Back to Home

TRUEGROW AI PRIVACY POLICY

Last Updated: January 3, 2026

Website signups, questions and email preferences

Our homepage and MediaFlow signup forms collect your contact name, email and selected interests with the time, notice version and originating form. Company is required for testing and demo requests. Phone, industry and referral details are optional. Phone collection does not authorise marketing calls or texts. Consent applies only to the options you select. Newsletter consent is separate from MediaFlow waitlist, testing and demo interest.

Questions collect your name, email, subject, message and optional company so JC can respond. Sending a question does not subscribe you to updates. Please leave out credentials, payment details and confidential customer information. We save the question before preparing a receipt and a private notification to JC. A delivery failure does not remove your saved request.

We use a separate Supabase website database with private records and Resend for email delivery. Resend receives the recipient address, supplied name and email content. JC receives your contact details and question for follow-up. We record delivery failures, bounces, complaints and consent changes to honour preferences and prevent duplicate welcomes. Replies go to jc@truegrowai.com. Registration and email delivery do not verify email ownership, create a product account, provide access or guarantee a testing invitation.

Campaign, cohort and message-variant labels help us understand which messages bring interest. Public analytics do not include email addresses, names, phone numbers, question text or preference tokens. Hashed client identifiers, bounded inputs and short-term counters limit abuse. A visit, click or forwarded outreach link never counts as consent or proves who signed up.

Visitor emails include Unsubscribe and Manage preferences links for optional updates. Links expire after 90 days. Opening a link does not change your selections; saving or unsubscribing requires a button action. A question receipt does not grant marketing consent. Public repeat signups cannot reverse previous withdrawals or delivery suppression. If a link expires, contact jc@truegrowai.com to manage your preferences or request deletion.

We review question records after 12 months and inactive unverified signup details after 24 months, retaining only what remains needed for the stated purpose. We minimise optional details after testing or demo follow-up ends. Limited consent and suppression evidence may be retained to honour opt-outs and explain sending decisions. The former first-look website gate collected your name and email, your acknowledgement of changing product information, and permission for the availability notice. It did not create a product account or enrol you in testing or the newsletter without a separate selection. Any remaining preview-access marker in your browser contains no name or email and is no longer required to browse the website. Previously recorded email permissions remain unchanged; removing the gate does not subscribe anyone to additional emails.

Website interaction notice updated: October 6, 2026. The sections below describe the broader services.

1. Introduction

Welcome to TrueGrow AI Inc. ("TrueGrow AI," "MediaFlow," "we," "our," or "us").

This Privacy Policy explains how we collect, use, store, process, and protect information when you access or use:

  • https://truegrow.ai
  • https://mediaflow.truegrow.ai
  • The MediaFlow platform, including influencer, agency, and company portals
  • All related applications, APIs, AI-powered features, analytics tools, scheduling tools, and messaging services

(collectively, the "Services").

By creating an account or using our Services, you agree to the practices described in this Privacy Policy.

2. Who We Are

TrueGrow AI Inc. is a Delaware-registered C Corporation, located at 1178 Broadway, 3rd Floor #581, New York, NY 10001.

We provide software and AI-driven tools for social media management, analytics, scheduling, messaging, influencer collaboration, and performance tracking.

3. Information We Collect

We collect the following categories of information.

a. Account Information

When you create an account, we collect:

  • Full name
  • Email address
  • Password (stored in encrypted form)
  • Company or agency name (if applicable)
  • Profile photo or business logo
  • User role (Influencer, Agency/Agent, Company/Brand)

b. Social Platform Account Identifiers & Access Tokens

When you connect third-party platforms (including Instagram, Facebook, Threads, TikTok, YouTube, LinkedIn, Google, Pinterest, Slack, Dropbox, OneDrive, and Stripe), we collect identifiers and credentials provided via official APIs, including:

  • User IDs
  • Page IDs
  • Account IDs
  • Business IDs
  • Channel IDs
  • Access tokens and refresh tokens (stored encrypted using AES-256-GCM encryption at rest)

We never collect or store your social-media passwords.

c. Direct Messages (DMs) & Comments

When you enable messaging or comment-management features, we may access and temporarily store content from connected platforms.

Direct Messages (DMs)

DMs are accessed solely to support inbox viewing, replying, AI-assisted drafting, analytics, moderation, and automation features.

Retention (Global Account Setting):

  • Default: 45 days
  • Optional: 21 days or 90 days

Comments

Comments are accessed to support moderation, replies, analytics, spam detection, and AI-assisted tools.

Retention (Global Account Setting):

  • Default: 14 days
  • Optional: 7 days or 30 days

We do not store DMs or comments beyond the retention period selected by the user.

d. Social Media Analytics & Performance Data

We collect analytics and insights provided by connected platforms, including:

  • Follower counts and growth
  • Engagement metrics (likes, comments, shares, saves)
  • Reach, impressions, and views
  • Audience demographics (age ranges, gender distribution, geographic regions, activity times)
  • Post-level and content-level performance
  • Story, reel, short-form, and long-form video analytics
  • Profile interactions and account insights

Retention: Analytics and performance data are retained while the user's account remains active, based on the user's subscription tier, unless the user deletes the data or disconnects the related platform.

e. Platform-Generated User Data

Platform-generated user data includes, but is not limited to:

  • Analytics dashboards and reports
  • Campaign summaries
  • AI-generated captions, suggestions, and insights
  • Performance benchmarks
  • Historical comparisons
  • Exported reports created within the platform

Retention: Platform-generated user data is retained while the user's account remains active, based on the user's subscription tier, unless the user deletes the data or revokes access.

f. AI Processing Data

To provide AI-powered features, we may transmit limited data to AI service providers such as OpenAI, Google Gemini, and Anthropic.

