Privacy Policy

Account information. When you sign up, we collect your name and email address. If you sign up with Google, we receive your name, email address, and profile picture from Google. If you sign up with email, we store a securely hashed version of your password — we never store your password in plain text.

Content you provide. We store the competitors you choose to track (name, website domain, and category), URLs you submit for AI ad-copy generation, and campaign plans you generate (client name, budget range, and the generated plan content).

Publicly available ad data. When you track a competitor, we retrieve publicly available advertising data about that competitor from Meta's Ad Library API (and, where applicable, other ad platforms). This is public data about advertisers, not personal data about individual Facebook or Instagram users.

Usage data. We collect standard technical data such as IP address, browser type, and pages visited, to operate and secure the Service.

• To create and maintain your account and authenticate you.
• To provide the Service's core features: competitor ad tracking, AI-generated ad creative, and campaign plan generation.
• To send transactional email, such as email-verification codes.
• To maintain the security and reliability of the Service.
• To respond to support requests you send us.

We do not sell your personal information, and we do not use it for third-party advertising.

We rely on the following third-party services to operate Growlytics. Each processes a limited slice of data solely to provide their service to us:

• Meta Graph API / Ad Library API — to retrieve publicly available competitor ad data. We do not request or store personal data about individual Meta users through this API.
• Google OAuth— to offer "Continue with Google" sign-in.
• Anthropic API — to generate AI ad copy, campaign plan content, and analysis. Content you submit for generation may be sent to Anthropic to produce the result.
• Resend — to send transactional email (e.g. verification codes).
• Neon (Postgres) and Vercel — to host our database and application infrastructure.

We retain your account information and content for as long as your account is active. If you delete your account (see Data Deletion), we delete your account data within 30 days, except where we are required to retain limited records for legal or security purposes.

We use industry-standard measures to protect your data, including encrypted connections (TLS), hashed passwords, and access controls on our database. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

You can request access to, correction of, or deletion of your personal data at any time. See our Data Deletion page for instructions on requesting deletion, or contact us directly at ahmedppcads@gmail.com.

We use a session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

The Service is not directed to individuals under 16, and we do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new effective date.

If you have questions about this Privacy Policy or how we handle your data, contact us at ahmedppcads@gmail.com.