When you register for GrowLytics, we collect your name, email address, and password (stored as a bcrypt hash, never in plain text). For account security, we also associate your account with a registered IP address, as described in Section 6. We collect usage data such as URLs submitted, credits used, and tool interactions for billing, support, and analytics purposes. If you purchase a subscription or credit pack, we collect the billing information needed to process and confirm that payment.
GrowLytics connects to Google services via OAuth 2.0, including the Google Search Console API, Google Indexing API, and Google PageSpeed Insights, and — for users of the AdSense Support tool — the Google AdSense Management API. We store your OAuth tokens securely and use them only to perform the operations you've authorized, within the exact scopes you approved on Google's own consent screen. We do not sell your Google data to third parties. Google API usage is governed by Google's Privacy Policy. GA4 Analytics integration is planned for a future release; this policy will be updated with the relevant data handling detail before that feature goes live.
GrowLytics's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we do not use data obtained through Google Search Console, Google Indexing API, or Google AdSense Management API scopes to serve advertisements, and we do not allow humans to read this data except with your explicit consent, to investigate abuse or a security incident, to comply with applicable law, or for internal operations that have been aggregated and anonymized.
Some GrowLytics features send data to third-party services to generate your results: the DA & PA Analysis tool queries OpenPageRank for domain authority data, and the SEO Audit tool's AI Strategy Report sends your audit data to Groq's AI API to generate recommendations. These third parties process the data solely to return a result to you and are not authorized to use it for their own purposes.
If you choose to connect your own Google Cloud service account for additional indexing quota, the credentials you provide are stored encrypted and used only to run the indexing operations you initiate through your account. We do not use your service account for any other purpose.
To protect against credential sharing and unauthorized access, GrowLytics registers one IP address per account and limits how often that registration can change per month. This IP data is used solely for account security and is not shared with third parties or used for marketing purposes.
All data is stored on servers in Pakistan, using PostgreSQL with encrypted connections. Passwords are never stored in plain text — only as bcrypt hashes. OAuth tokens and any connected API credentials are stored encrypted at rest.
We retain your account data for as long as your account is active. If you request deletion, we remove your personal data and associated records within 30 days, except where we are required to retain limited billing records for legal or accounting purposes.
You may request access to, correction of, or deletion of your account and associated data at any time by emailing support@grow-lytics.com. We process deletion requests within 30 days. You may also export your own data — audit results, indexing history, and reports — directly from your account settings at any time, without needing to contact support.
We use session cookies for authentication across GrowLytics tools, and basic cookies for platform analytics. We do not use advertising cookies and do not sell cookie data to third parties. You can disable cookies in your browser, though core features like staying signed in will not function correctly without them.
GrowLytics is intended for business and professional use and is not directed at, or intended for use by, individuals under the age of 18. We do not knowingly collect personal data from minors.
GrowLytics serves agencies and users worldwide, while our infrastructure and data storage are based in Pakistan. By using GrowLytics, you consent to your data being processed and stored in Pakistan, which may have different data protection laws than your own country.
We may update this privacy policy as our services evolve — for example, when new integrations like GA4 Analytics go live. Material changes will update the "Last updated" date above, and where practical we will notify active users in advance.
For privacy inquiries, contact us at support@grow-lytics.com or use our Contact page. For billing and credits questions specifically, see the FAQ's Credits & Billing section or the Pricing page. This policy should be read alongside our Terms of Service, Refund Policy, and Disclaimer.