Privacy Policy

Last updated: June 26, 2026

GymGrow ("we", "our", or "us") is a SaaS platform operated by Gym Grow Agency (Georgian IE, registration number 300458760). This Privacy Policy explains how we collect, use, store, and protect information — including Google user data — when you use our service at gymgrow.io.

If you have questions, contact us at hello@gymgrow.io.

1. Information We Collect

When you connect your Google account to GymGrow, we access the following Google user data with your explicit authorisation:

• Google Business Profile: Business name, address, phone number, categories, locations, and the ability to create posts and manage your listing on your behalf.
• Google Search Console: Search analytics data including impressions, clicks, average position, and top keywords for your website.
• Google Indexing API: The ability to submit your published URLs to Google for faster indexing.

We also collect basic account information you provide (name, email, gym details) during onboarding.

2. How We Use Google User Data

Google user data accessed by GymGrow is used exclusively to deliver the service you signed up for:

• Publishing SEO articles and Google Business Profile posts on your behalf.
• Displaying your Google Search Console analytics in your GymGrow dashboard.
• Submitting newly published content to Google's Indexing API to accelerate indexing.
• Managing and updating your Google Business Profile information as instructed by you.

We do not use Google user data for advertising, profiling, or any purpose beyond operating GymGrow for your gym.

GymGrow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. Data Sharing

We do not sell, rent, or share your Google user data with any third parties. Your data is used solely within GymGrow's platform to provide you with our service. We do not use Google user data to train AI or machine learning models.

4. Data Storage and Protection

OAuth tokens and Google user data are stored securely on Render's encrypted persistent storage infrastructure. We apply the following protections:

• OAuth tokens are never logged or exposed in plaintext.
• All data is transmitted over HTTPS.
• Access is restricted to authorised GymGrow systems only.
• We request only the minimum Google API scopes necessary to deliver our service.

5. Data Retention and Deletion

We retain your Google OAuth tokens and associated data only while you are an active GymGrow client. If you cancel your subscription or request deletion of your data:

• Your OAuth tokens will be permanently deleted within 30 days.
• All Google user data associated with your account will be removed from our systems.

To request deletion of your data, email us at hello@gymgrow.io. We will confirm deletion within 30 days.

You can also revoke GymGrow's access to your Google account at any time by visiting myaccount.google.com/permissions.

6. Cookies

GymGrow uses only essential session cookies necessary for authentication and platform functionality. We do not use tracking or advertising cookies.

7. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data. To exercise any of these rights, contact us at hello@gymgrow.io.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active clients of any material changes by email. The "last updated" date at the top of this page reflects the most recent revision.

9. Contact

Gym Grow Agency
Georgian IE, registration number 300458760
hello@gymgrow.io
gymgrow.io