Privacy policy

Last updated: 23 August 2026

The short version

Growth Bull sends review invitations on behalf of the businesses that use it. If you received a text or email from us, it was sent for a business you were a customer of, using the contact details you gave that business. We hold the minimum needed to do that job, we never sell data, and replying STOP or tapping unsubscribe stops everything instantly.

If you are a customer of one of our businesses

The business you hired controls your information; Growth Bull processes it on their instructions. We hold: your name, the mobile number or email the business holds for you, which messages were sent, and whether you opened the page, went to Google, sent private feedback or opted out. Private feedback goes only to that business. We never post anything publicly on your behalf.

We keep this information while the business remains a customer of ours, and opt-outs are kept permanently so we never contact you again by mistake. To have your details corrected or removed, contact the business directly, or email us and we will pass it on and act on their instruction.

If you run a business that uses Growth Bull

We hold your account details (name, email, business name, Google Business Profile reference), your customer list as you provide it, and the connection tokens for any accounting software you link. Tokens are encrypted at rest and used only to detect finished jobs. Disconnecting removes our access; you can also revoke it at any time from inside Xero or QuickBooks.

Who we share data with

Only the services that make the product work, each receiving the minimum it needs: our hosting provider (application and database hosting), Google (sign-in and Business Profile lookups), Twilio (text messages), our email delivery provider, our local-ranking data provider (search positions only, never your customer data), and our payment provider, Paddle, who acts as merchant of record and handles card details entirely on their own systems — we never see them. We do not sell or rent personal data to anyone.

Cookies

We use a small number of cookies: a session cookie to keep you signed in (essential), a short-lived cookie during Google sign-in (essential), and, if you arrive through a partner's link, a referral cookie for up to 60 days so the partner is credited. No advertising or cross-site tracking cookies, ever.

Your rights

UK GDPR gives you the right to access, correct and erase personal data we hold about you, and to complain to the ICO (ico.org.uk). Business accounts can delete their account and all its data directly from Settings, immediately and permanently. For anything else, email riley36023@gmail.com and we will respond within one month.