Privacy Policy
Last updated November 7, 2026
This policy explains how dbVantage ("we", "us") handles information in GrowDesk, including information from systems you connect.
What we collect
Account details: the name and email of each person who signs in, and the workspaces they belong to. Workspace data: what your company adds to GrowDesk and what it reads from the systems you connect (for example website analytics, search data, CRM records, accounting data, documents you choose to share). Access tokens: the credentials a connected system issues so GrowDesk can keep reading your data.
How we use it
Only to run GrowDesk for your company: showing your data, running the analyses and AI assistants you use, and producing reports and recommendations in your workspace. We don't sell your data, use it for advertising, or use it to train AI models.
AI processing
Some features send the relevant part of your workspace data to an AI model provider (Anthropic) to produce an answer or draft. The provider processes it on our behalf under terms that don't allow it to train on your data.
Google user data
If you connect Google services (Google Analytics, Search Console, Drive, Gmail or Calendar), GrowDesk reads only the data needed for the features you turn on. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We don't use Google user data for advertising, and people don't read it unless you ask us to for support, it's needed for security, or the law requires it.
Who can see it
Each workspace is isolated from every other workspace at the database level. Inside a workspace, what a person sees depends on the role your company gives them. dbVantage staff can view a workspace only when an administrator of that workspace grants time-limited support access.
Where it is stored
In a managed database in the United States, encrypted at rest and in transit. Access tokens for connected systems are encrypted before they are stored and are never sent to your browser. We use service providers (hosting, email delivery, payments, AI processing) only as needed to run the service.
Retention and deletion
Disconnecting a system deletes its access tokens and stops imports. When your company closes its workspace, we delete its data within 30 days, except where the law requires us to keep it. You can export your data before closing the workspace.
Your choices
You can disconnect any system at any time under Integrations, ask what data we hold about you, or ask us to correct or delete it.
Changes and contact
If we change this policy we will update the date above. Privacy questions or requests: reach us through dbvantage.com.