Terms & ConditionsPrivacy PolicySecurity

Privacy Policy

Last updated: July 29, 2026 · Effective: July 29, 2026

1. Overview

GrowthEye ("we", "us", or "our") is operated by Beyond Digital Solutions Private Limited, a company incorporated under the laws of India. This Privacy Policy explains how we collect, use, share, and protect information in connection with our lead operations platform and associated services (collectively, the "Services").

By accessing or using the Services, you agree to this Privacy Policy. If you do not agree, you must discontinue use of the Services immediately.

2. Information We Collect

Account information: When you register, we collect your name, email address, phone number, company name, and billing details.

Usage data: We automatically collect information about how you interact with the Services, including log data, IP addresses, browser type, pages visited, features used, and timestamps.

Customer data: The lead and contact data you import or generate through our platform is yours. We process it only to deliver the Services.

Communications: If you contact us for support or send us feedback, we retain those communications.

Device information: We may collect device identifiers, operating system, and mobile network information when you access the Services via a mobile device.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the Services;
  • Process payments and send transaction confirmations;
  • Send you technical notices, updates, security alerts, and support messages;
  • Respond to your comments, questions, and support requests;
  • Send marketing communications (you may opt out at any time);
  • Monitor and analyse usage trends and activity to improve the Services;
  • Detect and prevent fraudulent or unauthorised activity;
  • Comply with legal obligations.

We do not sell your personal information. We do not use your Customer Data to send you marketing communications.

4. Google User Data

When you connect a Google account — to use our marketing analytics and reporting, our Google Business Profile features, or our Mail (Gmail) inbox — GrowthEye accesses, uses, and stores certain Google user data through Google APIs and only with your explicit consent granted on Google's OAuth consent screen. Each feature uses a separate Google connection and requests only the scopes that feature needs, so you may grant one without the others. This section describes that access in accordance with the Google API Services User Data Policy.

Non-sensitive scopes:

  • userinfo.email — to see your primary Google Account email address and identify your connected account.
  • userinfo.profile — to see your basic personal info, including any info you have made publicly available.
  • business.manage — to view and manage your Google Business Profile listings (view, edit, create, and delete listings), read location performance metrics for reporting, and read and reply to customer reviews in our shared inbox, where you use those features.
  • webmasters.readonly — to view Google Search Console data for your verified sites for reporting.
  • yt-analytics.readonly — to view YouTube Analytics reports for your YouTube content.

Sensitive scopes (subject to Google approval):

  • analytics.readonly — to see and download your Google Analytics data for reporting and lead attribution.
  • adwords — to access your Google Ads accounts and data to report on and manage campaign performance.
  • youtube.readonly — to view your YouTube account and channel information.

Restricted scopes — Gmail, requested only when you connect your mailbox to use the Mail (email inbox) feature, and YouTube comment management, requested only when you connect a YouTube channel to use the YouTube Comments feature of our shared inbox. Connecting either is per-user/per-channel and optional. Requesting these scopes subjects GrowthEye to Google's restricted-scope verification, and our use of the data is bound by the Limited Use requirements described below.

Gmail (Mail inbox):

  • gmail.modify — to read your email threads and messages and display them in the inbox, and to make label changes you initiate (mark as read/unread, star, and archive). We deliberately do not request the full-mailbox scope, and we cannot permanently delete your email.
  • gmail.send — to send the emails, replies, and forwards you compose from within GrowthEye.
  • gmail.settings.basic — to read your Gmail "send-as" signature so it can be shown and appended to messages you send.

YouTube (Comments inbox):

  • youtube.force-ssl — to read comments posted on videos on your own connected YouTube channel and show them in our shared inbox, and, only when you type a reply and choose to send it, to post that reply as the channel owner. We do not use this scope to upload, edit, or delete your videos, playlists, or captions, or to moderate or delete other users' comments beyond replying to them.

How we use it: Google user data is used solely to provide the user-facing features you enable — reporting on your marketing performance across Google Ads, Analytics, Search Console, and YouTube, attributing leads to campaigns, managing your Google Business Profile listings and reviews, displaying and replying to comments on your YouTube videos in our shared inbox, and, for the Mail feature, displaying your email conversations with your contacts and sending the messages you compose. We do not use Google user data for our own advertising, we do not sell it, and we do not use it to develop, improve, or train generalised or standalone machine-learning or AI models.

How we store it: Data retrieved from Google APIs is cached only as long as needed to provide these features and maintain your reporting history, is encrypted at rest (AES-256) and in transit (TLS 1.2+), and is access-controlled to your workspace; Gmail and YouTube access and refresh tokens are stored per user/channel and encrypted at rest. You can disconnect your Google account at any time from your account settings — Gmail from the Mail section and YouTube from the Inbox Connectors section — and you may revoke GrowthEye's access directly at myaccount.google.com/permissions. On disconnection or revocation, we delete the associated Google user data, including synced email and cached YouTube comments, within 30 days, except where retention is required by law.

Sharing: We do not sell Google user data and do not transfer it to third parties except as necessary to provide and secure the user-facing features (for example, our cloud hosting provider acting on our behalf under confidentiality obligations), to comply with applicable law, or as part of a merger or acquisition with prior notice.

Limited Use disclosure: GrowthEye's use and transfer to any other app of information received from Google APIs — including data obtained through the Gmail and YouTube restricted scopes — will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not allow humans to read your Gmail data unless we have your affirmative agreement for specific messages, it is necessary for security purposes (such as investigating abuse) or to comply with applicable law, or the data has been aggregated and anonymised; and we do not use Google user data for serving advertisements or transfer it except to provide or improve the Mail and YouTube Comments features, comply with applicable law, or as part of a merger or acquisition.