Data sent may include:

  • Caption drafts
  • Hashtag suggestions
  • Uploaded images
  • Comment text
  • Direct message text
  • Analytics summaries
  • Content metadata

AI processing occurs only when you enable AI features.

We do not intentionally permit AI providers to train public or external models using your identifiable data. AI providers process data according to their own privacy and data-handling policies.

g. Usage & Technical Data

We automatically collect technical and usage information, including:

  • IP address
  • Device type and operating system
  • Browser type
  • Login history
  • Feature usage activity
  • API usage logs
  • Error and performance logs

This data is used for security, analytics, performance optimization, and debugging.

h. Payment Information

Payments and subscriptions are processed securely through Stripe.

We do not store full payment card numbers. We retain limited billing and transaction metadata for accounting and compliance purposes.

i. Cookies & Local Storage

We use cookies, pixels, and local storage to:

  • Maintain login sessions
  • Store preferences
  • Measure usage and performance
  • Record consent choices

Details are available in our Cookie Policy.

4. How We Use Your Information

We use collected data to:

Platform Operations

  • Authenticate users
  • Connect and manage third-party accounts
  • Schedule, publish, and manage content
  • Fetch and send DMs and comments
  • Provide inbox management and automation tools

Analytics & Reporting

  • Generate dashboards and reports
  • Track historical performance
  • Provide insights to influencers, agencies, and brands

AI-Powered Features

  • Generate captions and hashtags
  • Draft comment and DM replies
  • Analyze content performance
  • (Future) predictive analytics, audience overlap, fraud detection, and content scoring

Support & Safety

  • Provide customer support
  • Investigate bugs or misuse
  • Enforce Terms of Service
  • Detect fraud or abuse

Legal & Compliance

  • Comply with legal obligations
  • Respond to lawful requests

We do not sell, rent, or trade personal data.

5. How We Share Information

We share information only in the following circumstances:

a. Connected Platforms

Data is exchanged with platforms you connect only via official APIs and only to perform authorized features.

b. AI Providers

Limited data is shared with AI providers solely to deliver AI features you enable.

c. Subprocessors

Our subprocessors include, but are not limited to:

  • Google Cloud Platform & Supabase (hosting and infrastructure)
  • OpenAI
  • Google Gemini
  • Anthropic
  • Stripe (payments)
  • Google Analytics
  • Adobe Analytics

A full list is available in our Data Processing Addendum (DPA).

d. Authorized Personnel

Access is limited to trained employees or contractors who require access for:

  • Customer support
  • Technical troubleshooting
  • Compliance and security investigations

All access is logged and governed by strict confidentiality obligations.

e. Legal Requirements

We may disclose data if required by law, court order, or valid legal process.

f. Meta Platform Compliance

When you connect Instagram, Facebook, or Threads accounts, your data is processed in accordance with:

We do not:

  • Sell data obtained from Meta APIs
  • Use Meta data for surveillance or unauthorized profiling
  • Transfer Meta data to data brokers or advertising networks
  • Retain Meta data beyond the periods specified in this policy or as required by Meta

Upon deauthorization of our app through Meta's settings, all associated Meta platform data is deleted within 30 days.

6. Data Storage, Retention & Deletion

Retention Rules

Data TypeRetention
Direct MessagesDefault 45 days; user-selectable 21 or 90 days
CommentsDefault 14 days; user-selectable 7 or 30 days
Analytics & Performance DataRetained while account is active (subscription-tier based)
Platform-generated user dataRetained while account is active (subscription-tier based)
Access tokensDeleted immediately upon revocation
BackupsFully purged within 30 days

Revocation of Access

When you disconnect a platform:

  • API access is revoked immediately
  • Associated stored data is deleted within 30 days

Account Deletion

When you delete your account:

  • All personal data is deleted within 30 days
  • Backups are purged during the next deletion cycle

User-Requested Deletion

You may request deletion of specific data (DMs, comments, analytics, uploads, reports) at any time by emailing privacy@truegrow.ai.

You can also check the status of any data deletion request at: https://mediaflow.truegrow.ai/deletion-status

7. Your Rights

California Residents (CCPA / CPRA)

You have the right to:

  • Request access to your data
  • Request correction or deletion
  • Opt out of data sharing
  • Receive disclosures of collected data categories

EU / UK Residents (GDPR / UK-GDPR)

You have the right to:

  • Access
  • Rectification
  • Erasure
  • Restriction
  • Portability
  • Object to processing
  • Withdraw consent

Requests may be submitted to privacy@truegrow.ai.

We respond within 30 days.

8. International Transfers

Data may be processed in the United States.

Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

9. Children's Privacy

Our Services are not intended for individuals under 18.

If we become aware of data collected from a minor, it will be deleted.

10. Cookies

Cookie usage is governed by our Cookie Policy.

11. Third-Party Services

Your use of third-party platforms is governed by their respective terms and privacy policies. We encourage you to review them directly.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notification.

13. Contact Information

📧 privacy@truegrow.ai

📍 TrueGrow AI Inc.
1178 Broadway, 3rd Floor #581
New York, NY 10001