Privacy Policy for Growth Agent

Last Updated: June 5, 2026

1. Introduction

Welcome to Growth Agent LLC ("we," "us," "our", or the "Company"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services (the "Services").

By using the Services, you agree to the collection and use of information in accordance with this policy. Any term not defined herein shall be defined as set forth in our Terms of Service, located at https://www.growth-agent.ai/terms-of-service, or if you have signed a separate master services agreement with us, as defined therein. All references to "personal data" or "personal information" are defined as set forth in the applicable law for the given reference.

2. Information We Collect

We collect information and data from you that is necessary to provide and improve our Services. As of the "Last Updated" date above, the information and data we collect from you is retrieved from three main sources: Slack, advertising platforms and marketplaces (e.g. Meta Ads), and our payment processor (Stripe).

2.1. Information from Slack

Workspace Information: When you install the Growth Agent app, we collect your Slack Workspace ID (team_id) and name to create and manage your account.
User Information: We store your Slack User ID to associate your actions and queries with your account.
Channel Information: We may access the names and IDs of public channels to deliver reports and alerts as configured by you.
Content of Interactions: We process the content of messages, slash commands, and interactions you send to the Growth Agent app to understand your requests and provide answers.

2.2. Information from Advertising Platforms (e.g. Meta Ads, etc.)

To provide our core ad analysis and management features, we require you to connect your Meta Ad Account through the Services. When you grant us permission to access the data in your Meta Ad Account, we access the following information. We only access the following data for the specific ad accounts you choose to connect.

Ad Account Structure: We access information about your advertising campaigns, ad sets, and ads, including their names, settings, status, and creative content. This allows us to provide a comprehensive overview of your account and analyze its structure.
Ad Performance Insights: We collect ad performance metrics, such as impressions, clicks, spend, reach, and conversion data. This is essential for generating reports, answering your performance-related questions, and providing recommendations.
Ad Management: To enable features like our "Power Launch" tool, we use this permission to create or modify campaigns, ad sets, and ads on your behalf, but only when you affirmatively initiate such actions within the Slack interface.
Existing Assets and Ad Copy: We collect and analyze your existing marketing materials and assets, including any video, audio, or images that are available on advertising platforms, to provide a tailored, brand-conscious experience with the Services.

2.3. Billing & Payment Information

When you subscribe to a paid plan for the Services, we collect billing-related metadata from our payment processor, Stripe, necessary to administer your subscription. This information includes:

Subscription Metadata: Stripe customer ID, subscription ID, plan tier, billing cycle dates, subscription status, and any active discount percentages associated with your account.
Purchase Records: We store records of all add-on purchases for accounting and audit purposes, including the date, type, quantity, and amount charged for each transaction.
What We Do NOT Store: We do not store full credit card numbers, CVV codes, or complete payment card details on our systems. All payment card data is held securely by Stripe, our payment processor.
Information Collected by Stripe: Stripe may collect additional information directly from you during checkout, such as your name, email address, billing address, and payment method. Stripe's collection and use of this information is governed by their own privacy policy, available at https://stripe.com/privacy.

3. How We Use Your Information

We use the information we collect for the following purposes:

To Provide and Maintain the Services: To answer your queries, generate performance reports, display charts, scripts, storyboards, marketing content, and other advertising-related Generated Outputs, enable ad management functionalities directly within Slack, and to test, validate, and maintain the Services. We understand that your ad performance and creative strategies are highly sensitive, and we do not disclose that information to any third parties without your written consent.
Optional Customer-Specific AI Models: With your prior, opt-in written approval, we may train customer-specific AI models that are fine-tuned to your needs. Any such model is private and solely available to you, is not shared with other customers, and is not used to influence outputs for any other user. We will not train customer-specific models on your User Data without first obtaining this approval, and you may withdraw this approval at any time, in which case we will discontinue further training and, on your request, delete the customer-specific model.
To Act on Your Behalf: To execute ad operations you initiate on Third-Party Websites, such as duplicating campaigns, creating new ads with new creative assets, and executing the new ad buys that you authorize via Slack.
To Communicate With You: To send you notifications, reports, and other service-related messages via Slack, phone, email, mail, or any other communication method you agree to in writing or as allowed by applicable law.
To Improve the Services: To maintain and improve the functionality of the Services through ordinary and emergency maintenance and development of new products and features. Except for customer-specific models we train at your request and for your exclusive use (as described above), we do not train artificial intelligence models on User Data. We may use aggregated, fully de-identified data to improve our Services or establish high-level industry trends. All identifiable brand information, creatives, and specific financial metrics are permanently stripped before aggregation.
Enterprise AI Partners: To power our insights, we utilize secure, enterprise-grade APIs from industry leaders such as Google Gemini. Our enterprise agreements with these providers prohibit them from retaining your data beyond what is necessary to return a response or using your inputs to train their base models.

4. Data Storage and Security

We take the security of your data seriously and implement industry-standard measures to protect it.

