1. Who we are
ViziGrow is a product operated to help small businesses in India set up and improve their online visibility — primarily their Google Business Profile. This policy describes how we handle information when you use our website (vizigrow.com) and our product (the ViziGrow web app).
2. Information we collect
We collect only what we need to deliver the product. Specifically:
- Account information — your mobile phone number, used for sign-in via Firebase Phone Authentication.
- Business information you provide — name, category, city, country, optional website, optional logo, and anything else you enter in the onboarding wizard.
- Artifacts you upload — PDFs and images you choose to add (menus, brochures, photos). Stored in Firebase Storage scoped to your account.
- Google Business Profile data — if and when you explicitly connect your Google account via OAuth, we access only the GBP listings you authorize, and only the fields needed to draft or publish content (business description, categories, hours, services, posts, reviews). We never access listings you have not authorized.
- AI-generated content — descriptions, services, FAQs, posts, and review replies our AI agents produce on your behalf. Stored with your business record so you can review, edit, and re-use them.
- Usage events — anonymous telemetry on which steps you completed and which features you used, to improve the product.
3. How we use your information
- To create and operate your business profile inside ViziGrow.
- To call our AI providers (currently Anthropic) so they can generate content for your business. We send only what is necessary to write good copy — business name, category, city, services, and the artifacts + notes you uploaded.
- To detect your existing Google Business Profile listing (via the Google Places API) and, when you OAuth-connect, to draft + publish updates back to that listing on your behalf.
- To send you a one-time SMS code for sign-in, via Firebase Phone Authentication.
- To measure aggregate product quality and improve future AI output (e.g. learning which kinds of drafts owners typically edit).
4. Sub-processors
We use the following third-party services to deliver ViziGrow. Each is bound by their own privacy policy and security standards:
- Google Cloud Platform / Firebase — hosting, authentication, database (Firestore), file storage, App Hosting.
- Anthropic (Claude) — AI content generation. Data sent to Anthropic is subject to Anthropic's privacy policy.
- Google Maps Platform (Places API + Maps Embed) — to look up your business listing and embed maps on your published landing page.
- Google Business Profile API — only after you explicitly OAuth-connect, and only to access the listings you have authorized.
5. Google Business Profile (OAuth) access
When you choose to connect your Google account to publish updates directly to your Google Business Profile, we use Google's OAuth flow and request the minimum scope required (business.manage) to read and write the business information you authorize. We do not bulk-access businesses or read listings outside of what you grant. You can revoke ViziGrow's access at any time from your Google Account permissions page. Revoking access immediately ends our ability to read or write your GBP data, though previously fetched data may remain in our database until you delete your business record.
6. Sharing your data
We do not sell your personal information. We do not share business information with other ViziGrow users. We share data with the sub-processors listed above only as needed to operate the product. We will disclose data when required by law (court order, valid legal process) and will notify you when permitted to do so.
7. Storage + retention
Data is stored in Google Cloud (Firestore, Storage) in Asia (Mumbai + Singapore regions). We retain your data while your account is active and for a brief period after deletion to support recovery and regulatory obligations. You can request deletion at any time — see Section 9.
8. Security
We protect your data with Firebase's standard security infrastructure (TLS in transit, encryption at rest, role-based access in our backend, OAuth refresh tokens encrypted with Google Cloud KMS). We don't store passwords (sign-in is phone OTP) and we never log your data with our AI providers in a way that lets them retain or re-use it for training.
9. Your rights
- Access + export: request a copy of the data we hold about you and your business.
- Correction: edit any information directly in the product, or contact us if you can't.
- Deletion: delete your account from the dashboard, or request full deletion by contacting us.
- Revoke OAuth: disconnect ViziGrow from Google at any time at myaccount.google.com/permissions.
10. Children
ViziGrow is intended for use by business owners aged 18 and over. We do not knowingly collect data from anyone under 18.
11. Changes to this policy
We may update this policy as the product evolves. Material changes will be communicated via in-product notice and an updated date below.
12. Contact
Questions, requests, or complaints? WhatsApp +91 99495 78848 or write to us at privacy@vizigrow.com. We respond within 7 business days.
Last updated: 2026-06-01.