Privacy policy

Who is responsible

LoveGrowth.io is operated by Joao Andre Silva Caldeira, operating as Atlantic Game Development, Madeira, Portugal. This operator is responsible for the personal information described in this notice. For privacy questions or requests, contact admin@eclesiar.com.

This notice covers the LoveGrowth website, accounts, support, and service operations. When you use LoveGrowth to process personal data on behalf of your own business, you remain responsible for the information you provide and publish and for informing the people concerned. Contact us before providing sensitive personal information or requesting processing that needs a separate data-processing agreement.

Information we use

• Accounts and security: your name, email address, password hash, verification and password-reset records, session identifiers, account status, and records needed to prevent abuse. We do not store your password in readable form.
• Your workspace: website URLs and public pages read from your sitemap, business and product details, branding, competitors, writing instructions, keyword plans, articles, images, schedules, and publishing history. Public pages may contain personal information such as an author’s name.
• Connections: access tokens or credentials you provide for publishing platforms and optional integrations, plus connection status and errors. Integration secrets are encrypted in storage.
• Optional Google reports: when you connect Google Analytics or Search Console, the selected property or site, authorization tokens, and the traffic, search, and performance reports requested for your workspace. These connections are not required to register.
• Support: your name, email, message subject and content, account or ticket identifiers, replies, and relevant diagnostic details. Public contact-form messages are delivered to our support mailbox.
• Technical information: request information such as IP address, browser information, timestamps, and security or operational logs. If you allow marketing measurement, we also use the event and attribution information described below.

Please provide only information needed for the service. Do not include passwords, payment-card details, health information, or other sensitive records in prompts or support messages.

Why we use it

• To provide the service and respond to requests: create and secure your account, understand your website, generate and publish content, operate connections, send transactional emails, and provide support. This processing is needed to perform our agreement with you or take steps at your request before an agreement.
• To keep the service reliable: detect abuse, investigate errors, enforce account restrictions, and protect users and systems. We rely on our legitimate interests in maintaining a secure service and consider the impact on individuals.
• For optional analytics and advertising measurement: only with your consent, measure how people discover and use LoveGrowth through Google Analytics and Meta. Refusing this does not prevent use of the service.
• To meet legal obligations: respond to lawful requests and maintain records where the law requires them.

Account details and service inputs are needed for the features that use them; without them, those features may not work. Analytics connections and advertising consent are optional. AI generates content and recommendations; it does not make decisions with legal or similarly significant effects about you.

Where information goes

• Cloudflare: website hosting, application processing, database, file storage, queues, and network security.
• OpenAI API: the website context, prompts, instructions, and relevant content needed to generate plans, articles, translations, images, and supported AI analyses. Generated results return to your workspace.
• Amazon Web Services / Amazon SES: email addresses and message content needed for account verification, password recovery, and support email delivery.
• Your publishing services: content, media, and publishing instructions go to the platforms or webhook endpoints you choose. Published content becomes available according to those destinations’ settings.
• Google: authorization and report requests when you choose to connect Google Analytics or Search Console. You can revoke access in your Google account and disconnect the integration in LoveGrowth.
• Google Analytics: consented usage events for the LoveGrowth website and application, separate from the optional reports you connect for your own website.
• Meta: consented measurement events as described in the next section. Meta also processes received information under its own privacy information.
• FastSpring: checkout is currently unavailable. If paid checkout is enabled in the future, the checkout will identify the payment provider and applicable purchase terms before you pay. LoveGrowth is not currently collecting card details.

Authorized support and administrative personnel may access relevant records to operate the service, resolve your requests, and investigate abuse. We may disclose information when legally required or necessary to protect rights and security.

Some providers process information internationally, including outside the European Economic Area. Applicable data-transfer requirements depend on the provider, service, and destination. You can contact admin@eclesiar.com for information about the safeguards applicable to your data; we do not promise that all processing stays in Portugal or the EEA.

Your connected Google accounts

Connecting Google Analytics or Search Console is optional and separate from consenting to measurement of your activity on LoveGrowth. Google asks you to authorize these read-only permissions:

• https://www.googleapis.com/auth/analytics.readonly lets us list the Analytics accounts and properties you can access and read reports for the property you select.
• https://www.googleapis.com/auth/webmasters.readonly lets us list your Search Console sites and read search-performance reports for the site you select.

