Privacy policy
What we collect, why, and how to have it removed.
Last updated: October 2026
What we collect
When you submit a form on this site we collect the details you enter: name, email, phone number, website and message. Our server also keeps standard access logs (IP address, browser, pages requested) for security and troubleshooting.
How we use it
We use form details only to reply to your request and to prepare a proposal. We do not sell or rent personal information, and we do not add you to a mailing list unless you ask.
Newsletter
If you subscribe, we store your email address to send the newsletter. Every issue has an unsubscribe link, and you can also ask us to remove you at any time.
Client portal accounts
If you create a portal account we store your name, contact details, the orders you place and the messages you exchange with our team. Passwords are stored only as one-way hashes. The portal uses one essential session cookie to keep you signed in. No card or bank details are collected on this website.
Connected social accounts
If you use Social Publishing to connect a TikTok account, you authorise it on TikTok's own website and we never receive your TikTok password. We store the access and refresh tokens TikTok issues, your public TikTok profile name, username and avatar, the videos you queue and the status of each post. We use them for one purpose only: to publish the posts you have set up and to show you their status. Videos are stored on our server only until TikTok has finished retrieving them, and are then deleted; queued videos are served from an unlisted address so TikTok can fetch them. We do not read your TikTok messages, followers or analytics, and we do not share this data with anyone. Disconnecting the account in the portal revokes our access with TikTok immediately and deletes the stored tokens. You can also remove our access from the Manage app permissions page in your TikTok settings. TikTok's own handling of your data is covered by its privacy policy.
Growth CRM app, Facebook and Instagram
The Growth CRM mobile app uses the same account as the client portal. If you connect a Facebook Page or an Instagram professional account, you sign in on Facebook's own website through Facebook Login and we never receive your Facebook password. Meta gives us an access token for each Page you choose, the Page's name, ID and picture, and the linked Instagram account's ID, username and picture. We use these for one purpose only: to publish the posts you, or our team with your approval, schedule in the app, and to show you whether each post went out with a link to it. Photos and videos you upload are stored on our server until the post is published and are removed after that. We do not read your messages, comments, followers or insights, we do not use the data for advertising, and we do not sell or share it with anyone. App purchases are handled by Google Play or the App Store; we receive only a purchase confirmation, never your card details. AI caption suggestions send only the short brief you type to our AI provider to generate text.
Deleting your data
You can remove a connected Facebook Page or Instagram account at any time in the Growth CRM app under Account, Connected accounts: we immediately delete its access token and stop publishing to it. You can also remove Growth CRM from Facebook under Settings, Business integrations. To delete your whole account, open the app and choose Account, Delete account: your login, connected accounts, tokens and scheduled posts are removed. You can also email info@growthasteroid.com from your account address and we will delete everything we hold about you within 30 days and confirm by email.
Cookies and analytics
This site uses Google Analytics to understand, in aggregate, which pages are useful and where visitors come from. It sets analytics cookies; it does not set advertising cookies, and we do not use it to identify you. You can opt out with your browser settings or Google's opt-out add-on.
Third parties
If you contact us through WhatsApp, email or a social platform, that provider's own privacy policy applies to the conversation. Fonts on this site are served by Google Fonts.
Retention and your rights
We keep enquiry details for as long as needed to handle your request and any resulting work. You can ask us to access, correct or delete your information at any time by emailing info@growthasteroid.com.