Privacy Policy

Last updated: May 13, 2026

1. Introduction

GROVA ("we", "our", or "us") operates aigrova.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

  • Email address (for authentication)
  • Name (optional, for personalization)
  • Account credentials (encrypted)

2.2 Advertising Platform Data

When you connect your Google Ads or Meta Ads accounts, we access and store:

  • Campaign performance metrics (impressions, clicks, conversions, spend)
  • Account information (account name, ID)
  • Campaign and ad group names
  • Access tokens (securely encrypted)
  • Refresh tokens (securely encrypted)

3. How We Use Your Information

We use your information to:

  • Provide and maintain our Service
  • Authenticate your account
  • Sync and display your advertising performance data
  • Generate analytics and insights
  • Improve our Service
  • Communicate with you about Service updates

4. Google API Services User Data Policy

GROVA's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we only use Google Ads data to:

  • Display your advertising performance metrics within our dashboard
  • Generate analytics and insights for your campaigns
  • Store data securely for historical analysis

We do NOT:

  • Sell your data to third parties
  • Use your data for advertising purposes
  • Transfer your data to third parties (except as required for Service functionality)

5. Data Security

We implement industry-standard security measures to protect your data:

  • Encrypted data transmission (HTTPS/TLS)
  • Encrypted storage of access tokens and sensitive data
  • Secure authentication via Supabase Auth
  • Row-level security policies to ensure data isolation
  • Regular security updates and monitoring

6. Data Retention

We retain your data as long as your account is active or as needed to provide you services. You may request deletion of your data at any time by contacting us.

7. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Revoke access to your advertising accounts
  • Export your data

8. Third-Party Services

We use the following third-party services:

  • Supabase: Authentication and database hosting
  • Google Ads API: Advertising data sync
  • Meta Ads API: Advertising data sync
  • Vercel: Hosting and deployment

9. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@aigrova.com