5. Meta Platform Data

When you connect a Meta account — including Facebook Pages, Facebook Login, Instagram, WhatsApp Business, or Meta Lead Ads — GrowthEye accesses and processes Meta Platform Data through Meta's APIs, only with the permissions you grant during the Meta login and authorisation flow. We use this data in accordance with the Meta Platform Terms and Developer Policies.

Marketing permissions — requested when you connect a Meta account to use our marketing and reporting features:

  • public_profile — basic profile of the connecting user.
  • email — the connecting user's email address.
  • pages_show_list — to list the Facebook Pages you manage.
  • pages_read_engagement — to read your Page posts and engagement metrics.
  • read_insights — to read Page and post insights such as reach and impressions.
  • ads_read — to read your ad accounts, campaigns, and ad insights.
  • business_management — to access the assets you manage through Meta Business Manager.
  • instagram_basic — to read your Instagram account information and its linkage to a Page.
  • instagram_manage_insights — to read your Instagram media and account insights.

Inbox permissions — requested only when you enable the shared-inbox feature:

  • pages_messaging — to read and send Page (Messenger) messages.
  • pages_manage_metadata — to subscribe to Page webhooks for messages and feed activity.
  • pages_manage_engagement — to reply to, hide, or delete comments.
  • pages_read_user_content — to read user comments and posts on your Page.
  • instagram_manage_messages — to read and send Instagram direct messages.
  • instagram_manage_comments — to read and reply to Instagram comments.
  • leads_retrieval — to preserve access to your lead forms (via shared Page tokens) so Lead Ads leads flow into your pipeline.

WhatsApp permissions — requested when you connect WhatsApp Business:

  • whatsapp_business_management — to manage your WhatsApp Business account assets.
  • whatsapp_business_messaging — to read and send WhatsApp Business messages inside our shared inbox.

How we use it: Meta Platform Data is used only to deliver the features you enable — listing and reporting on your Pages, ads, and Instagram assets; importing and routing Lead Ads leads; and powering the shared inbox for Messenger, Instagram, and WhatsApp conversations. We do not sell Meta Platform Data, do not use it for our own advertising, and do not use it to build user profiles for purposes unrelated to the Services.

How we store and delete it: Meta Platform Data is encrypted at rest and in transit and retained only as long as needed to provide the Services. You can revoke GrowthEye's access at any time from your Facebook Business Integrations settings; upon disconnection, expiry of your token, or a data-deletion request, we delete the associated Meta Platform Data within 30 days, except where retention is required by law. To request deletion of your data, email privacy@growtheye.com.

6. Sharing & Disclosure

We may share your information with:

Service providers: Third-party vendors who assist us in delivering the Services (e.g. cloud hosting, payment processors, email providers). These vendors are contractually obligated to keep your data confidential and use it only for the purposes we specify.

Business transfers: If GrowthEye is acquired, merged, or goes through a restructuring, your information may be transferred as part of that transaction. We will notify you beforehand.

Legal requirements: We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to comply with a legal obligation, protect our rights, or prevent fraud.

We do not share Customer Data with any third party for their own marketing purposes.

7. Data Retention

We retain your account information for as long as your account is active or as needed to provide you the Services. You may request deletion of your account and associated data at any time by contacting privacy@growtheye.com.

Billing records are retained for seven years to comply with Indian financial regulations. Anonymised aggregated analytics data may be retained indefinitely.

After account deletion, we will purge your Customer Data from our production systems within 30 days. Encrypted backups are overwritten within 90 days.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct inaccurate or incomplete data.
  • Deletion: Request that we delete your personal data, subject to legal retention requirements.
  • Portability: Receive your data in a machine-readable format.
  • Objection: Object to certain processing activities, including direct marketing.
  • Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise these rights, contact us at privacy@growtheye.com. We will respond within 30 days.

9. Cookies & Tracking

We use cookies and similar tracking technologies to operate our website and Services. Cookies help us remember your preferences, understand how you use our platform, and deliver relevant advertising.

Essential cookies are required for the Services to function and cannot be disabled.

Analytics cookies help us understand product usage. We use tools such as Google Analytics and Mixpanel. You may opt out via your browser settings or our cookie preference centre.

Marketing cookies are used to deliver targeted advertising on third-party platforms. You may opt out at any time by visiting our Cookie Settings page.

10. Security

We take the security of your data seriously. GrowthEye uses industry-standard safeguards including AES-256 encryption at rest, TLS 1.2+ encryption in transit, and role-based access controls. Our infrastructure is hosted in ISO 27001-certified data centres in India.

Despite these measures, no method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact security@growtheye.com immediately.

For full details, see our Security page.

11. Children's Privacy

The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us personal information, please contact us immediately.

12. Data Transfers

GrowthEye stores and processes your data in India. If you access the Services from outside India, your information may be transferred to and processed in India. By using the Services, you consent to this transfer.

For customers who require data residency in specific regions, please contact our sales team to discuss available options under our Scale plan.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date and notify you by email if the changes are material. Your continued use of the Services after such notification constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact our Data Protection Officer:

Beyond Digital Solutions Private Limited

4th Floor, ABR Elite, Kakatiya Hills, Guttala Begumpet, Kavuri Hills, Madhapur, Hyderabad, Telangana 500033

privacy@growtheye.com

+91 80997 08888

8views.com