Security

Data Isolation

Every customer's data is separated by tenant identifier, and that separation is enforced automatically at the database query layer — not a check a developer has to remember to add, but a rule enforced at the lowest level of the system. This isolation is continuously verified by our test suite.

Encryption

Our website and platform run over HTTPS only, using TLS 1.2 or higher — older protocols like TLS 1.0/1.1 are not accepted. Access tokens for connected ad accounts are stored encrypted in the database, never in plain text.

Access Control and Audit Logging

Login attempts are rate-limited. We keep an audit log that answers who changed what and when, stored separately per tenant.

Data Protection Compliance

We keep consent records, and you can request deletion of data collected through our ad platform integrations (Meta, Google) — requests are fulfilled within 30 days. Disconnecting an ad account immediately deletes the access tokens for that integration. See our Privacy Policy for details.

Found a Security Issue?

If you believe you've found a security vulnerability, please email support@growthintel.net. We take every report seriously and will get back to you as soon as possible.