————————————————————

We implement technical and organizational measures appropriate to the risk, including access controls, encryption in transit where applicable, least-privilege practices, and monitoring. No method of transmission or storage is 100% secure. You are responsible for protecting your login credentials, AI-client tokens, and Connected Account permissions, and for using strong access hygiene on your side.

————————————————————
11. Your Rights
————————————————————

If you are in the EEA/UK (or another region with similar rights), you may have the right to:
• access your personal data
• correct inaccurate data
• erase data (subject to legal exceptions)
• restrict or object to certain processing
• data portability
• withdraw consent where processing is based on consent
• lodge a complaint with a supervisory authority (in the Netherlands: Autoriteit Persoonsgegevens)

To exercise these rights, email support@mail.growthassistant.io. We may need to verify your identity. If your request concerns Customer Content we process as your processor (for example a contact asking about data in your CRM), we may redirect the request to you as controller, or assist you in responding.

————————————————————
12. Children's Privacy
————————————————————

Growth Assistant is intended for adults and professional/business use. It is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact support@mail.growthassistant.io and we will take appropriate steps to delete it.

————————————————————
13. Third-Party Sites and Platforms
————————————————————

The Service links to and integrates with third-party websites, AI products, and social/messaging platforms. Their privacy practices are governed by their own policies. We are not responsible for those practices. Review the privacy settings and policies of each Connected Account and AI client you use with Growth Assistant.

————————————————————
14. Automated Decision-Making
————————————————————

Growth Assistant executes actions based on your configuration and on requests from AI clients you connect. We do not use personal data for solely automated decision-making that produces legal or similarly significant effects about you without human involvement, except as needed for access control, fraud/abuse prevention, or billing eligibility (for example ending access when a trial expires).

Outreach, messaging, and publishing decisions are directed by you or your connected AI client under your responsibility.

————————————————————
15. Changes to This Policy
————————————————————

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last Updated" date, and we may notify you by email when appropriate. Continued use of the Service after the effective date means you acknowledge the updated Policy, except where mandatory law requires additional consent.

————————————————————
16. Contact
————————————————————

Privacy questions, requests, or complaints:

Email: support@mail.growthassistant.io
Website: https://growthassistant.io

For Terms of Service, see: https://growthassistant.io/tos