LEGAL
Your business is yours. Here is exactly what we hold, why we hold it, and how to make us let go of it.
Last updated July 30, 2026
We collect what we need to run the thing you asked us to run - your account, your business context, and the marketing accounts you choose to connect. We use it to operate the Service for you.
We do not sell your data. We do not use it to train anyone's AI model. Nothing you connect is used for anything except the work you asked for. Ask us to delete it and we will, within 30 days.
GrowthMastery.ai ("we," "us," or "our") is operated by Joe McVeen. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use growthmastery.ai and the GrowthMastery platform (together, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.
When you connect a third-party account, we receive information from that service. You choose which accounts to connect, and you can disconnect any of them at any time.
When you connect your Meta account, we request the following through the Meta API:
We do not sell your Meta data to third parties, and we do not use it for anything unrelated to the services you asked for.
You can revoke our access at any time by disconnecting Meta in your GrowthMastery settings, or by removing GrowthMastery from your Facebook Business Integrations settings. On revocation we stop pulling new data and delete cached Meta data within 30 days, unless the law requires us to keep it.
We use the following providers to operate the Service. Each one processes only what it needs to do its job.
You can read growthmastery.ai without giving us anything. If you do choose to give us something, this is what happens to it:
We do not run advertising trackers that follow you off this site to sell your attention to someone else.
You can control cookies in your browser settings. Disabling essential cookies will prevent you from signing in.
We keep your personal information for as long as your account is active, or as long as we need it to provide the Service. If you delete your account we delete or anonymize your personal data within 30 days, except where retention is required by law or for a legitimate business purpose such as fraud prevention.
Cached data from third-party integrations is kept only while that integration is connected, and is deleted within 30 days of disconnection.
We use industry-standard protections: encryption in transit (TLS), encrypted data at rest, secure authentication, and regular security review. No method of transmission over the internet is completely secure, so we cannot promise absolute security - but we can promise we take it seriously and will tell you honestly if something goes wrong.
Depending on where you live, you may have the right to:
If you are in the EEA, our legal bases for processing are: performance of a contract (providing the Service), legitimate interests (improving and securing the Service), and consent where applicable. You have the right to lodge a complaint with your local data protection authority.
If you are a California resident you have the right to know what personal information we collect, to request its deletion, and to opt out of its sale. We do not sell your personal information. Email us to exercise any of these rights.
The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children. If we learn we have, we delete it promptly.
We may update this policy. We will post the updated version on this page and change the "Last updated" date, and we will tell you directly about significant changes. Continuing to use the Service after a change means you accept the revised policy.
Questions about this policy, or want to exercise your data rights?