Legal
Privacy Policy
GROHERO, Inc. ("GROHERO," "we," "us," or "our") builds and runs growth systems for business customers. This policy explains what personal information we collect, how we use it, and the choices you have. It covers our website at grohero.com, our web applications, browser extensions, integrations, and any other product or service that links to this policy (together, the "Services").
If you use the Services on behalf of a company, that company's agreement with us may set additional rules for how we handle its data. Where that agreement and this policy conflict, the agreement wins for that company's data.
1. Information we collect
Information you give us. When you contact us, book a call, request a proposal, sign up for the Services, or connect a third-party account, we collect what you provide: your name, work email, company, role, phone number, and the content of your messages. When you become a customer we also collect billing details and the material you share with us to do the work, such as brand guidelines, sales call recordings, customer research, and account access.
Information from connected accounts. The Services can connect to third-party platforms you authorize, such as Google Workspace, Meta, LinkedIn, HubSpot, Salesforce, Slack, Notion, and analytics tools. When you connect an account we receive the data that platform makes available under the permissions you grant. Google account data is covered in Section 4.
Information collected automatically. When you visit grohero.com or use the Services we collect device and usage data through cookies and similar technologies: IP address, browser type, pages viewed, referring pages, time on page, and approximate location derived from IP address. Section 5 describes the cookies we use.
Information from other sources. We may receive business contact details from data providers, public sources such as company websites and LinkedIn, and from partners who refer you to us.
2. How we use information
We use personal information to:
- provide, operate, and improve the Services and deliver the work our customers hire us for;
- respond to inquiries, schedule meetings, and send proposals;
- set up and administer customer accounts, including connected integrations;
- analyze marketing performance, sales conversations, and customer evidence for the customer that owns that data;
- send service updates, and marketing about GROHERO that you can opt out of at any time;
- measure and improve our website and advertising;
- detect, prevent, and investigate fraud, abuse, and security incidents;
- comply with law and enforce our terms.
We do not sell personal information, and we do not share it with third parties for their own marketing.
3. Automated processing and AI
GROHERO uses machine learning models, including models hosted by third-party AI providers, to analyze content and generate work product such as ad copy, landing pages, and sales materials. Content you or your company provide may be processed by these models to deliver the Services. We use providers that contractually commit not to train their models on customer data, and we do not use your personal information or Google user data to train generalized or non-personalized AI or machine learning models.
4. Google user data
Some GROHERO applications request access to Google user data through Google APIs, for example Gmail, Google Calendar, Google Drive, Google Docs, Google Sheets, Google Slides, or Google Contacts. This section explains how those applications handle that data.
What we access. Each application requests only the scopes it needs for the feature you are using. Depending on the application, this can include: reading and sending email on your behalf, reading and creating calendar events, reading and writing files, documents, spreadsheets, and presentations you choose, and reading contact details. The specific permissions are listed on the Google consent screen when you connect your account.
How we use it. We use Google user data only to provide or improve user-facing features of the application you connected it to, such as drafting or sending messages you request, scheduling meetings, reading documents you point the application to, and writing output back to files, sheets, or slides you designate. We do not use Google user data for advertising, and we do not sell it.
How we store it. Access tokens are stored encrypted. Content pulled from Google APIs is retained only as long as needed to perform the feature you requested, or as long as your company's agreement requires, and is then deleted. Data is stored on infrastructure in the United States.
How we share it. We do not transfer Google user data to third parties except: to service providers who process it on our behalf under confidentiality obligations to deliver the feature you requested; when you direct us to; as required by law; or as part of a merger, acquisition, or asset sale, in which case this policy continues to apply. Humans at GROHERO do not read your Google user data except with your explicit permission, when needed for security or to resolve a support issue you raised, or as required by law.
Limited Use. GROHERO's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Workspace user data to develop, improve, or train generalized AI or machine learning models.
Revoking access. You can disconnect a GROHERO application at any time from your Google Account permissions page. When you do, we stop accessing your Google data and delete the stored tokens and any cached content within 30 days, unless retention is required by law.
5. Cookies and tracking technologies
We use cookies, pixels, and similar technologies on grohero.com. They fall into three groups.
