Privacy Policy

Effective date: 19 June 2026 · Last updated: 19 June 2026

1. Who We Are

GrowMyGMB ("we", "us", "our") is a software-as-a-service product operated by Let's Advertize ("the Company"). We provide tools that help businesses manage their Google Business Profile, including AI-generated review replies and Google Post creation.

For questions about this policy, contact us at: letsadvertize@gmail.com

Google API Services — Limited Use Disclosure

GrowMyGMB's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2. Information We Collect

a) Account Information

When you register, we collect your name, email address, and profile photo via Google Sign-In. We also store a user ID and account creation date.

b) Business Information

During onboarding you provide your business name, city, category, website, phone number, services, business description, and target customers. This information is used to personalise AI-generated content for your business.

c) Google Business Profile Data

When you connect your Google account, we access and store the following data from your Google Business Profile via OAuth 2.0 using the business.manage scope:

Business name, address, phone number, website, and category
Customer reviews (reviewer name, rating, review text, date)
Your review reply drafts and published replies
Google Posts (drafts, scheduled, and published)
An OAuth refresh token to access your profile on your behalf

We do not access data beyond your connected Business Profile(s). We do not use this data for advertising, and we do not sell or transfer it to third parties except as described in this policy.

d) Payment Information

Subscription payments are processed by Stripe, Inc. We do not store your full card number or CVV. We store only your Stripe Customer ID and subscription status.

e) Usage Data

We collect technical data including your IP address, browser type, pages visited, and feature usage to operate and improve the Service.

3. How We Use Your Information

To provide, operate, and maintain the Service
To generate AI-suggested review replies and Google Post drafts using your business context
To publish content to your Google Business Profile on your behalf when you approve it
To process subscription payments
To send transactional emails (review alerts, post notifications, billing receipts)
To authenticate you and maintain your session
To detect and prevent fraud and abuse
To improve and develop the Service

We do not use your Google Business Profile data or review content for advertising, profiling, or any purpose other than providing the Service described above.

4. AI-Generated Content

GrowMyGMB uses the Google Gemini API to generate review reply suggestions and Google Post drafts. When you request AI-generated content, your business information and review text are submitted to Google's Gemini API to generate a response.

We do not train AI models on your data.Content submitted to the AI is processed by Google under Google's Gemini API Terms of Service. On paid API tiers, Google does not use your inputs to improve their models.

All AI-generated content is provided as a draft for your review. You are responsible for reviewing, editing, and approving any content before it is published to your Google Business Profile.

5. Third-Party Service Providers

We work with the following third-party providers who process data on our behalf as data processors:

Google Firebase (Firestore)

We use Google Firebase to store your account, business, review, and post data. Firebase acts as a data processor under GDPR. Data is stored in Google-operated data centres. Governed by Google's Data Processing and Security Terms.

View privacy policy →

Google Gemini API

Used to generate AI review replies and post drafts. Your business context and review content are submitted to Gemini to generate suggestions. Governed by Google's Gemini API Terms of Service.

View privacy policy →

Stripe, Inc.

Used for subscription payment processing. By subscribing, you agree to Stripe's Privacy Policy and Terms. We do not store full card details. We authorise Stripe to share payment information to the minimum extent required to complete transactions.

View privacy policy →

Resend

Used to send transactional emails such as review alerts, post notifications, and billing receipts. Resend processes your email address on our behalf as a data processor.

View privacy policy →

6. Data Retention

Account and billing data6 years from end of subscription (UK tax law)

Google Business Profile data (cached)Maximum 30 days, per Google API policy

Review and post draftsUntil you delete them or close your account

AI generation inputs and outputsNot stored beyond generating the response

Security and access logs12 months

7. Your Rights

UK GDPR / GDPR (UK and EEA users)

If you are located in the United Kingdom or European Economic Area, you have the following rights under UK GDPR / GDPR:

Access — Request a copy of the personal data we hold about you
Rectification — Ask us to correct inaccurate or incomplete data
Erasure — Request deletion of your personal data
Restriction — Ask us to limit how we use your data
Portability — Receive your data in a structured, machine-readable format
Objection — Object to processing based on legitimate interests

To exercise any of these rights, email us at letsadvertize@gmail.com. We will respond within one calendar month.

California (CCPA/CPRA)

California residents have the right to know what personal information we collect, to delete their personal information, and to opt out of the sale of personal information. We do not sell your personal information. To exercise your rights, contact us at the email above.

Disconnect Google

You can revoke GrowMyGMB's access to your Google account at any time from your Google Account permissions page. Revoking access will prevent the Service from accessing your Google Business Profile but will not automatically delete your GrowMyGMB account data.

8. Lawful Bases for Processing (UK/EU)

Account registration and service deliveryContract performance (Art. 6(1)(b))

Payment processingContract performance (Art. 6(1)(b))

Google OAuth and GBP data accessContract performance (Art. 6(1)(b))

Transactional emailsContract performance (Art. 6(1)(b))

Security logging and fraud preventionLegitimate interests (Art. 6(1)(f))

Service improvement and analyticsLegitimate interests (Art. 6(1)(f))

9. International Data Transfers

Some of our third-party service providers are located outside the UK and EEA, including in the United States (Google Firebase, Google Gemini, Stripe, Resend). Where we transfer your personal data to these countries, we rely on appropriate safeguards including Standard Contractual Clauses and adequacy decisions. For Google services, Google's Cloud Data Processing Addendum provides these safeguards.

10. Data Security

We use industry-standard security measures including encryption in transit (HTTPS/TLS), secure server-side session cookies, and Firebase security rules to protect your data. We store only OAuth refresh tokens, never access tokens, and generate access tokens on demand. No security system is completely impenetrable; if you believe your account has been compromised, contact us immediately.

11. Children's Privacy

GrowMyGMB is intended for use by businesses and is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by updating the "Last updated" date at the top of this page. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions, data access requests, or to file a complaint, contact us at: letsadvertize@gmail.com

If you are in the UK and are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

← Back to GrowMyGMB Read our Terms of Service →