Privacy Policy

1. Overview

GrowthLens provides social-media analytics and AI-generated organic growth recommendations for businesses and creators. This Privacy Policy explains how GrowthLens ("GrowthLens," "we," "us," or "our") collects, uses, discloses, protects, and deletes information when you use usegrowthlens.com and the GrowthLens service.

By connecting a Facebook Page, Instagram Business account, or TikTok Business account, you authorize GrowthLens to access only the information covered by the permissions you approve. You may disconnect a platform account at any time.

2. Information we collect

• Account information: your email address, authentication identifier, business name, account creation date, plan, and subscription status.
• Connected account information:platform account identifiers and names, connection status, encrypted access and refresh tokens, and token expiration dates.
• Social performance data: follower counts, reach, impressions, profile views, engagement metrics, post or video identifiers, captions, content types, timestamps, permalinks, views, likes, comments, shares, and saves made available by the connected platform.
• Billing information: Stripe customer and subscription identifiers and subscription events. Payment-card details are collected and processed by Stripe; GrowthLens does not store complete card numbers.
• Service and communications data:email preferences, support messages, AI recommendations, and records showing that scheduled reports or service emails were sent.
• Technical data: authentication cookies, request and security logs, IP address and browser information recorded by our infrastructure providers, advertising-pixel and registration-conversion events, and—when tracked links are used—link slug, source, UTM parameters, click time, and user agent.

3. Meta and TikTok platform data

GrowthLens requests the following permissions for these specific purposes:

• pages_show_list to display the Facebook Pages you manage so you can choose which Page to connect.
• pages_read_engagement to retrieve Page identity and engagement or performance metrics for your dashboard.
• instagram_basic to retrieve basic Instagram Business account and media information.
• instagram_manage_insights to retrieve Instagram account and media insights used in analytics and recommendations.
• TikTok user.info.basic, user.info.stats, andvideo.list to retrieve your connected profile, account statistics, videos, and their performance metrics.

We use platform data only to provide and improve GrowthLens for the customer who connected the account. We do not sell platform data, use it for targeted advertising, or publish, edit, or delete your social-media content.

4. How we use information

• Authenticate users and operate, maintain, and secure GrowthLens.
• Connect authorized social accounts and synchronize performance data.
• Display dashboards, trends, post performance, and account status.
• Analyze account metrics and post data to generate tailored growth recommendations.
• Process subscriptions, maintain billing records, and prevent duplicate events.
• Measure whether advertising campaigns lead to completed registrations.
• Send requested service messages and weekly insight digests.
• Detect abuse, investigate errors, comply with law, and enforce our terms.

Where applicable, our legal bases include performing our contract with you, your consent to connect optional platform accounts, our legitimate interests in operating and securing the service, and compliance with legal obligations.

5. How information is shared

We disclose information only as needed to provide the service, follow your instructions, protect GrowthLens and its users, or comply with law. Our service providers include:

• Supabase for authentication and database hosting.
• Vercel for application hosting, delivery, request processing, and scheduled jobs.
• Stripe for subscription billing and payment processing.
• AI processing providers for generating account-specific insights and niche research from selected performance data, post summaries, and the research prompts you submit.
• Resend for transactional and weekly insight emails.
• OpenAI Ads for advertising attribution and registration-conversion measurement.
• Meta and TikTok when you authorize a connection or when GrowthLens requests data from their APIs on your behalf.

We do not sell or rent your personal information or connected-platform data. We may disclose information in connection with a merger, financing, acquisition, or sale of assets, subject to appropriate confidentiality and notice requirements.

6. Storage and security

GrowthLens stores account records, synchronized metrics, posts, and AI insights in Supabase. Social-platform access and refresh tokens are encrypted by GrowthLens using authenticated encryption before storage. We also use encrypted network connections, tenant-level database access controls, restricted service credentials, and other administrative and technical safeguards.

No system is completely secure. You are responsible for protecting your account credentials and promptly notifying us if you suspect unauthorized access.

7. Retention, disconnection, and deletion

We generally retain account information and synchronized platform data while your GrowthLens account is active or as needed to provide the service. Platform tokens are retained until the account is disconnected, access is revoked, the token expires, or the GrowthLens account is deleted.

You may disconnect a social account from GrowthLens and revoke GrowthLens in the connected platform's settings. You can request deletion through our publicdata-deletion page. Account deletion removes the GrowthLens customer record, authentication account, connected tokens, synchronized metrics and posts, link-click records, and generated insights.

We retain a limited deletion audit record containing the submitted email address, request status, and request time for security and compliance purposes. Some information may remain temporarily in provider backups or logs, or be retained when required for fraud prevention, dispute resolution, tax, accounting, or other legal obligations.

8. Your choices and privacy rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, restriction of, or portability of your personal information; object to certain processing; withdraw consent; or appeal a denied privacy request. You may also have the right to complain to your local data-protection authority.

To exercise a right, use the data-deletion page or contact us at the address below. We may ask for information needed to verify your identity and request. You may unsubscribe from optional email messages using the controls provided in GrowthLens or the message.

9. International data transfers

GrowthLens and its service providers may process information in the United States and other countries. Where required, we use recognized transfer mechanisms and contractual safeguards for international transfers of personal information.

10. Children's privacy

GrowthLens is a business service and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us so we can investigate and delete it.

11. Changes to this policy

We may update this Privacy Policy as GrowthLens changes. We will post the revised policy on this page and update the date above. If a change materially affects how we use information, we will provide additional notice when required.

12. Contact us

For privacy questions or requests, email support@flowlog.dev. For account deletion, you may also use the GrowthLens data-deletion form.