Privacy policy.
We collect the domain you scan, the email you give us, and read-only data from accounts you connect. We keep connected data 30 days, scan results 12 months, and delete everything on request within 7 days. Last updated 28 October 2026.
What we collect
Scan: the domain, your IP address for rate limiting, and the public pages we fetch. Report gate: your email. Connected scans: read-only data from Google Search Console, GA4, Google Ads and Meta Ads, under scopes you approve. Newsletter: your email and the date you confirmed.
How long we keep it
Scan results: 12 months. Connected account data and tokens: 30 days after the last scan, then deleted. Emails: until you unsubscribe or ask us to delete. Server logs: 30 days.
Where it lives
Cloudflare (D1, KV, R2) in the EU and US. Resend for email. Stripe for payments; we never see card numbers. Cal.com for bookings.
Your rights
Disconnect any account in one click from the report page. Email hello@growthauditor.ai to export or delete everything we hold about you. We answer within 7 days.
Cookies
One first-party cookie for your theme choice and one for session rate limiting. Cloudflare Web Analytics, which sets no cookies. No ad pixels on this site.
Contact
hello@growthauditor.ai. This policy is written in plain language and is not a substitute for legal advice to you.