Privacy notice

Privacy for connected advertising workflows.

Effective September 4, 2026; updated September 24, 2026. This notice explains how ChatGrowing ("ChatGrowing," "we," "us") handles information when people visit our website, use a workspace, connect an advertising or analytics service, ask ChatGrowing to complete work, or receive a report.

The short version

You choose the services and advertising accounts ChatGrowing may access. We use that information to perform the work you request, protect the service, and provide support. We do not sell connected advertising data. You can revoke a connection and request deletion.

Scope and roles

This notice applies to the ChatGrowing website, Codex plugin, connected advertising workflows, reports, and related support. ChatGrowing can connect advertising, attribution, and analytics sources including Google Ads, Meta Ads, TikTok Ads, AppsFlyer, and other supported services. When an organization controls a workspace, that organization may determine which members, sources, accounts, and destinations are available. Each connected platform remains governed by its own terms and privacy practices.

Information we process

Account and workspace information: identity, contact details, organization membership, roles, permissions, invitations, and workspace settings.
Connection information: provider, connection status, authorized scopes, account identifiers, selected resources, grant history, and opaque references to credentials.
Advertising and analytics information: campaign structure, delivery, spend, impressions, clicks, conversions, attributed events, configuration, creative metadata, and data-health evidence made available by a connected service.
Work product: prompts and workflow instructions, query plans, reports, published evidence, rendered files, monitoring rules, delivery settings, and action history.
Technical information: device and browser details, timestamps, IP-derived security information, request identifiers, errors, performance telemetry, and security or audit events.
Support information: messages and the minimum account or workspace details needed to investigate a request.

We ask users not to place passwords, access tokens, OAuth codes, client secrets, payment credentials, or unrelated sensitive personal information in prompts or support messages.

Optional website analytics: If you choose “Allow analytics,” our website loads Google Analytics 4 to understand page visits and basic interactions. Google may receive page URLs, device and browser information, and an analytics identifier stored in a first-party cookie. We do not load the Google Analytics tag before you opt in. You can decline or change your choice through “Analytics settings” in the site footer. This website analytics choice is separate from connecting a Google Analytics account to a ChatGrowing workspace. See the Google Privacy Policy for Google's processing.

Connected advertising and analytics data

Depending on the services selected by a workspace, ChatGrowing may process data made available by Google Ads, Meta Ads, TikTok Ads, AppsFlyer, and other supported advertising, attribution, analytics, creative, or delivery services. This can include account and campaign structure, budgets, bids, delivery status, spend, impressions, clicks, conversions, attributed events, audience or placement dimensions, creative assets and metadata, configuration, and data-health evidence.

ChatGrowing provides two operating modes. Analysis mode uses read access to retrieve, compare, diagnose, monitor, and report on authorized data without changing advertising-platform settings. Action mode can create or change supported advertising objects using separate write authorization, account scope, action policies, limits, approvals, and audit records. Enabling analysis access does not automatically enable action authority.

Google user data

When a user connects Google Ads, ChatGrowing requests the Google Ads authorization scope shown on the Google consent screen. We use the resulting grant to discover accounts the user can access, let an authorized user select specific advertising accounts, synchronize permitted advertising data, answer questions, and create requested reports or monitoring results.

Google credentials are treated separately from advertising data. OAuth codes and token material are not intended to appear in the browser after exchange, prompts, ordinary logs, reports, or published artifacts. Revoking Google access stops future authorized API access but does not automatically remove information already retained by ChatGrowing; use our data deletion process for that request.

ChatGrowing’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

authenticate users and enforce organization, role, capability, resource, and account boundaries;
connect services and perform user-requested data retrieval, analysis, reporting, monitoring, and delivery;
provide analysis mode and action mode, applying the user’s account scope, approval rules, operating policies, and limits to supported advertising operations;
maintain data quality, freshness, reliability, abuse prevention, debugging, backup, and recovery;
provide support, communicate material service or security changes, and comply with legal obligations;
improve product workflows using information we are permitted to use under the applicable account, agreement, consent, and law.

Depending on the user’s location and relationship with ChatGrowing, processing may be based on performance of a contract, consent, legitimate interests in operating and securing the service, or compliance with law.

We may disclose information to the user’s organization and authorized members; to connected platforms and destinations at the user’s direction; to infrastructure, authentication, security, AI-processing, analytics, support, and delivery providers needed to operate the service; in a business transaction subject to appropriate safeguards; or when required to protect rights, safety, the service, or comply with law.

We do not sell connected advertising data. Service providers may process information only for the services they provide to ChatGrowing or as otherwise disclosed and permitted. Because providers and users may operate in different countries, information may be processed outside the user’s location subject to applicable contractual and legal safeguards.

Security

We use layered safeguards appropriate to the service, including encrypted network transport, scoped authorization, tenant and resource checks, server-side credential handling, secret redaction, restricted service identities, audit events, backups, recovery procedures, and fail-closed behavior when identity, scope, or credential context cannot be verified. No system is completely secure. See Security and controls for the operating model and current boundaries.

Retention and deletion

We retain information for as long as needed to provide the workspace, honor user-selected schedules, protect the service, resolve disputes, meet contractual commitments, or comply with law. Different objects have different lifecycles: authorization state, synchronized data, reports, audit events, and backups are not treated as one undifferentiated record.

For commercial tenant connections governed by our standard lifecycle, online access is designed to become unavailable when authorization is revoked; eligible active data is scheduled for deletion within 7 days after a verified deletion request, ordinary backups age out within 35 days, and non-secret audit or deletion receipts may be retained for up to 180 days. A different contract, legal hold, fraud or security investigation, billing record, or applicable law may require a different period, which we will identify where required.

See Data deletion and revocation for the request process and covered categories.

Your choices and rights

Subject to applicable law and authority within a workspace, users may request access, correction, export, restriction, objection, or deletion; disconnect a provider; revoke Google, Meta, TikTok, AppsFlyer, or other connected-provider access; change destinations and monitoring settings; or contact us about a privacy concern. We may need to verify identity and workspace authority before acting. Users may also have the right to complain to a local data-protection authority.

Children

ChatGrowing is a business service and is not directed to children. Users must be legally able to enter the applicable agreement and authorize the connected business accounts they provide.

Changes to this notice

We may update this notice as the service, providers, or legal requirements change. We will update the effective date and provide additional notice when required.

Contact

Privacy, access, and deletion questions can be sent to [email protected]. Do not include credentials or OAuth codes.

YouTube API Services

ChatGrowing uses YouTube API Services for connected channel and video workflows. With your authorization, we process channel identifiers and metadata, video metadata and processing status, and credentials needed to maintain the connection. When you confirm a supported upload or video operation, we send the selected video and metadata to YouTube and read back the result. These features depend on your scopes, channel permissions, and availability in your workspace.

The Google Privacy Policy applies to Google services. You can revoke ChatGrowing access through Google security settings; revocation can affect other Google integrations using the same project. For deletion of data retained by ChatGrowing, follow our data deletion instructions. Use of these features is also subject to the YouTube Terms of Service.