Privacy Policy

Last updated: 25 July 2026

Growth OS (“we”, “us”) is an AI SaaS platform that helps creators research trends, generate content, manage media assets, and publish to social platforms. This policy explains what we collect and why.

Account information

When you sign up we store your email, name, and authentication identifiers provided by Supabase Auth. Passwords are handled by Supabase and are never stored in our application database in plain text.

OAuth & connected accounts

If you connect TikTok (or other platforms), we store OAuth access tokens, refresh tokens, open IDs, and account profile metadata required to sync analytics and publish content on your behalf. You can disconnect an account at any time from Connected Accounts.

Cookies & sessions

We use cookies and similar storage for authenticated sessions (Supabase Auth) and workspace preferences (such as the active project). We do not sell personal data to advertisers.

Analytics

Product analytics may include aggregated usage events (feature opens, generation counts, publish attempts) to improve reliability. Social metrics (views, likes, etc.) are synced from platforms you connect and shown only inside your workspace.

TikTok integration

TikTok data is processed under TikTok’s developer terms and your grants via OAuth scopes (for example video.publish). Photo posts use TikTok’s Content Posting API; media URLs must be hosted on a domain you verify with TikTok.

Image uploads & user content

Files you upload (Image Packs, library assets) and content you generate are stored in your workspace and associated projects. You remain responsible for having rights to any media you upload.

AI providers

Prompts and relevant project context may be sent to AI providers you configure, including OpenAI and Groq, to generate copy, opportunities, and chat answers. Do not submit sensitive personal data you are not permitted to process.

Supabase

Authentication and (in production) primary database hosting are provided by Supabase. Their processing is governed by Supabase’s privacy policy and your project configuration.

Stripe (future)

When billing launches, payment details will be processed by Stripe. We will not store full card numbers on our servers.

GDPR & your rights

If you are in the EEA/UK, you may request access, correction, export, or deletion of your personal data. You may object to certain processing or withdraw consent where applicable.

Delete account

Contact us to request account deletion. We will delete or anonymise personal data in our systems within a reasonable period, except where retention is required by law or for legitimate security logs.

Contact

Privacy requests: privacy@growthos.app