Growth Roadmaps

Privacy Policy

Last updated: March 13, 2026

1. Introduction

Growth Roadmaps ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. We are based in Manitoba, Canada, and this policy is governed by the laws of Manitoba, Canada.

2. Information We Collect

We may collect information about you in various ways, including:

  • Personal information you provide when registering (name, email address)
  • Payment information processed through our payment provider (Stripe)
  • Usage data and analytics about how you use our services
  • Information from third-party integrations you connect (Google Search Console, Google Analytics, Google Ads)
  • Technical data such as IP address, browser type, and device information

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send you technical notices, updates, and support messages
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities

4. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties except as described in this policy. We may share information with service providers who assist us in operating our platform, conducting our business, or servicing you, so long as those parties agree to keep this information confidential.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

7. Your Rights

Under applicable privacy laws in Manitoba, Canada, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate personal information
  • Request deletion of your personal information
  • Withdraw consent for processing your information

8. Third-Party Services

Our service integrates with third-party services including Google Search Console, Google Analytics, and Google Ads. These services have their own privacy policies, and we encourage you to review them. We only access the data you authorize through these integrations.

9. Google User Data

This section specifically addresses how we access, use, store, and share data obtained through Google APIs, in compliance with Google's Limited Use requirements.

9.1 Data We Access

When you connect your Google accounts, we may access the following data based on your authorization:

  • Google Search Console: Website performance data including search queries, impressions, clicks, click-through rates, and average position data for your verified properties
  • Google Analytics: Website traffic data including page views, user counts, session duration, bounce rates, traffic sources, and conversion metrics
  • Google Ads: Campaign data including search terms, keywords, ad groups, campaigns, negative keyword lists, and performance metrics

9.2 How We Use Google Data

We use the Google data you authorize exclusively to provide our services:

  • Generate SEO performance reports and forecasts based on Search Console data
  • Create site performance reports using Analytics data
  • Analyze search terms and suggest negative keywords for Google Ads optimization
  • Track keyword rankings and website visibility over time
  • Provide automated weekly and monthly performance updates

9.3 AI Processing of Google Data

To provide our services, certain data may be transferred to xAI for processing. xAI operates under enterprise API terms that explicitly prohibit using customer data for model training or improvement. Data sent to xAI is used solely for the following purposes:

  • Categorizing and grouping website pages for performance analysis
  • Filtering and classifying keywords for negative keyword recommendations
  • Assigning appropriate match types to keywords
  • Generating insights and summaries from performance data

We only send the minimum data necessary for the specific analysis task. xAI does not retain your data beyond the duration of the API request and does not use it to train or improve their models.

9.4 Data Storage

Google data is stored as follows:

  • Data is stored in our secure PostgreSQL database hosted on cloud infrastructure
  • OAuth access tokens and refresh tokens are encrypted at rest using AES-256-GCM encryption before being stored in our database
  • Report data is retained for as long as your account is active and the report exists
  • Temporary processing data (such as search term analysis) is automatically deleted within 96 hours of processing completion
  • Data is isolated by team and is not shared between different teams or accounts

9.5 Data Sharing

We do not sell, rent, or share your Google data with third parties for their own purposes. Google data is only shared with:

  • AI service providers solely for the purpose of processing and analyzing data to deliver our services (as described in section 9.3)
  • Infrastructure providers (database, hosting) who process data on our behalf under strict confidentiality agreements

9.6 Your Control Over Google Data

You have full control over your Google data:

  • You can disconnect any Google integration at any time from your team settings
  • Disconnecting an integration revokes our access to that service's data
  • You can delete specific reports, which removes the associated stored data
  • Deleting your account removes all associated Google data from our systems
  • You can revoke access directly from your Google Account security settings at myaccount.google.com/permissions

9.7 Limited Use Disclosure

Growth Roadmaps' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

10. Cookies

We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

11. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Data Deletion

When you delete your account, all associated personal data, Google OAuth tokens, reports, and stored analytics data will be permanently removed from our systems within 30 days of account deletion. You may also request data deletion at any time by contacting us at the email address below.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at [email protected]. This Privacy Policy is governed by and construed in accordance with the laws of the Province of Manitoba, Canada.