Privacy Policy

Last updated: March 2026

Growth Punch, Inc. (“Growth Punch,” “we,” “us,” or “our”) operates the growthpunch.io website and the Growth Punch platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

1. Information We Collect

Business Information

When you sign up for Growth Punch, we collect information about your business, including your business name, address, service area, services offered, contact information, and business hours. This information is necessary to create and manage your advertising campaigns, landing pages, and AI intake services.

Ad Account Data

We access data from your connected advertising accounts through the following platform APIs:

• Meta Marketing API: We access your Meta (Facebook/Instagram) ad account data to create and manage advertising campaigns, retrieve campaign performance metrics, generate audience insights, create custom audiences for targeting, and manage ad creative assets. We access only the data necessary to provide our advertising management services.
• Google Ads API: We access your Google Ads account data to create and manage search campaigns, manage Local Services Ads (LSA), conduct keyword research and optimization, retrieve performance reporting and analytics, and manage ad creative and extensions.

Website Analytics

We collect analytics data from the landing pages and websites we create on your behalf, including visitor traffic, conversion events, form submissions, and call tracking data. This data is used to optimize your campaigns and provide performance reporting.

AI Intake Data

When our AI intake system handles phone calls, SMS messages, web forms, or chat interactions on your behalf, we collect the content of those communications, caller/sender information, lead qualification data, and appointment booking details. This data is necessary to provide our lead qualification and job booking services.

Payment Information

We collect payment information necessary to bill you for our platform services. Payment processing is handled by Stripe. We do not store your full credit card number on our servers. Your ad spend is paid directly to Google and Meta through your own accounts — we never handle your ad dollars.

Usage Data

We automatically collect certain information when you visit our website, including your IP address, browser type, operating system, referring URLs, pages viewed, and time spent on our site. We collect this data through cookies and similar technologies.

2. How We Use Your Information

We use the information we collect to:

• Create and manage advertising campaigns on Google and Meta platforms
• Generate and optimize ad creative (text and images)
• Build and maintain conversion-optimized landing pages
• Operate AI-powered phone, SMS, and chat intake services
• Qualify leads and book appointments on your behalf
• Facilitate payment collection for your services
• Provide performance reporting and analytics
• Improve our platform through aggregated, anonymized usage patterns
• Communicate with you about your account and our services
• Comply with legal obligations

3. How We Use Meta Platform Data

Data obtained through the Meta Marketing API is used exclusively to provide advertising services on your behalf. Specifically, we use Meta platform data to:

• Create, manage, and optimize Facebook and Instagram advertising campaigns
• Generate performance reports for your ad campaigns
• Build and refine audience targeting for your ads
• Create and test ad creative variations
• Provide attribution and conversion tracking via Meta Conversions API (CAPI)

We do not sell Meta platform data. We do not use Meta platform data for purposes unrelated to providing our advertising services to you. We do not share Meta platform data with third parties except as necessary to provide our services (e.g., with analytics tools for performance reporting) or as required by law.

4. How We Use Google Ads Data

Data obtained through the Google Ads API is used exclusively to provide advertising services on your behalf. Specifically, we use Google Ads data to:

• Create and manage Google Search and Local Services Ads campaigns
• Conduct keyword research and bid optimization
• Generate performance reports and analytics
• Optimize ad copy, extensions, and landing page relevance
• Provide attribution and conversion tracking via Google Analytics 4

We adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google Ads data. We access only the data necessary to provide our advertising services.

5. Data Sharing

We share your information with the following categories of third parties:

• Advertising Platforms: Meta and Google, for the purpose of creating and managing ad campaigns on your behalf.
• Payment Processors: Stripe, for billing and payment processing.
• AI Service Providers: Third-party AI providers for phone, SMS, and chat intake services, operating under data processing agreements.
• Analytics Providers: For website analytics and performance tracking.
• Legal Requirements: When required by law, regulation, or legal process.

We do not sell your personal information. We do not share your information for purposes unrelated to providing our services.

6. Data Retention

We retain your business information, campaign data, and performance metrics for the duration of your active account. When you cancel your account:

• Your campaign data is retained for 90 days to allow for reactivation.
• After 90 days, campaign data is permanently deleted from our systems.
• Aggregated, anonymized data (which cannot identify you) may be retained indefinitely to improve our platform.
• Billing records are retained as required by applicable tax and accounting laws.

7. Data Deletion

You may request deletion of your personal data at any time by emailing privacy@growthpunch.io. Upon receiving a verified deletion request:

• We will delete all personal data from our systems within 30 days.
• We will delete data from connected platforms (Meta, Google) where technically feasible.
• We will confirm deletion in writing.
• Some data may be retained as required by law (e.g., billing records for tax compliance).

8. Your Rights Under CCPA

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose about you.
• Request deletion of your personal information.
• Opt out of the sale of your personal information (we do not sell personal information).
• Non-discrimination for exercising your privacy rights.

To exercise your CCPA rights, contact us at privacy@growthpunch.io.

9. Your Rights Under GDPR

If you are located in the European Economic Area (EEA) or United Kingdom, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete personal data.
• Request erasure of your personal data.
• Restrict processing of your personal data.
• Data portability — receive your data in a structured, machine-readable format.
• Object to processing of your personal data.
• Withdraw consent at any time where processing is based on consent.

To exercise your GDPR rights, contact us at privacy@growthpunch.io.

10. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

• Essential Cookies: Required for the basic functionality of our website and platform.
• Analytics Cookies: To understand how visitors interact with our website (Google Analytics 4).
• Advertising Cookies: To measure the effectiveness of our own advertising campaigns (Meta Pixel, Google Ads conversion tracking).

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website.

11. Security Measures

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
• Access controls and authentication requirements for all platform access.
• Regular security reviews and vulnerability assessments.
• Third-party service providers are vetted for security compliance and operate under data processing agreements.

12. Children’s Privacy

Growth Punch is a business-to-business service. Our platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected personal information from a minor, we will take steps to delete that information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the “Last updated” date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Growth Punch, Inc.
Email: privacy@growthpunch.io