Privacy Policy

• Account. Your email address (via a magic link or an OAuth sign-in such as GitHub or Google), name and avatar where the provider supplies them.
• Source material you connect. Content we read to understand your product — your website, repository, documentation and brand assets — and the product profile we extract from it.
• Connected social accounts. When you connect a channel (e.g. X, LinkedIn, Reddit), you authorise access through the provider’s OAuth flow. The resulting access tokens are stored to publish on your behalf and read engagement on your own posts. We never see your social passwords.
• Generated content. The posts, images, videos and campaign assets Grow produces for you, and your approvals/edits.
• Analytics. We measure outcomes of the marketing we run for you: clicks on tracked links, page events on landing pages, and engagement metrics on your published posts. Visitor counts use a cookieless, daily-rotating hash — we do not set tracking cookies and do not store raw IP addresses.
• Operational data. Logs and model-usage records needed to run, secure and bill the service.

To provide the service — research your market, generate campaign assets, publish to the channels you connect, and report results in plain language — and to secure, maintain and improve Grow. We use AI models to generate drafts and recommendations; you review and approve consequential actions before they happen.

We do not sell your data. We share it only with service providers acting on our instructions to deliver the product:

• The social platforms you connect — to publish your posts and read their engagement, per your authorisation.
• AI model providers (e.g. for text, image, voice and video generation) — to produce your assets.
• Email and infrastructure providers (transactional email; cloud hosting and storage) — to operate the service.

Aggregate, anonymised insights may be used to improve recommendations across the product; one customer’s raw data is never exposed to another.

We use a single essential cookie to keep you signed in. Our analytics are cookieless. We do not use third-party advertising or cross-site tracking cookies.

We keep your data while your account is active. You can delete your account and organisation from the app at any time, which removes your profile, campaigns, connected-channel records and associated data. Some records may persist briefly in backups or where retention is legally required.

Each customer’s data is isolated at the database level (row-level security), access is least-privilege, and secrets are stored encrypted. No system is perfectly secure, but we work to protect your data and will notify you of a material breach as required by law.

Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing. Contact us to exercise them.

We may process data in countries other than yours, with appropriate safeguards. Grow is not directed to children under 16 and we do not knowingly collect their data.

We may update this policy; we’ll change the date above and, for material changes, notify you in the app or by email.

Macleod Labs — privacy@macleodlabs.ai. See also our Terms & Conditions.