Privacy Policy

1. Who we are

AI Growth Engine operates the Service for businesses that want clarity on website performance, SEO signals, and related technical findings. For purposes of privacy laws that use the term “controller” or “business,” AI Growth Engine is the organization responsible for deciding how certain personal information is processed through the Service.

Contact (privacy requests & questions): hello@aigrowthengine.com
Please use a clear subject line (for example “Privacy request”) and describe your inquiry so we can respond efficiently.

2. Scope & agreement

This Policy applies to information collected through the Service (including contact forms and audit features). Third-party websites, apps, or tools that we link to are governed by their own policies—not this one.

By accessing or using the Service, you acknowledge that you have read this Privacy Policy and understand the practices described. If you do not agree, please discontinue use.

3. Categories of information we collect

We collect only what we reasonably need to provide the Service, communicate with users, operate our infrastructure, and comply with applicable law.

a) Information you provide

• Audit inputs: website URL(s) you submit (including an optional competitor URL for comparison).
• Contact & support: name, email address, and message content when you contact us (for example through our contact form or chat-related flows).
• Fix plan inquiries: if you choose to request help with prioritized fixes, we may collect email and contextual business responses you submit (such as goals or general business-stage selections you choose to provide).
• Any additional information you voluntarily include in correspondence with us.

b) Information collected automatically

• Technical and usage data typical of hosted web applications—such as IP address, approximate location inferred from IP, device/browser type, operating system, pages viewed, timestamps, referrer data, and diagnostic information used to operate and secure the Service.
• Hosting and observability artifacts generated by our infrastructure provider(s), including logs used for security, reliability, debugging, abuse prevention, and compliance.

c) Outputs from the audit process

Audit-related outputs—such as scores, metrics, technical findings lists, Lighthouse-derived audit items, and similar structured results—may be generated and processed to render your session results. Submitting a public website URL inherently involves sending that URL onward to tooling we use to analyze it (see Third parties). We configure the Service to minimize unnecessary collection beyond what's practical to deliver the audit output.

4. Legal bases & purposes of processing

Depending on your location, we rely on one or more of the following bases: performing our contract with you (providing requested features); our legitimate interests in operating and improving a secure SaaS-style service; complying with legal obligations; and consent where legally required or where we explicitly ask for it.

Primary purposes include:

• Running website audits you request
• Displaying results inside the Service
• Responding to inquiries and delivering requested communications
• Detecting and preventing abuse, fraud, and security incidents
• Maintaining reliable operations and improving product quality
• Complying with law and enforcing our terms

We do not sell your personal information, and we do not share personal information for cross-context behavioral advertising as those terms are commonly used under U.S. state privacy laws.

5. Cookies & similar technologies

We and our service providers may use cookies, local storage, pixels, and similar technologies for essential operation, session reliability, security, preferences (where applicable), and analytics to understand aggregated usage.

You can control many cookies through your browser settings. Disabling certain technologies may limit functionality. For more detail, see our Cookie Policy.

6. Third-party services & disclosures

We use carefully selected vendors to operate the Service. Those vendors may process limited information on our behalf and only as instructed, subject to their own policies and technical safeguards.

We may also disclose information if required by law, legal process, or a good-faith belief that disclosure is necessary to protect rights, safety, or integrity of users, the public, or the Service.

7. Retention

We retain information only as long as reasonably necessary for the purposes above, unless a longer period is required or permitted by law. Because operational environments vary, retention may depend on factors such as active sessions, security monitoring, backups, and legal holds.

• Audit-related processing: may be short-lived and tied to completing and displaying your results; server-side job data may be purged automatically after a limited window.
• Contact and lead-related records: retained as needed to respond, provide follow-up you request, and maintain an ordinary business record—then deleted or anonymized when no longer needed.
• Logs: typically retained for a bounded period for security and reliability, then rotated or deleted subject to technical constraints.

8. Security

We implement reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. Examples include transport encryption (HTTPS), access controls for secrets, and vendor posture review where applicable.

No online service can guarantee perfect security. You are responsible for maintaining the confidentiality of your accounts and devices. If you believe there has been unauthorized access, contact us promptly.

9. Your privacy rights & requests

Depending on your location, you may have rights to access, correct, delete, port, or restrict certain processing, and to object to certain processing or withdraw consent where processing is consent-based. You may also have the right to appeal a decision about a request (where applicable).

To exercise rights, email hello@aigrowthengine.com from the email address you used with us (or describe another reasonable method to verify your request). We will respond within the timeframe required by applicable law (often 30–45 days depending on jurisdiction and complexity).

We do not discriminate against users for exercising privacy rights.

10. U.S. state privacy notices

California (CCPA/CPRA): We describe our practices in this Policy. You may have the right to request access and deletion of personal information, and to receive information about certain disclosures. We do not sell personal information or share it for cross-context behavioral advertising as defined under CPRA. If you are submitting a request through an authorized agent, include written authorization as required by law.

Other U.S. states: If a state privacy law applies to you, you may have similar rights. Contact us using the email above.

We may need to verify requests to protect user privacy and prevent fraud.

11. European Economic Area, UK, & Switzerland

If you are in the EEA, UK, or Switzerland, you may have GDPR-style rights and the right to lodge a complaint with a supervisory authority. Where we transfer personal information from those regions to the United States or other countries, we rely on appropriate safeguards where required (such as standard contractual clauses) or other lawful transfer mechanisms.

12. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it, subject to applicable law.

13. Automated decision-making

We do not use personal information to make solely automated decisions that produce legal or similarly significant effects about you.

14. Third-party links

The Service may link to third-party sites (for example, verification or reference links). Their practices are independent from ours. Review their policies before providing information.

15. Changes

We may update this Privacy Policy to reflect changes in law, the Service, or our operations. We will revise the effective date above and, where appropriate, provide additional notice. Continued use after the effective date constitutes acceptance of the updated Policy unless applicable law requires a different approach.

16. Contact

Privacy requests and privacy questions: hello@aigrowthengine.com

For non-privacy inquiries, please use our contact page where applicable.