Privacy policy

Effective November 6, 2026

This policy explains what information GrowingLoop collects, how it is used, who it is shared with, and the choices you have. It covers the website at growingloop.com and the GrowingLoop app.

Who we are

GrowingLoop is a marketing platform operated by The Automatic Office, Corp ("we", "us"). For any question about this policy or your information, write to privacy@growingloop.com.

What we collect

• Early access requests. When you ask for access on our website: your name, work email, company, role and the note you write.
• Sign-in. Your email address. We send a one-time code to that address to sign you in, and set one cookie that keeps you signed in. We do not use advertising or tracking cookies.
• Your work in the app. What your team uploads or builds: ads, landing pages, emails, brochures, blog posts, social posts, pictures and documents. Also the comments, approvals and requests for changes that people on a project write.
• Activity in the app. When you review a project's material, we record what you open, click and scroll, which tab and week you look at, and the type of device, screen size and browser. The project's agency uses this to understand how the review went.
• Technical logs. Our servers record IP addresses, browser details and the time of requests, to keep the service secure and to fix problems.
• Data from connected accounts. When a customer connects an advertising account, such as Google Ads, we access that account's data. The section on Google below explains this.

How we use it

• To provide the service: show a project's material to the people on it, record their feedback, and run the campaigns the customer's team approves.
• To sign you in and keep your account secure.
• To answer early access requests and other messages.
• To measure how campaigns perform, for the customer who runs them.
• To keep the service working, safe and improving.

We do not sell personal information, and we do not use it to show you advertising.

Google user data

A customer can connect a Google Ads account to GrowingLoop. With the customer's permission, GrowingLoop then reads that account's campaigns, ad groups, ads, keywords, budgets and performance reports. It creates or changes campaigns, ads, keywords and budgets in that account only as the customer's team asks or approves.

• We use Google user data only to provide and improve these features for that customer.
• We do not sell Google user data, use it for advertising, or use it to decide credit or lending.
• We do not transfer it to others, except to service providers that help us run GrowingLoop, when the law requires it, or as part of a merger or sale with notice to the customer.
• We do not use it to develop, improve or train general artificial intelligence or machine learning models.
• People read it only with the customer's permission, for security, to comply with the law, or when it is combined and anonymous.

GrowingLoop's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

A customer can remove GrowingLoop's access at any time in the Google account's security settings, under third-party access, or by writing to us. Once access is removed, we stop reading the account, and we delete the Google data we hold for it on request.

Who we share it with

• People on your project. The agency's team and the client's reviewers on a project see that project's material, comments and approvals.
• Service providers. Amazon Web Services hosts the service and sends our emails. Our pages load fonts from Google Fonts, which receives your IP address. When an AI feature works on a project's material, an AI model provider processes that material for us. Each provider may use the data only to provide its service to us.
• The law. When the law requires it, or to protect the rights and safety of people and the service.

How long we keep it

We keep account and project information while the account or project is active. We delete it when it is no longer needed, or when you ask us to, unless the law requires us to keep it. Technical logs are kept for a short time for security.

How we protect it

Connections to GrowingLoop are encrypted. Access to a project is limited to the people on it, and each person sees only what their role allows. Keys and passwords are kept apart from the code and the data. Google refresh tokens are stored encrypted (AES-256-GCM), with a key kept apart from the code and the data, and are used only to act on the accounts the customer connected.

Your choices

You can ask to see, correct or delete the personal information we hold about you, or ask us to stop using it. Write to privacy@growingloop.com. We answer within 30 days. If you use GrowingLoop through a company or an agency, we may pass your request to them, since they decide what their project holds.

Children

GrowingLoop is for businesses. It is not meant for children under 16, and we do not knowingly collect their information.

Changes

If we change this policy, we post the new version here with its date. If the change is significant, we tell the people who use the app.