We do not request permission to change your Google properties, submit website changes, send email, or read Gmail. Reports include Analytics sessions, active users, page views, engagement, key events, channel groups, page paths and referring sources; Search Console reports include queries, pages, dates, clicks, impressions, click-through rates and average positions. We use them to show traffic and search performance in your workspace, including identifiable referrals from AI services.

Selected configuration and report snapshots are stored in our Cloudflare database. Access and refresh tokens are encrypted with AES-GCM, bound to your website integration, and used server-side to request or refresh authorized reports. Report snapshots are stored separately from encrypted credentials.

Connected Google report data is not sent to OpenAI or Meta. We do not sell it, use it for advertising audiences or retargeting, or use it to train general-purpose AI models. Cloudflare processes it to operate the reporting feature you choose. Human access is limited to your specific agreement, necessary security investigation, legal requirements, or permitted aggregated internal operations.

Our use of Google API data follows the Google API Services User Data Policy, including its Limited Use requirements.

Disconnecting Google in LoveGrowth removes the stored integration credentials and attempts to revoke the Google authorization. If Google cannot be reached, the local credentials are still removed; you can also remove access in your Google Account connections. Disconnecting stops new synchronization but does not automatically delete previously saved report snapshots. Email admin@eclesiar.com to request deletion of those reports or closure of your account. Previously saved reports are retained under the retention criteria below until deleted.

Cookies and your tracking choice

LoveGrowth separates essential storage from optional Google Analytics and Meta measurement. Neither measurement script loads before affirmative consent. Choose The essentials to decline marketing measurement, or Allow marketing measurement to enable it. Use Your tracking preference in the footer to change your choice at any time.

When configured and allowed, LoveGrowth explicitly sends Google Analytics page views and confirmed registration or trial-start events. These events exclude account identifiers, form values, customer content, URL query strings, and URL fragments; referrers are limited to their origin. The standard tag can also derive basic session and engagement information after consent. Google can process browser and connection information when its script makes requests. Enhanced measurement is disabled. Google Signals and advertising personalization are disabled, and advertising storage is denied. Google Analytics is distinct from the Meta measurement described below.

When configured and allowed, the Meta Pixel and Conversions API can receive page views and service events such as registration or trial activity, event identifiers, page URLs without query strings, attribution identifiers, IP address, and browser information. For signed-in events, matching data such as email address and account identifier can be hashed before sending. Hashing is not anonymization. The Pixel can also make requests directly from your browser to Meta.

Withdrawal stops future consent-dependent measurement and removes pending events covered by the withdrawal. It does not undo processing already carried out. You can also clear site storage in your browser; doing so may sign you out or reset preferences. The optional Google reporting connection for your own website is separate from consent to measure your activity on LoveGrowth. A previous consent to Meta alone does not authorize the expanded Google Analytics and Meta scope; a new choice is requested.

Read Google’s privacy policy and Read Meta’s privacy policy.

How long information is kept

Workspace content and account records are kept while needed to provide your account and its history. Support correspondence is kept while needed to resolve and document the request. Security records are kept as needed to investigate abuse and protect the service. Contact us to close an account or request erasure; we assess what can be deleted and what must be retained for a legal obligation, an ongoing dispute, or a justified security need.

Sign-in sessions expire after 30 days. Email verification links expire after 24 hours and password-reset links after 30 minutes; expired token records are removed by scheduled cleanup. Completed or failed email-delivery queue records are scheduled for deletion after 30 days. A copy already delivered to a recipient’s mailbox is separate from the delivery queue. Browser-storage durations are listed above. Publication on an external website, search-engine caching, and provider records can have different retention periods.

Your choices and rights

Depending on the circumstances, you can request access to your personal data, correction, erasure, restriction, portability, or object to processing based on legitimate interests. You can withdraw marketing consent at any time without affecting the lawfulness of earlier processing.

Send requests to admin@eclesiar.com using the email associated with your account where possible. We may ask for proportionate information to verify your identity; never send your password. We normally respond within one month, and will explain any lawful extension or limitation. You can also complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), or your competent local authority.

Changes to this notice

We update this notice when the service or its data practices change. The date at the top identifies the current version. Where a change requires a new choice or other notice, we will provide it before applying that change.