Data Storage: Your data is securely stored on Microsoft Azure cloud infrastructure.
Encryption: All data is encrypted in transit using TLS and at rest.
Secure Credentials: Sensitive credential information, such as your advertising platform API access tokens, is encrypted and stored securely in the cloud. Our application accesses these tokens on a need-to-know basis to interact with the applicable advertising platform API on your behalf.

Despite our commercially reasonable and industry-standard efforts to secure User Data, no method of data transmission or storage over the internet can be guaranteed to be 100% secure and we cannot provide a guarantee of 100% security of User Data.

5. Cookies and Tracking Technologies

We use cookies, pixels, and similar tracking technologies on our public web pages (such as our pricing and informational pages) for analytics, marketing, and service operation purposes.

The Growth Agent Slack application itself runs entirely within Slack and does not set cookies in your browser.

5.1. Categories of Cookies and Trackers

Strictly Necessary Cookies: Required for the Services to function. These include session cookies for our checkout flow (Stripe), workspace context cookies, and security/CSRF tokens. These cannot be disabled.
Analytics Cookies: Help us understand how visitors use our public web pages so we can improve them. We use:
- Microsoft Clarity — captures anonymized session recordings, heatmaps, and behavioral insights. See Microsoft's Privacy Statement.
Advertising and Marketing Cookies: Allow us to measure the effectiveness of our advertising campaigns and show relevant ads on third-party platforms. We use:
- Meta Pixel (Facebook) — measures conversions from Meta ads and enables remarketing. See Meta's Privacy Policy.
Server-Side Conversion Measurement: In addition to the browser-based Meta Pixel, we share conversion events (such as a sign-up or subscription) with Meta directly from our servers via Meta's Conversions API. To match these events to a Meta account, we may share hashed (one-way encrypted) identifiers such as your email address, together with your IP address and browser user-agent. This sharing is subject to the same consent and opt-out controls described below, and is treated as "sharing" for cross-context behavioral advertising under U.S. state privacy laws.

5.2. Your Cookie Choices

On our public web pages, you can opt out of analytics and advertising cookies (and the related server-side conversion sharing described above) at any time using the "Customize" control in the cookie notice shown on those pages. Your choice is remembered in a first-party cookie on your browser.
For visitors in the European Union, European Economic Area, and United Kingdom, we do not set non-essential cookies or fire non-essential trackers at all — analytics and advertising tags (and the related server-side sharing) are suppressed for these regions, so no separate opt-in is requested.
We honor the Global Privacy Control (GPC) signal and browser Do Not Track settings as a valid opt-out of advertising and analytics sharing.
You can disable cookies entirely in your browser settings; however, this may affect the functionality of our checkout flow and other features.
You can also manage advertising preferences through industry opt-out tools such as the Digital Advertising Alliance and Your Online Choices (EU).

6. Personal Data Privacy Rights

The Services are business-to-business (not directed at individuals) and are operated from the United States. We do not directly collect individuals' personal data. You (the User) may provide us with the personal data of individuals who interact with your products and services by providing us with access to User Data or your account with a third-party advertising platform. To the extent we collect such personal data, we are a data processor or subprocessor and not a data controller, and we abide by all applicable personal data privacy and protection laws in such individuals' respective jurisdictions of residence.

By using the Services, Users outside the United States acknowledge and agree that their information will be transferred to, processed in, and stored in the United States.

We comply with applicable data protection laws including the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other U.S. state-level privacy laws and the regulations promulgated thereunder, as applicable.

6.1. Rights for EU/EEA/UK Residents (GDPR)

If you are located in the European Union, European Economic Area, or United Kingdom, you have the following rights regarding your personal data:

Right of access — request a copy of the personal data we hold about you.
Right to rectification — request correction of inaccurate or incomplete data.
Right to erasure ("right to be forgotten") — request deletion of your data.
Right to restrict processing — request that we limit how we use your data.
Right to data portability — request your data in a machine-readable format.
Right to object — object to our processing of your data for certain purposes.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
Right to lodge a complaint — file a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@growth-agent.ai. Depending on the nature of the processing services we provide to the Agency or customer of the Services, we may be party to a data processing agreement that governs how we respond to your personal data request. This may impact whether we, or our customer to whom you provided your personal data, respond(s) to you directly. In all cases, we or our customer are obligated to respond to you within statutorily mandated timeframes, based on applicable law.

Our legal basis for processing personal data includes: (a) performance of our contract with you (providing the Services), (b) your consent (where applicable), (c) compliance with legal obligations, and (d) our legitimate interests in operating and improving the Services.