Strictly necessary. Cookies our hosting platform, Webflow, sets to serve the site securely and remember basic preferences. These cannot be switched off.
Analytics. Tools such as Google Analytics and Microsoft Clarity that tell us which pages are visited, how visitors move through the site, and where the site is confusing. Clarity may record anonymized session replays and heatmaps. We use this to improve the site.
Advertising. Pixels from advertising platforms such as Meta, LinkedIn, and Google that let us measure our campaigns and show relevant ads to people who visited grohero.com. These platforms may combine this data with information they already hold about you under their own privacy policies.
Your choices. You can block or delete cookies in your browser settings; the site will still work, though some features may degrade. You can opt out of interest-based advertising through the Digital Advertising Alliance, the Network Advertising Initiative, and the ad settings of each platform. Our site does not respond to browser Do Not Track signals, but it does honor Global Privacy Control signals where the law requires it.
6. How we share information
We share personal information with:
- Service providers that host, store, analyze, or process data for us: cloud hosting and storage, Google Workspace, AI model providers, analytics, email and scheduling tools, CRM, payment processors, and communication platforms. Each is bound by contract to use the data only to provide services to us.
- Advertising and analytics platforms as described in Section 5.
- Our customers, for data we process on their behalf. For example, if we run a campaign for a company, that company receives the leads and performance data generated.
- Professional advisers such as lawyers, accountants, and insurers where needed.
- Authorities when required by law, subpoena, or legal process, or to protect the rights, property, or safety of GROHERO, our customers, or others.
- A successor in a merger, acquisition, financing, or sale of assets, with notice to you where the law requires it.
7. Data retention
We keep personal information for as long as needed for the purposes in this policy: for the life of a customer relationship and a reasonable period after, to meet legal, accounting, and reporting obligations, and to resolve disputes. Website analytics data is retained for up to 26 months. Google user data follows the retention rules in Section 4. When data is no longer needed, we delete or anonymize it.
8. Security
We protect personal information with technical and organizational measures appropriate to its sensitivity: encryption in transit and at rest, access controls and least-privilege permissions, multi-factor authentication on internal systems, and vendor review. No system is perfectly secure, and we cannot guarantee that unauthorized access will never occur. If a breach affects your personal information we will notify you as the law requires.
9. Your rights and choices
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a copy in a portable format, restrict or object to certain processing, or withdraw consent. You will not be treated differently for exercising these rights.
California residents. The California Consumer Privacy Act gives you the right to know what personal information we collect and how we use and share it, to delete it, to correct it, and to opt out of "sales" or "sharing" of personal information. We do not sell personal information. Our use of advertising cookies may count as "sharing" for cross-context behavioral advertising, and you can opt out through the cookie choices in Section 5 or by contacting us. We do not use or disclose sensitive personal information for purposes that require a right to limit.
EU, UK, and Swiss residents. GROHERO is the controller of personal information collected through grohero.com and a processor for data our customers provide to us. Our legal bases are performance of a contract, our legitimate interests in running and marketing our business, your consent where required, and legal obligation. You have the right to lodge a complaint with your local data protection authority.
To exercise any right, email privacy@grohero.com. We will verify your identity before acting and respond within the time the law requires. An authorized agent may submit a request on your behalf with proof of authority.
Marketing emails. Every marketing email includes an unsubscribe link. Service and account emails continue while you use the Services.
10. International transfers
We are based in the United States and process data there. If you access the Services from outside the United States, your information will be transferred to and processed in the United States and in other countries where our service providers operate. Where required, we use standard contractual clauses or other approved safeguards for these transfers.
11. Children
The Services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
12. Third-party sites
The Services link to third-party websites and platforms, including Calendly for scheduling and the platforms you connect. Their privacy practices are governed by their own policies.
13. Changes to this policy
We will update this policy as our practices change. The effective date at the top shows the latest version. For material changes we will give notice on grohero.com or by email, and where we intend to use Google user data in a new way we will ask for your consent first.
14. Contact us
GROHERO, Inc.
A Delaware corporation
privacy@grohero.com