Privacy Policy

1. Who we are

WITTI Grow ("we", "us", "our") is a product of WITTI Technology Limited, a company registered in Hong Kong. Our website is wittigrow.com. For privacy inquiries, contact us at privacy@wittisms.com.

2. What data we collect

When you use WITTI Grow, we may collect:

• Account information: email address, name, password (hashed), and profile picture from Google OAuth.
• Website data: publicly available information from URLs you submit for marketing audits.
• Social media data via Meta APIs: when you connect your Facebook or Instagram account, we access your Pages list, Page engagement metrics, and the ability to publish posts on your behalf. Specifically:
  • pages_show_list — to display your Facebook Pages for selection
  • pages_read_engagement — to show you analytics about your Page performance
  • pages_manage_posts — to publish approved marketing content to your Pages
  • instagram_basic — to access your connected Instagram account information
  • instagram_content_publish — to publish approved content to your Instagram account
• Google Ads data via the Google Ads API: when you connect your Google Ads account, we request a single scope, https://www.googleapis.com/auth/adwords, and use it only to:
  • Read the list of Google Ads accounts your signed-in Google user can access, so you can pick which one to use.
  • Create — always in PAUSED status — Search campaigns, ad groups, Responsive Search Ads, and keywords inside the Google Ads account you selected, on your behalf.
  We never enable a campaign or spend your budget automatically — you review and enable every paused campaign yourself inside Google Ads. We request no other Google scope (no Drive, Gmail, or profile data beyond the sign-in email above).
• Usage data: pages visited, features used, and API usage for billing purposes.

WITTI Grow's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Ads data for advertising, do not sell it, and do not transfer it to others except as needed to provide the WITTI Grow features you request, to comply with applicable law, or as part of a merger or acquisition.

3. How we use your data

• To generate marketing strategies and content for your business
• To publish approved content to your connected social media accounts
• To display analytics and performance metrics from your connected platforms
• To send you notifications about your marketing plan (email)
• To improve our service and fix issues

We never sell your data to third parties. We do not use your data for advertising.

4. Data storage and retention

Your data is stored securely on Google Cloud Platform (Firebase/Firestore) in data centers that comply with SOC 2, ISO 27001, and GDPR standards.

• Account data is retained while your account is active
• Generated content is retained for the duration of your subscription
• Social media tokens are encrypted and stored only as long as your platform connection is active
• Audit data for anonymous users is retained for 90 days

5. Third-party services

We use the following third-party services to operate WITTI Grow:

• Google Firebase: authentication, database, and file storage
• Google Ads API: connecting your Google Ads account to create paused Search campaigns on your behalf
• Meta Platform APIs: Facebook and Instagram integration (publishing, analytics)
• Anthropic (Claude): AI-powered strategy generation
• Google (Gemini): AI-powered content and image generation
• Resend: transactional email delivery
• Stripe: payment processing (when applicable)

Each service processes data according to their own privacy policies. We only share the minimum data necessary for each service to function.

6. Your rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Disconnect any connected social media platform at any time
• Export your generated content
• Revoke Meta API access — you can do this from your Facebook Settings > Business Integrations
• Revoke Google Ads access — disconnect it in your WITTI Grow platform settings, or remove WITTI Grow at myaccount.google.com/permissions. Revoking stops all further Google Ads API access and we delete the stored Google tokens.

To exercise any of these rights, email privacy@wittisms.com or use the account settings in your dashboard.

7. Data deletion

When you delete your account or disconnect a platform, we delete the associated data within 30 days. You can also request immediate deletion by contacting us. For Meta platform data specifically, we comply with Meta's data deletion requirements and will delete all data obtained via Meta APIs upon disconnection or account deletion. Likewise, for Google user data obtained via the Google Ads API, disconnecting Google Ads or deleting your account removes the stored Google OAuth tokens and the campaign records created through WITTI Grow within 30 days; campaigns already created in your Google Ads account remain under your control there and can be deleted directly in Google Ads.

8. Cookies

We use essential cookies for authentication (session cookies) and locale preferences. We do not use tracking cookies or third-party advertising cookies.

9. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice on our website. Your continued use of the service after changes constitutes acceptance.