6.2. Rights for Residents of California, Virginia, Colorado, Connecticut, Utah, and Texas

If you are a resident of one of these states, you have the following rights under the applicable data privacy and protection law:

Right to know — request disclosure of what personal information we collect, use, and share.
Right to obtain a copy of your personal information.
Right to delete — request deletion of your personal information (subject to legal retention requirements such as billing records).
Right to correct — request correction of inaccurate personal information.
Right to opt-out of sale or sharing — State-specific data privacy laws may treat certain advertising cookies (such as Meta Pixel, Google Ads, and LinkedIn Insight Tag) as "sharing" personal information for cross-context behavioral advertising. You may opt out of this sharing by adjusting your cookie preferences on our website, enabling Global Privacy Control (GPC) in your browser, or contacting us at support@growth-agent.ai. We do not "sell" personal information for monetary consideration.
Right to non-discrimination — you will not receive discriminatory treatment for exercising your rights.
Right to limit use of sensitive personal information — we do not knowingly collect sensitive personal information as defined by CPRA, and to the extent that we do, we agree to comply with your exercise of legal rights regarding such sensitive personal information.

We do not require account registration or fees to exercise these rights, and we will verify your identity before processing requests.

6.3. Rights for Residents of Nevada

Nevada residents may opt out of the sale of personal information. While we do not currently sell personal information as defined by Nevada law, we honor opt-out requests should this change. To submit a request, please contact us at support@growth-agent.ai.

7. Data Sharing and Disclosure

We do not sell, trade, or rent your personal or User Data to third parties.

We may disclose User Data in the following limited circumstances:

With Service Providers: We may share information with third-party vendors and service providers that support our business operations, such as cloud hosting and AI model providers. These providers are bound by strict confidentiality agreements.
With Payment Processors: Our payment processor, Stripe, handles all payment transactions for the Services. Stripe receives the data necessary to process payments, including your name, email, payment method, and billing address, and any other information necessary to process your payments. Stripe's use of your information is governed by their privacy policy at https://stripe.com/privacy.
Third-Party Analytics Providers: We use third-party analytics companies that provide us with aggregated and pseudonymized website usage data and conversion events on our public web pages, capture anonymized session interactions, other event data, and other industry-standard advertising-related information. See Section 5 for the specific providers we use and links to their privacy policies.
For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities. See Section 9 for our approach to government and law enforcement requests.
Business Transactions: In the event of a merger, acquisition, bankruptcy, or asset sale, your data may be transferred to the successor entity. In such cases, use of your data will remain consistent with this policy.
With Your Consent: We may share your information with your express written consent. For example, if you are an Agency using our Services for a client, information for that End-Client's ad account will be accessible to you via the Slack workspace that you have authorized.

8. Data Retention and Deletion

We retain different categories of data for different periods based on the data type and our legal obligations:

Workspace and account configuration: Retained for as long as your account is active. Deleted within 30 days of account closure or upon your request.
Connected ad account data and analytics: Retained for as long as the ad account is connected. Deleted within 30 days of account disconnection or upon request.
Conversation history and AI interactions: Retained for the duration of your account to provide context across sessions. Deleted within 30 days of account closure.
Generated creative assets: Retained while your account is active so you can revisit them. Deleted within 30 days of account closure or upon request.
Billing and transaction records: Retained for seven (7) years after account closure to comply with tax, accounting, and legal requirements. These records do not contain payment card details.
Aggregated, anonymized data: Derivatives are retained indefinitely as they cannot be linked back to you.

You can request deletion of User Data at any time by contacting us at support@growth-agent.ai. We will confirm the request and complete deletion within 30 days, except for data we are legally required to retain (such as billing records as noted above).

8.1. Billing Records Retention

Notwithstanding our standard data deletion policy described above, we retain billing and transaction records — including invoices, payment history, and subscription history — for a period of seven (7) years after account closure in order to comply with tax, accounting, and legal obligations.

These retained billing records do not contain payment card details. After the seven-year retention period has elapsed, billing records are permanently deleted from our systems.

9. Law Enforcement and Government Requests

Growth Agent is committed to protecting our users' privacy. We do not disclose user data to public authorities unless required to do so by law, following a valid legal process.

Legal Review: We review the legality of all requests and require a valid subpoena, court order, or search warrant before disclosing information.
Challenging Requests: We reserve the right to challenge any request that we believe is unlawful, overly broad, or vague.
Data Minimization: If we are compelled to disclose data, we will always attempt to provide the minimum information necessary to comply with the specific legal request. We will not provide "blanket" access to user data.
Documentation: We maintain documentation of these requests and our responses, subject to any prohibitions on disclosure (such as a legal "gag order").

10. Your Rights

You have the right to access, update, or delete the information we have on you, provided however, that doing so may impact the functionality or reliability of the Services. You can manage many of your settings directly within the Growth Agent app in Slack. For any requests regarding your data, please contact us at the email address below.

11. Children's Privacy

Growth Agent is a business-to-business service intended for use by professional advertisers, marketers, and agencies. The Service is not directed at, marketed to, or intended for use by children under the age of 16.

We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information promptly.

If you believe we may have collected personal information from a child under 16, please contact us immediately at support@growth-agent.ai.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes. By continuing to use the Services, you agree to any and all updates of this Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at: support@growth-agent.ai