Privacy Policy

When you sign up we collect your name and email address (via our authentication provider, WorkOS) and the workspace data you create: funnels, pages, analytics, integration configuration, and team membership. We use this to operate the Service and to contact you about your account (approval, invitations, product alerts). You can unsubscribe from non-essential product email at any time.

On granvl.com, we use PostHog to measure page visits, traffic sources and calls to action. A first-party cookie shared with app.granvl.com lets us connect a website visit to signup and subsequent product use. Marketing website session recording is disabled. We do not capture contact form contents through this integration.

We use PostHog to understand how the dashboard is used and to capture errors, so we can fix what breaks. This includes session replay: recordings of your dashboard screens with text inputs masked. It covers your activity in our product, not your visitors’ personal data.

• Analytics on published pages are first-party and aggregate: page views, clicks, form submits, session flow. Visitor identifiers are salted hashes; we do not store visitor names, emails, or other personal form contents.
• Form submissions deliver directly from the visitor's browser to the destination our customer chose (their CRM, webhook, or lead platform). Our servers record that a submission happened, the visitor's non-identifying answers (for example a quiz selection), and salted digests of the email and phone used for de-duplication, never the contact details themselves.
• Lead receipts. Where a customer has turned the feature on, the visitor's browser also encrypts a complete copy of the submission (all fields, including free text) under a granvl public key before sending it. The encrypted copy is stored for 21 days in a write-only vault in a separate cloud account, in Canada or the United States as the customer chooses, and is then deleted automatically. Nothing on granvl's servers can read it: the only key that opens a receipt is held offline and used solely when a customer's workspace administrator asks us to recover leads that their own integration failed to deliver. Every such request is recorded. Receipts are off unless turned on for a workspace, and the customer can turn them off at any time in Settings.
• Customers may add their own tracking pixels (Meta, Google, TikTok, etc.) to their pages; those are governed by the customer's own privacy disclosures.

For visitor data we process on our customers’ behalf, the customer is the controller and granvl is a processor under our Data Processing Agreement at granvl.com/dpa.

When you connect an ad platform, CRM, or lead distributor, we store the access credentials encrypted at rest and use them only to perform the actions you configure (syncing performance data, creating campaigns you request, delivering leads). We never sell or share this data.

When you connect a Google account (Google Ads):

• What we access: your Google account email address (to label the connection) and your Google Ads data — accounts, campaigns, ad groups, ads, keywords, and performance metrics such as spend, clicks, and conversions.
• How we use it: only to provide the features you use — showing your campaigns and performance in your workspace, and creating or updating campaigns you explicitly request. granvl’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Transfer: we do not sell, share, or transfer Google user data to third parties, except to the infrastructure providers in Section 7 as needed to run the Service.
• AI/ML: we do not use Google user data to develop, improve, or train AI or machine-learning models.
• Protection: OAuth tokens are encrypted at rest and all data moves over TLS.
• Retention and deletion: disconnect Google Ads in Settings to revoke access; we delete the stored tokens immediately. To delete synced ads data, use granvl.com/delete-my-data or email support@granvl.com. Deleting your account removes everything.

When you connect a Meta ad account:

• What we access: your ad accounts, campaigns, ad sets, ads, creative metadata, and performance metrics such as spend, impressions, clicks, and conversions, via the Meta Marketing API under the permissions you approve. Where you configure it, we also send server-side conversion events to Meta using your own pixel and access token.
• How we use it: only to provide the features you use — showing performance in your workspace, joining it with conversions measured on your granvl pages, and taking actions in your account that you explicitly request. Data received from Meta (“Platform Data”) is processed in accordance with the Meta Platform Terms and Developer Policies.
• We do not sell Platform Data, use it to build advertising profiles of individuals, or share it with third parties except the infrastructure providers in Section 7 as needed to run the Service.
• Retention and deletion: disconnect Meta in Settings (or in Meta Business Settings → Integrations) to revoke access; we delete the stored tokens immediately, and delete synced data on request via granvl.com/delete-my-data. Deleting your account removes everything.

