Privacy policy
Last updated: June 3, 2026
What we collect
Account info you provide (email, password hash). Workspace content you create (contacts, products, creators, outreach notes, posts). Aggregated click data from tracking links you share — we store an IP hash (not the raw IP), country code, user-agent, and timestamp.
What we don't collect
We don't sell your data. We don't use it to train ML models. We don't track you across other websites.
Where it lives
Your data is stored in a managed Postgres database hosted by Supabase (US-East). Backups are retained for 7 days. The database is encrypted at rest; connections to it are TLS.
Who can see it
Only you and the workspace members you explicitly invite. Row-level security in Postgres enforces this — even our service operators can only access your data with elevated credentials, which are audited.
Deleting your data
From Settings → delete your workspace. Hard-deletes all rows you own. Cached metric snapshots are purged within 30 days.
Contact
Questions: privacy@growthkit.app
This is a placeholder policy for a pre-launch tool. Replace with real legal text reviewed by counsel before commercial launch.