Privacy Policy

GrowthLeaks is operated by 410 Strategy Group, based in Billings, MT. This Privacy Policy explains what information we collect when you use GrowthLeaks, how we use it, and how we protect it. By placing an order, you agree to the practices described here.

1. Information We Collect

We collect information you provide directly when submitting an order:

• Your name
• Email address
• Business name
• Website URL
• Google Business Profile URL
• City and service area

We do not collect or store your payment card details. Payment information is handled entirely by Stripe and is subject to their privacy policy.

We also collect certain data automatically when you visit growthleaks.co:

• Browser type, device type, and operating system
• Pages visited, time on site, and referral source
• IP address (anonymized where required)
• Cookie identifiers set by analytics and advertising tools (see Section 5)

2. How We Use Your Information

We use the information we collect for the following purposes:

• Deliver your audit. Your business URL, GBP URL, and city are used to research and generate your audit report. This data is processed by automated tools and reviewed by 410 Strategy Group personnel.
• Send transactional emails. We send your report, order confirmation, and any delivery-related updates to the email address you provide.
• Send one review request. Approximately 24 hours after your audit is delivered, we may send a single follow-up email asking for a review. You can opt out at any time by emailing hello@growthleaks.co.
• Improve our service. We analyze order and usage data in aggregate to improve report quality and site experience.
• Legal compliance. We may retain records as required by applicable law or to resolve disputes.

3. Third-Party Services

We use the following third-party services to operate GrowthLeaks. Each is governed by its own privacy policy.

• Stripe — Payment processing. Your card data is handled entirely by Stripe and never passes through our servers. stripe.com/privacy
• Supabase — Database and order storage. Your order data (name, email, business info) is stored in Supabase. supabase.com/privacy
• SendGrid (Twilio) — Transactional email delivery. Your email address is used to deliver your report and order communications. twilio.com/legal/privacy
• Anthropic Claude — AI-assisted report generation. Your business URL and GBP data are submitted to the Claude API to generate audit content. Anthropic does not use API inputs to train its models. anthropic.com/privacy
• Apify / Google Maps — Public data research. We use automated tools and Google Maps data to gather publicly available information about your business listing as part of the audit.
• Google Analytics 4 — Site analytics. We collect anonymized usage data to understand site performance. policies.google.com/privacy
• Meta Pixel — Advertising measurement. We use Meta's Pixel to measure the effectiveness of our ads. facebook.com/privacy/policy
• Cloudflare — CDN, hosting, and security. Traffic to growthleaks.co is routed through Cloudflare's network. cloudflare.com/privacypolicy
• Amazon Web Services (AWS) — Cloud infrastructure supporting backend services. aws.amazon.com/privacy

4. Data Retention

We retain order records — including your name, email, and business information — for up to 3 years for business and accounting purposes.

To request deletion of your data before that period, email us at hello@growthleaks.co with the subject line "Data Deletion Request." We will process your request within 30 days, subject to any legal retention obligations.

5. Cookies

GrowthLeaks uses cookies and similar tracking technologies for analytics and advertising measurement.

• Google Analytics 4 — Sets cookies to track sessions, page views, and traffic sources. To opt out, install the Google Analytics Opt-out Browser Add-on.
• Meta Pixel — Sets cookies to measure ad performance and build audiences. To opt out of interest-based advertising, visit facebook.com/adpreferences or use the Digital Advertising Alliance opt-out tool.

You can also disable cookies in your browser settings, though some site functionality may be affected.

6. Your Rights

You have the following rights regarding your personal information:

• Access. You may request a copy of the information we hold about you.
• Correction. You may request that we correct inaccurate information.
• Deletion. You may request deletion of your personal data, subject to legal retention requirements.
• Opt-out of marketing. You can opt out of our review request email at any time by replying to any email from us or contacting hello@growthleaks.co.

To exercise any of these rights, contact us at hello@growthleaks.co. We will respond within 30 days.

7. Security

We take reasonable technical and organizational measures to protect your information, including:

• HTTPS encryption on all data transmitted to and from growthleaks.co
• Cloud infrastructure with role-based access controls (Supabase, AWS, Cloudflare)
• Payment data handled exclusively by Stripe — we never handle raw card numbers
• Access to order data restricted to authorized 410 Strategy Group personnel

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we take our obligations seriously and will notify you promptly in the event of a data breach affecting your information.

8. Children's Privacy

GrowthLeaks is a business service intended for adults. We do not knowingly collect personal information from anyone under the age of 13. If you believe a child has submitted information to us, contact us at hello@growthleaks.co and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we may also notify customers by email. Continued use of GrowthLeaks after a policy update constitutes acceptance of the revised policy.

10. Contact

Questions or requests regarding this Privacy Policy can be directed to:

410 Strategy Group / GrowthLeaks
Billings, MT
hello@growthleaks.co