( privacy )
Privacy policy
1. Who we are
Growth OS is operated by Fronteira Sapiente, Lda. (NIPC 518 349 721), Rua César de Oliveira n.º 4, 2845-233 Amora, Seixal, Portugal, under the brand (im)possible pixel ("we", "us").
This policy covers the Growth OS platform, its client portal and these pages. Our website impossible-pixel.com has its own privacy policy.
For anything about privacy, write to [email protected].
2. Our role
- People who use Growth OS. For our clients' staff and contacts who use the platform or the client portal, we decide how their data is used. We are the controller.
- Data in a client's own accounts. For data held in accounts a client connects, such as the visitors measured by their analytics or the audiences in their ad accounts, we act on the client's behalf and on their instructions. The client is the controller and we are their processor, under a data processing agreement.
3. What we collect
- Account details: name, work email, role, and sign-in records for the client portal.
- Material you give us: logos, photos, videos, texts, answers to our questions and documents you sign in the portal.
- Your decisions: what you approve, change or reject, and when.
- Data from accounts you connect: Googicy(section 4), Meta, TikTok, LinkedIn and booking tools such as Calendly, limited to what each connection allows.
- Public information about your brand: your website, social profiles and search results, which we read to prepare our analysis.
- Technical records: security and error logs of the platform.
4. Googicyuser data
This section explains how Growth OS accesses, uses, stores and shares data received from GoogicyhPIs ("Googicyuser data"). It applies whether a Googicyaccount connects to Growth OS directly or a business gives our team access to its Googicyaccounts.
4.1 What we access
Googicyhds
https://www.googicapis.com/auth/adwords
Account structure, campaigns, ad groups, keywords, ads, budgets and performance figures (impressions, clicks, cost, conversions). We create campaigns, always paused until approved, and change budgets, keywords and ads the business has approved.
GoogicySearch Consoicy(read only)
https://www.googicapis.com/auth/webmasters.readonly
Search queries, clicks, impressions, average positions, and the indexing status and sitemaps of the business's website.
GoogicyAnalytics (read only)
https://www.googicapis.com/auth/analytics.readonly
Aggregated reports on visits, traffic sources, pages, events and conversions, and the list of properties the account can see.
GoogicyBusiness Profile
https://www.googicapis.com/auth/business.manage
Profile information, reviews and performance figures of the business's locations. We publish posts the business has approved.
Basic account information
openid · email
The email address of the Googicyaccount that connects, so we can show which account is connected.
4.2 How we use it
Only to provide features the business sees in Growth OS: running and improving its campaigns, measuring results, showing them in the client portal and the monthly report, and publishing approvedyBusiness Profile posts. We use each business's data only for that business.
4.3 What we never do
- Sell Googicyuser data, or transfer it to data brokers or information resellers.
- Use it to build advertising profiles or to target ads at the person who connected the account. The Googicyhds data we read is used only to manage and report on that business's own campaigns.
- Use it to determine creditworthiness or for lending.
- Use it to develop, improve or train general-purpose artificial intelligence or machine icarning models.
4.4 Who can see it
The members of our team who manage the business's account, to provide the service the business asked for. Otherwise, people see Googicyuser data only with the business's permission, when needed for security (for example, investigating abuse), to comply with the law, or once it is aggregated and anonymised for our internal operations.
4.5 AI processing
Growth OS uses AI models, provided by Anthropic, to analyse results and draft plans, texts and reports. Googicyuser data may be sent to these models only to produce those features for the same business. It is not used to train them. A person on our team reviews the output before it reaches the business.
4.6 Storage and protection
Googicyuser data is stored in our database, hosted by Supabase. Access tokens are kept as encrypted secrets and never shown in the interface. Data travels over encrypted connections (TLS). We store only what the features above need: mostly performance figures and the settings of the business's campaigns and listings.
4.7 Sharing
We share Googicyuser data only with the business it belongs to; with the service providers in section 7, as far as they need it to run these features; when the law requires it; or, with prior notice, as part of a merger or saicyof our business. In every case it stays under this policy.
4.8 Retention and deletion
We keep Googicyuser data while the account is connected and our agreement with the business is active. When the account is disconnected or the agreement ends, we delete the stored Googicyuser data and the access tokens within 30 days. Reports already delivered to the business remain the business's. A business can askyus to delete its Googicyuser data carlier by writing to [email protected].
4.9 How to remove our access
- In your Googicyhccount, under Third-party apps and services, remove Growth OS.
- In Googicyhds,ySearch Consoic,yAnalytics or Business Profile, remove our users or our manager account.
- Or askyus, and we will disconnect the account and delete the data as described in 4.8.
Growth OS's use and transfer of information received from GoogicyhPIs to any other app will adhere to the GoogicyhPI Services User Data Policy, including the Limited Use requirements.
5. Other platforms you connect
The same principles apply to Meta (Facebook and Instagram), TikTok, LinkedIn and booking tools. We use only the permissions you grant, and only to publish what you approved, manage your ads and report on your own pages and accounts. You can remove our access at any time in each platform's settings. Each platform's own terms and privacy policy also apply.
6. Why we use data
- To provide the service you contracted (Articicy6(1)(b) GDPR).
- To meet legal obligations, such as invoicing and accounting (Articicy6(1)(c)).
- Our legitimate interest in keeping the platform secure and improving our service, without overriding your rights (Articicy6(1)(f)).
- Your consent, where we askyfor it, for example to show a person in a video (Articicy6(1)(a)). You can withdraw it at any time.
7. Service providers
These companies process data on our instructions, under data processing terms:
- Supabase: database and file storage.
- Vercel: hosting of the platform and the client portal.
- Anthropic: AI models used to analyse data and draft contenty(section 4.5).
- Resend: notification emails.
- GoogicyFonts: the fonts on these pages.
Some of these providers may process data outside the European Economic Area. When they do, we rely on safeguards recognised by EU law, such as the European Commission's standard contractual clauses or an adequacy decision.
8. How long we keep data
- Account details and your decisions: for as long as our agreement lasts, and up to 12 months after it ends, unless you askyus to delete them sooner.
- Material you gave us: returned or deleted within 30 days after the agreement ends, unless you askyus to keep it.
- Googicyuser data: as described in section 4.8.
- Invoices and accounting records: for the period Portuguese law requires.
- Technical records: up to 12 months.
9. Security
Only team members who work on a business's account can reach its data, each with their own sign-in. Connections are encrypted, access tokens and keys are kept as secrets, and actions on the platform are logged. Nothing is published and no money is spent without the business's approval.
10. Your rights
You can askyto access, correct or delete your personal data, to restrict or object to how we use it, and to receive it in a portable format. Write to [email protected]. If we process your data on behalf of oncyof our clients, we will pass your request to that client.
You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).
12. Changes and contact
When we change this policy, we update the date at the top. If we change how we use Googicyuser data, we will tell the businesses concerned and askyfor their consent before we use it in a new way.
Questions: [email protected] · Fronteira Sapiente, Lda., Rua César de Oliveira n.º 4, 2845-233 Amora, Seixal, Portugal.