Privacy Policy

What we collect

GrowRockets collects only the minimum data needed to provide the service:

  • Your email address (for authentication)
  • API keys for connected integrations: PostHog, Amplitude (encrypted at rest with AES-256)
  • OAuth tokens for Google Analytics 4 (encrypted at rest with AES-256)
  • Aggregated analytics data fetched from your connected tools (funnel metrics, retention rates)
  • Product metrics you enter manually or upload via CSV

What we do NOT store

  • Raw event data or individual user events from any analytics tool
  • Personally identifiable information (PII) beyond your email
  • API keys or OAuth tokens in plain text

Data encryption

All API keys (PostHog, Amplitude) and OAuth tokens (Google Analytics 4) are encrypted at rest using AES-256 encryption before being stored in our database. The encryption key is stored separately from the database.

Data retention

Growth review results, initiatives, and your product profile are retained for the duration of your account. When you delete your account, all data is permanently and immediately removed.

  • Active accounts: data retained as long as your account exists
  • Cancelled paid plans: data retained, account reverts to free tier
  • Account deletion: all data permanently deleted immediately
  • Connected API keys: encrypted at rest, deleted immediately on disconnection

Sub-processors

We use the following third-party services to deliver GrowRockets:

  • Supabase (EU, Frankfurt) — database and authentication
  • Vercel (US/EU) — hosting and serverless functions
  • Anthropic (US) — AI analysis engine (no customer data is stored by Anthropic)
  • Stripe (US/EU) — payment processing
  • Resend (US) — transactional email delivery

Data controller

GRockets OU, registered in Estonia (EU). We process data under GDPR with legitimate interest as the legal basis for service delivery, and consent for analytics tracking.

Your rights

  • Access: View all data we store about you in your settings
  • Deletion: Delete your account and all data with one click
  • Portability: Export your analysis results at any time

Cookies and analytics

We use essential cookies for authentication. We also use analytics tools (PostHog, Amplitude) to understand how the product is used and improve it.

Analytics tracking only activates after you accept cookies via the consent banner. If you decline, no analytics data is collected. We do not use advertising cookies or share analytics data with third parties.

Contact

For privacy-related questions, contact us at privacy@growrockets.io.