We rely on a small set of infrastructure providers to run the Service: Vercel (hosting), Supabase (database and storage), WorkOS (authentication), PostHog (product analytics, session replay, and error tracking), Better Stack (server logs and uptime monitoring), Resend (transactional email), Upstash (rate limiting), and Amazon Web Services (encrypted lead receipts only, in Canada or the United States as the customer chooses). Each processes data only as needed to provide their function. Except for lead receipts, these providers process data in the United States. The full, current list, with what each touches, is maintained at granvl.com/subprocessors.

AI providers. When you use an AI feature, your prompt and the workspace data needed to answer it are sent to third-party model providers — currently OpenAI, Anthropic, and Google, reached through OpenRouter, which may route to other providers — and, for research features, to Exa, Firecrawl, or Apify. We turn on zero-data-retention and no-training options wherever a provider offers them and disable request logging where we can, but these are best-effort measures on infrastructure we do not operate. Your leads' contact details are never part of these requests. Hosted AI features stay off until a workspace owner or admin accepts the AI terms, and the list of providers is kept current at granvl.com/subprocessors.

Generation and research providers. When you use a marketing Capability (image, video, or audio generation, or web, advertising, and keyword research), we send only the prompt or query you wrote and the reference files you selected to the provider serving the model you chose. These requests never include other workspaces’ data, your leads’ contact details, or your workspace context. Generation models are reached through OpenRouter and served by OpenAI, Google, Black Forest Labs, and ByteDance’s BytePlus (Singapore); research uses Perplexity, Parallel, DataForSEO, and Foreplay, and landing pages are loaded for review in a Browserbase hosted browser. Ad text retrieved from Foreplay is kept for at most 30 days; our own notes about an ad are kept until you delete them. Where a provider is located outside the United States or European Union the model is labelled with its region in the product, and a workspace owner can restrict generation to chosen regions. We disable prompt logging and training wherever the provider offers the option, and we keep a hash of each request so misuse is traceable. Generated files are stored in your workspace until you delete them. The full list, with each provider’s location and data terms, is at granvl.com/subprocessors.

The dashboard uses cookies for sign-in (essential), your theme preference, and PostHog analytics. Pages our customers publish set only a first-party cookie that keeps a visitor on the same page variant; it identifies no one. More detail is in our Cookie Policy at granvl.com/cookies.

Depending on where you live, you have rights to access, correct, delete, and receive a copy of your personal information, and to object to or restrict certain processing. To exercise them, email support@granvl.com or use granvl.com/delete-my-data — we respond within 30 days.

• Canada: we comply with PIPEDA and BC’s PIPA. You may withdraw consent, and you may complain to the Office of the Privacy Commissioner of Canada or the OIPC for British Columbia.
• EEA / UK / Switzerland: where the GDPR or UK GDPR applies, our legal bases are performance of a contract (operating your account), legitimate interests (securing and improving the Service), and consent where required. You may complain to your supervisory authority. International transfers to the US rely on Standard Contractual Clauses, incorporated through our DPA.
• California and other US states: we do not sell personal information for money. Where analytics could constitute “sharing” under state law, you can opt out by emailing support@granvl.com; we also honor Global Privacy Control signals.

The Service is for business use and not directed to children. We do not knowingly collect personal information from anyone under 16; if you believe we have, contact support@granvl.com and we will delete it.

All traffic is encrypted in transit (TLS); credentials and integration tokens are encrypted at rest. Workspaces are isolated with default-deny, role-based access, and security-relevant actions are logged. Nightly encrypted backups are retained for 30 days with automated restore verification. Lead receipts are encrypted in the visitor's browser before they reach us and stored with a credential that can write but never read; the decryption key is kept offline. No system is perfectly secure, but we design for minimal data held and least access.

Workspace data is retained while your account is active. Encrypted lead receipts are deleted automatically 21 days after the submission, whatever the account status. To delete your account and its data, or specific data such as synced ads data, use the form at granvl.com/delete-my-data or email support@granvl.com. We verify the request, act on it within 30 days, and confirm when deletion is complete, except for records we are legally required to retain (which remain protected until deleted).

We may update this policy as the product evolves; material changes will be reflected here with an updated date.

Privacy questions: support@granvl.com.