Last updated: [fill in date of publication]
[Operator name and registered business address — fill in before publishing.] ("GrowGrandeur", "we", "us") operates the GrowGrandeur platform, a tool used by agencies to plan, generate, review, and publish social media content on behalf of their client brands. This policy explains what information we collect, how we use it, and the choices available to you.
GrowGrandeur has two kinds of accounts: agency accounts, used by the agency team managing content, and client portal accounts, used by the brand/business the agency creates content for to review and approve posts. This policy covers both.
Account information: name, email address, and a securely hashed password for each agency and client portal login.
Brand information you provide: business name, industry, description, brand tone and color preferences, logo, and any reference images you upload to guide the style of generated content.
Connected social media accounts: when you connect an Instagram Business account, Facebook Page, or LinkedIn account, we store the access token issued by that platform, the connected account's ID, name, and profile picture. We request only the permissions needed to publish content on your behalf and to read basic performance metrics (reach, engagement, and similar insights) for posts published through GrowGrandeur — we do not request or access your personal social media activity, direct messages, or content outside of what you connect for this purpose.
Connected Gmail account: if you connect your Gmail account for the
Lead Follow-Up feature, we request only the permission to send email on your behalf
(Google's gmail.send scope) and to read the connected account's own email
address so we can display which account is connected. We never request, and cannot use,
any permission to read, search, modify, or delete anything already in your inbox — the
connection is used solely to send follow-up messages you have already approved, from your
own address.
Connected Google Business Profile: if you connect a Google Business
Profile location, we request only the permission needed to list the locations you manage
and to publish approved content as a "local post" update (Google's business.manage
scope, used narrowly for this purpose). We do not use this connection to edit your business's
core listing information (name, address, hours, category), manage reviews, or access
customer messaging.
Generated content: the captions, blog posts, and images GrowGrandeur generates or that you upload, along with the topics and instructions you provide to generate them.
Publishing records: when and where a post was published, whether it succeeded, and (where available) the resulting post's public URL and performance metrics fetched from the connected platform's own API.
Billing records: wallet balance and transaction history for generation costs, where applicable to your plan.
We do not sell your information, and we do not use data obtained through Instagram, Facebook, or LinkedIn's APIs for advertising or any purpose other than providing the GrowGrandeur service to you.
Generating content and operating the platform requires sending relevant data to a small number of service providers, strictly to perform that specific function:
These providers process data under their own terms and are not permitted to use it for purposes beyond providing their service to us.
GrowGrandeur's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use data obtained through Google Workspace APIs (including Gmail) to serve advertising, and we do not allow humans to read that data except with your affirmative consent, to comply with applicable law, or to investigate abuse. As described above, our use of Gmail access is limited to sending messages you have already approved on your behalf — we do not read, retain, or otherwise process the content of your mailbox.
We retain account and content data for as long as your account is active, or as needed to provide the service. You can disconnect a social media account at any time from Settings, which removes its stored access token. See our Data Deletion page for how to request full account deletion.
Passwords are stored using industry-standard hashing, never in plain text. Access tokens for connected social accounts are stored securely and used only for the publishing/insights functionality described above.
We may update this policy from time to time. Material changes will be reflected by updating the "last updated" date above.
Questions about this policy or your data can be sent to us via the Contact page.
This document is provided as a working draft reflecting GrowGrandeur's actual data practices. It has not been reviewed by legal counsel and should be reviewed for your specific jurisdiction and business structure before being relied on for regulatory compliance.