Privacy policy

Last updated 7 November 2026

GrowSaz helps creators understand and grow their YouTube channels, Instagram accounts and TikTok accounts. This policy explains what we collect, why, and your choices.

What we collect

• Your account: name, email and profile image (through our sign-in provider, Clerk).
• When you connect YouTube (Google): your channel details, your videos, their analytics (views, watch time, likes, comments, shares, subscribers, estimated revenue) and their comments. Scopes: youtube.readonly, yt-analytics.readonly and yt-analytics-monetary.readonly to read; youtube.upload to upload the videos you schedule; youtube.force-ssl to post and moderate the comment replies you send.
• When you connect Instagram: your professional account details, your media, their insights (views, reach, likes, comments, shares, saves, follows, watch time) and comments. Permissions: instagram_business_basic and instagram_business_manage_insights to read; instagram_business_content_publish to publish what you schedule; instagram_business_manage_comments to reply to and hide comments; instagram_business_manage_messages to send the private replies your comment-to-DM rules set up.
• When you connect TikTok: your profile, follower counts, your videos and their counts (user.info.basic, user.info.profile, user.info.stats, video.list), and video.publish to post the videos you send from GrowSaz.
• When you connect Google Drive: only the files GrowSaz creates or you pick (drive.file).
• What you type or upload into GrowSaz: ideas, scripts, notes, images and videos, competitors you track, deals, income and expenses, workspace settings.

What GrowSaz does on your accounts

GrowSaz never posts, replies or sends a message on its own. It publishes a video or post only when you press Publish or schedule it, replies to a comment only when you press Send, and sends a private reply only for the comment-to-DM rules you turn on. You can see and cancel scheduled posts in Studio and the Calendar.

How we use it

Only to show you your own analytics and to power GrowSaz features for your workspace. We do not sell your data, use it for advertising, or share it with other users outside your workspace.

AI features

When you use an AI feature (Ask GrowSaz, scripts, captions, thumbnails, comment drafts, the daily brief), the text, numbers and images it needs are sent to the AI model provider through Vercel AI Gateway to produce the answer. Providers process it under their API terms to answer your request. GrowSaz does not use Google user data to train AI models.

Google user data

GrowSaz's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and the YouTube API Services Terms of Service (https://www.youtube.com/t/terms). See also the Google Privacy Policy (https://policies.google.com/privacy).

Storage and security

Access tokens are encrypted at rest (AES-256-GCM). Data is stored with our hosting, file and database providers (Vercel, Vercel Blob, Neon) and sign-in provider (Clerk). Payments go through Stripe; we never see your card number.

Your choices

• Disconnect any account in Settings: we delete its tokens immediately and revoke access where the platform allows it. You can also revoke access at https://myaccount.google.com/permissions or in Instagram settings.
• Delete your workspace and data: see the data deletion page.

Contact

Questions: privacy@growsaz.com