Privacy Policy

Last updated: January 15, 2026

1. Introduction

ROGA AI LIMITED ("Company," "we," "our," or "us") operates Outgrow (outgrow.so), an AI-powered Google Business Profile management platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password when you create an account
• Business Information: Business name, address, phone number, website, and business type
• Payment Information: Processed securely through Stripe; we do not store full payment details

2.2 Information from Google

When you connect your Google Business Profile, we access:

• Google Account profile (name, email, profile photo)
• Google Business Profile information (locations, business details)
• Reviews and review responses
• Performance metrics (views, clicks, calls, direction requests)

2.3 Automatically Collected Information

• Device and browser information
• IP address and location data
• Usage data and analytics

3. How We Use Your Information

• Provide, maintain, and improve our services
• Generate AI-powered content for your business
• Sync and display your Google Business Profile data
• Process transactions and send related information
• Send administrative notifications and updates
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns and trends

4. Google API Services User Data Policy

Outgrow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We only use Google user data to:

• Display your business information and reviews within Outgrow
• Generate AI-powered responses to reviews
• Show performance metrics and analytics
• Post content to your Google Business Profile (with your explicit action)

We do not sell, share, or use Google user data for advertising purposes. Access to Google user data is limited to the specific features described above.

5. Data Storage and Security

Your data is stored securely using Supabase, a SOC2-compliant database provider. We implement industry-standard security measures including encryption in transit (TLS) and at rest, secure authentication, and access controls.

Google OAuth tokens are encrypted and stored securely. We use refresh tokens to maintain access and you can revoke access at any time through your Google Account settings.

6. Data Sharing

We do not sell your personal information. We may share data with:

• Service Providers: Supabase (database), Stripe (payments), Vercel (hosting), OpenRouter (AI)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data
• Revoke Google access at any time
• Opt out of marketing communications

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account deletion, we delete your data within 30 days, except where required for legal or legitimate business purposes.

9. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: