GroMach
Try GroMach

Privacy Policy

We value your trust. This document details how Gromach handles your SEO data, brand assets, and AI interactions.

Last Updated: December 29, 2025

Core Summary (TL;DR)

  • Ownership: You retain full copyright of your uploaded brand assets (PDF/Doc) and generated articles.
  • AI Training: We do NOT use your private brand data to train public AI models.
  • Google Data: Data fetched from GSC is used strictly for analytics reporting and is never sold.
  • Payment Security: Credit card info is processed by Stripe; Gromach does not store full card numbers.

1. Introduction

Welcome to Gromach ("we," "us," or "our"). Gromach is dedicated to providing superior SEO strategy and content generation services powered by artificial intelligence. This Privacy Policy explains what information we collect, why we collect it, and how we safeguard it.

By using our Service, you agree to the data practices described in this policy. If you do not agree with this policy, please discontinue the use of Gromach services.

2. Information Collection

To provide SEO analytics and content generation services, we collect the following types of information:

2.1 Information You Provide

  • Account Information: Email address, username, and encrypted password provided during registration.
  • Project Data: Website URLs, core keywords, business descriptions, target audience personas, and competitor URLs.
  • User Knowledge Base: Files uploaded to the "Brand Knowledge Base" (e.g., PDF, Word, TXT, images) containing product details, industry background, and case studies.
  • Payment Information: Billing details collected by our payment partners (e.g., Stripe) when subscribing.

2.2 Automatically Collected Information

  • Usage Data: Records of your interactions with the platform, such as keyword query history, article generation logs, and feature usage frequency.
  • Device & Logs: IP address, browser type, access times, used for security audits and troubleshooting.

3. How We Use Data

We use your data strictly for the following purposes:

  • Service Provision: Using your URLs and keywords to analyze competitors via DataForSEO API and generate SEO strategies.
  • Content Generation: Utilizing your "Brand Knowledge Base" and "Business Personas" to generate on-brand blog posts via LLMs (Large Language Models).
  • Service Improvement: Analyzing anonymized usage data to optimize our algorithms and user interface.
  • Communication: Sending notifications regarding article completion, subscription updates, or critical product changes.

4. AI & Knowledge Base Processing

Given that Gromach's core functionality is AI-based, we make the following specific commitments regarding your data:

  • Private Processing: Uploaded brand documents (Doc/PDF) are used solely to build your exclusive Vector Database for RAG (Retrieval-Augmented Generation) during article creation.
  • No Public Training: Gromach does NOT use your private brand data, uploaded documents, or generated drafts to train general public AI models (such as GPT-4). Your trade secrets remain confidential.
  • API Interaction: To generate content, relevant text segments are transmitted via encrypted channels to top-tier LLM providers (e.g., OpenAI). These providers are bound by strict data privacy agreements and do not retain your data for model training purposes.

5. Google User Data Policy

Gromach integrates with the Google Search Console (GSC) API to provide precise traffic analysis and keyword ranking data. Regarding the use of Google user data, we strictly adhere to the Google API Services User Data Policy, including the Limited Use requirements:

Limited Use Disclosure

Gromach's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

  • We only request permission to view your Search Console data.
  • We do not use data obtained via the GSC API for advertising purposes.
  • We do not allow humans to read your GSC data unless necessary for security purposes or to comply with applicable laws.

6. Data Sharing & Third Parties

We do not sell your personal data. We may share necessary data with third parties only in the following circumstances:

  • Service Providers: E.g., DataForSEO (SEO Data), OpenAI (AI Generation), AWS (Cloud Hosting), Stripe (Payments). All providers undergo strict security vetting.
  • Legal Requirements: Compliance with court orders or cooperation with law enforcement agencies.
  • CMS Integration: When using the "One-Click Publish" feature, content and metadata are transmitted to your connected CMS (e.g., WordPress, Shopify).

7. Security & Retention

We implement industry-standard security measures, including TLS encryption for data in transit and AES-256 encryption for data at rest. We retain your project data until you delete your account or 90 days after your subscription expires (as a grace period for data recovery).

8. User Rights (GDPR & CCPA)

Regardless of your location, we grant you the following rights:

  • Access & Portability: You may export your keyword lists and generated article history.
  • Correction: You may modify your brand information and personal profile at any time.
  • Deletion: You may contact us to request the complete deletion of your account and all associated knowledge base files.

9. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us via:

Gromach Support Team

Email: support@gromach.com