How Grobunchy handles your data.

What Grobunchy is

Grobunchy is a growth engineer for creators. It reads the performance data of social accounts you choose to connect, builds a private model of what helps your audience grow, and proposes experiments you decide whether to run. It never posts, comments, likes, follows, or messages on your behalf, and it requests no permission that would let it.

Data we read from connected platforms

When you connect a platform (YouTube, TikTok, or Instagram) you authorize read-only access through that platform's official login. Depending on the platform, we read: your public profile (name, handle, avatar, follower count); the list of your public posts and their metadata (title, caption, publish time, duration, thumbnail); and the performance metrics the platform provides (views, likes, comments, shares, saves, watch time, retention, follower changes).

We do not read private messages, drafts, or anything outside the scopes shown on the platform's permission screen. You can see exactly which capabilities each connected account grants, and which it withholds, in Settings.

Account data

We store the email address and name associated with your sign-in, your workspace, and your preferences such as your publishing timezone. If you subscribe, our payments provider handles your card details and we never see or store them.

How we use it

• To compute baselines, patterns and a Growth Model specific to your account and visible only to you.
• To propose hypotheses and experiments, and to measure them against a control.
• To show you what changed, what was learned, and what to test next.

We do not sell your data, use it for advertising, use it to train anyone's models, or share it with other users. Nothing about your account is pooled with another creator's.

What we send to AI providers

Some features use third-party AI model providers. To classify your content we send the text of your post titles and captions, truncated, along with the statistics we computed ourselves. To propose a hypothesis or design an experiment we send the evidence records behind it, which include those computed numbers and the claims derived from them.

We never send your access tokens, your email address, or your payment details. We do not send video or audio files. Metrics and baselines are calculated by our own code, not by a model, so a provider never decides a number you are shown.

Who else handles your data

Running the service means other companies process parts of your data on our behalf: a sign-in provider, a hosting and database provider, the AI model providers described above, a payments provider, and an error reporting service. Each receives only what its function requires, and none of them may use your data for their own purposes.

They operate in the United States and the European Union, so your data may be processed outside the country you live in. If you want the current list by name, write to us and we will send it.

Storage, security and retention

Access tokens are encrypted at rest with a key held outside the database, and are never written to logs. Everything is scoped to your workspace and enforced on the server, so one creator's data cannot be reached from another's account.

We keep performance observations over time on purpose: a model of what makes your audience grow is only possible if we can compare this month against last. We keep them for as long as your account is open, and delete them when you ask, or within 90 days of your account being closed.

Disconnecting and deletion

These are two different things, and the difference matters.

Disconnecting a platform, from Settings or from the platform's own app permissions, revokes our access where the platform supports it and deletes the stored tokens immediately. Your history stays, so reconnecting picks up where you left off.

Deletion removes everything derived from that account: the content we ingested, every metric observation, the extracted features, the patterns, insights, evidence and Growth Model facts, the experiments and baselines, and the record holding the platform's identifier for you. Nothing is marked inactive and kept. You can request it from Settings, or through Instagram and Facebook's own data deletion tools, which we handle automatically. See data deletion.

To close your account entirely, contact us at the address below.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete the data we hold about you, and to object to some processing. Write to the address below and we will respond within 30 days. You can also complain to your local data protection authority.

Cookies

We use cookies that are necessary to keep you signed in. We do not use advertising cookies or third-party trackers.

Children

Grobunchy is not intended for anyone under 18, and we do not knowingly collect their data. If you believe a minor has an account, tell us and we will delete it.

Changes

If we change this policy in a way that materially affects how your data is handled, we will tell you by email before it takes effect. The date at the top always reflects the current version.

Contact

Questions about this policy, or any request above: developers.tishbe@gmail.com