Privacy policy

This policy explains what information GrowthPilot collects, why we collect it and how you stay in control of it. It applies to our website and to every organisation workspace hosted on GrowthPilot.

Information we collect

Account details for the people who use GrowthPilot (name, work email, role), the records your organisation brings in or creates (leads, contacts, companies, notes, tasks, conversations, templates, campaigns and social posts) and technical data such as sign-in times, IP addresses and device type.

Leads and contacts

Your organisation decides which channels feed GrowthPilot: lead ads, messaging apps, website forms, imports, APIs, webhooks and connectors. For the people in those records, GrowthPilot processes data on your organisation’s behalf, under your organisation’s own privacy notice. Your organisation is responsible for having a lawful basis to collect and contact them.

Messages and consent

Email, SMS and WhatsApp messages, delivery events, opens and clicks are stored with the contact so your team sees the full history. Each contact carries consent per channel. Opt-outs, one-click unsubscribes and STOP replies are honoured automatically, and quiet hours keep marketing messages to sensible times.

AI features

When your organisation switches AI on, the text needed for a task (for example a conversation to draft a reply to) is sent to our AI processing provider to produce a suggestion. It is not used to train public models. Administrators can switch AI off for their organisation at any time.

How we use it

To provide and secure the service, deliver the messages your organisation sends, produce the reports you ask for, and improve GrowthPilot. We never sell personal data or use it for our own advertising.

Organisation isolation

Every organisation is a separate tenant. Its records are only visible to the people it has invited, within the permissions its administrators grant. Sensitive changes are written to an audit log.

Retention and deletion

Records are kept while your organisation’s account is active. Administrators can export or delete their data at any time; backups roll off within 30 days.

Your rights

You can ask for a copy of your data, for corrections, or for deletion. If an organisation using GrowthPilot contacted you, ask that organisation first; you can also write to us using the contact page.