Privacy Policy
Last updated: 2026-06-10
1. Who we are
This Privacy Policy explains how growthmaxxing ("we", "us", "our") collects and uses personal data when you use our software-as-a-service product at growthmaxxing.bharat-jaju.com (the "Service"). The data controller is Bharat Jaju, whose registered address is Bangalore, India.
If you have any questions about this policy or your data, contact us at bharat@bharat-jaju.com.
2. Data we collect
We collect the following categories of data:
- Account data: the email address you sign up with, managed through Supabase Auth.
- Product data: details you enter about your product, such as its domain, name, description, competitors and ideal-customer profile.
- Service output: the plans, drafts, logged replies, SEO audits and AI-citation results we generate for you.
- Usage and metering data: events that record how you use the Service and how much of each feature you have consumed, used to enforce plan limits.
- Product-analytics data: events about how you interact with the app, collected through PostHog.
- Email preferences: your settings for transactional and digest emails.
3. Payment data
We do not collect or store your card or payment details. When you buy a paid plan, checkout and billing are handled by Dodo Payments, which acts as the Merchant of Record. Dodo collects and processes your payment information under its own privacy policy and terms.
4. How and why we use your data
We use your data to provide and operate the Service: to authenticate you, to generate your distribution plans, drafts, audits and citation reports, to enforce the limits of your plan, to send you transactional and digest emails, to understand and improve how the Service is used, and to provide support and keep the Service secure.
5. Legal bases
Where data-protection law requires a legal basis, we rely on: performance of our contract with you (to provide the Service you have signed up for); our legitimate interests (to operate, secure and improve the Service and to understand how it is used); and your consent where we ask for it, for example for certain communications. Where you have given consent, you may withdraw it at any time.
6. Reddit and other public content
To produce demand signal for your distribution plan, we query public Reddit content from the Arctic Shift dataset, public RSS feeds and public Reddit JSON endpoints. This is publicly available content used to measure demand and surface relevant discussions; it is not your personal data, and we do not post anything to Reddit on your behalf.
7. Service providers (subprocessors)
We share data with the following providers strictly to operate the Service. Each processes data on our behalf under its own terms.
- Supabase — authentication and Postgres database hosting (stores account, product, plan and usage data).
- Vercel — application hosting.
- Dodo Payments — Merchant of Record handling checkout, billing and global sales tax; card details never touch our servers.
- Resend — transactional and weekly digest email.
- PostHog — product analytics.
- Content-generation language-model providers — Groq, Cerebras, and (via the Vercel AI Gateway) Z.ai and DeepSeek.
- AI-citation-polling language-model providers — OpenAI, Anthropic and Perplexity, used to check how your product is cited across answer engines.
8. Cookies and analytics
We use cookies that are necessary to run the Service, including Supabase authentication cookies that keep you signed in. We also use PostHog for product analytics to understand how features are used and to improve the Service. We do not use advertising cookies.
9. Data retention
We keep your personal data for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or anonymise the associated personal data within a reasonable period, except where we need to retain limited records to meet legal, accounting or security obligations.
10. Security
We protect your data using measures including Postgres row-level security, which restricts each account to its own data, and encryption of data in transit. No system can be guaranteed to be completely secure, but we work to protect your information and to limit access to it.
11. International transfers
We and our service providers may process your data in countries other than the one where you are based. Where data is transferred internationally, we rely on appropriate safeguards as required under the law of Bangalore, India.
12. Your rights
Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing. You can delete your account and associated data yourself from within the app at growthmaxxing.bharat-jaju.com/account. To exercise any other right, contact us at bharat@bharat-jaju.com and we will respond as required by applicable law.
13. Children
The Service is intended for business use by people aged 18 or over. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
14. Changes to this policy
We may update this Privacy Policy from time to time. If we make a material change, we will update the "Last updated" date above and, where appropriate, notify you by email or in the app.
15. Contact
For any questions about this Privacy Policy or your data, contact us at bharat@bharat-jaju.com. You can also read the terms that govern the Service in our Terms of Service at growthmaxxing.bharat-jaju.com/terms.
Questions? Contact us at bharat@bharat-jaju.com.