Privacy Notice

December 5, 2023

PRIVACY NOTICE

At Growthbook, LLC (“we”, “us”, or “Growthbook”) we take your privacy very seriously. Please read this privacy notice carefully as it contains important information on how and why we collect, store, use, and share your personal information. It also explains your rights in relation to your personal information.

By using the www.growthbook.io website (“Site”) and any related services and/or features (together with the Site, the "Service") you acknowledge that you accept the practices and policies outlined in this Privacy Notice. If you have any questions or comments about this Privacy Notice or our use of your data, please contact us at privacy@growthbook.io. 

When our customers use the GrowthBook Services on their own websites and products, they remain responsible for their own privacy and security practices, which may differ from ours.

  1. Personal Information We Collect About You. We may collect and use the following personal information that identifies, relates to, describes, is reasonable capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household:
  • User Account Data: We collect name, email address, IP address, and job title when creating user accounts. 
  • Additional Data You Provide: additional personal data may be collected through customer support, feedback that you provide, interacting with forms on our website and responses to surveys, questionnaires and submitting support tickets.
  • Personal Data Provided by Others: we receive information about you and your company collected from third party or public sources or that we receive from companies that partner with us to provide products and services. This may include information from our advertising and market research partners, who may provide us with information about your interest in and engagement with our online advertisements.
  • Transaction and Payment information: We may collect information and details associated with your purchases, including payment-related information collected by our third-party payment processors on our behalf. We do not directly collect or store any payment card information but may receive billing address, tax id numbers, or other non-sensitive information associated with your payment card from our third-party processors. 
  • Automatically Collected Data: Whenever you interact with the Service, we automatically receive and store certain types of information, including information that your browser automatically sends. Such information may include information such as your web request, Internet Protocol (“IP”) address, device identifiers, location information, device information (such as OS type or browser type), cookie IDs, referring / exit pages and URLs, interaction information (such as clickstream data), domain names, pages viewed, crash data, and other similar technical data. We also collect usage, viewing, logs, metrics and other device and technical data collected when you visit our Sites, use the GrowthBook Service as an end user, or open or reply to emails we send.
  • We may also collect non-personally identifiable information. We may use both personal information and non-personally identifiable information to create aggregate information.
  1. How Your Personal Information is Collected. We collect this personal information directly from users through our website and email. However, we may also collect information automatically:
  • Cookies and similar technologies: like many online services, we use cookies on our website, which automatically collect certain types of usage and device information when you use our Services, including IP address, browser type, Internet service provider, platform type, device type, operating system, date and time stamp, a unique device or account ID, usage information and other similar information; and
  • Via our services: We collect information about user activity on our services, including actions (like logging in, logging out, time on site, pages or features accessed, time and date of access, and other similar usage information). We use this information to provide, improve, and promote our services.
  1. Why Your Personal Information is Collected. The collection of personal information is required for us to provide the GrowthBook Service. If you do not provide your personal information, it may delay or prevent us from providing services to you. The personal information we collect from our users, which may include your personal information, is necessary for us to provide our services to the user. More information on our services can be found here [https://www.growthbook.io/] (“Services”) We also collect some personal information for operational reasons such as user authentication, maintaining and improving our services, training, quality control and legal compliance. 
  1. Promotional Communications. We may use your personal information to send you updates (by email) about our products and services, including exclusive offers, promotions or new products or services.

    We have a legitimate interest in processing your personal information for promotional purposes (see above “Why Your Personal Information is Collected”). This means we do not usually need your consent to send you promotional communications. However, where consent is needed, we will ask for this consent separately and clearly.

    We will always treat your personal information with the utmost respect and we do not sell or share your personal information with other organizations for marketing purposes (see below “Who We Share Your Personal Information With”).

    You have the right to opt out of receiving promotional communications at any time by:
  • Contacting us at support@growthbook.io;
  • Updating your preferences in the account settings page; or,
  • Using the “unsubscribe” link in emails or “STOP” number in texts, if applicable.

    We may ask you to confirm or update your marketing preferences if you instruct us to provide further products or services in the future, or if there are changes in the law, regulation, or the structure of our business.
  1. Who We Share Your Personal Information With. We routinely share personal information with:
  • Service providers we use to help deliver our services to you such as payment service providers, and third parties providing business related functions;
  • Other third parties we use to help us run our business, such as data centers or website hosts which may store the information we collect on our behalf;
  • Third parties and connected services you choose to utilize as part of the service;


    We only allow our service providers to handle your personal information if we are satisfied they take appropriate measures to protect your personal information. We also impose contractual obligations on service providers relating to ensure they can only use your personal information to provide services to us and to you. 

    We may also share personal information with external auditors, law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations.

    We may also need to share some personal information with other parties, such during a business merger or re-structuring. We will typically anonymize information, but this may not always be possible. The recipient of the information will be bound by confidentiality obligations.

    Other than as disclosed in this policy we will not share your personal information with any other third party.

    We do not sell any personal information collected from your use of the service. 
  1. Where Your Personal Information is Held. Information is held at our third-party service providers as described above (see above: “Who We Share Your Personal Information With”).

  2. How Long Your Personal Information Will Be Kept. We will keep your personal information while you have an account with us or while we are providing services to you. Thereafter, we will keep your personal information for as long as is necessary:
  • To respond to any questions, complaints or claims made by you or on your behalf;
  • To show that we treated you fairly; or
  • To keep records required by law.

    We will not retain your personal information for longer than necessary for the purposes set out in this policy. Different retention periods apply for different types of personal information. When it is no longer necessary to retain your personal information, we will delete or anonymize it.
  1. Your Rights Under the CCPA. If you are a California resident you have the right under the California Consumer Privacy Act of 2018 (CCPA) and certain other privacy and data protection laws, as applicable, to exercise free of charge:
  • opt-out of the sale of personal information,
  • know about personal information collected, disclosed or sold,
  • to request deletion of personal information, and
  • to be treated without discrimination should you exercise these rights.

    More information regarding the sources from which we collect personal information can be found above in the section titled “Personal Information We Collect About You”; business and commercial purposes for which we collect your personal information can be found above in the section titled “Why Your Personal Information is Collected”; categories of recipients with whom personal information is shared or sold can be found in the section above titled “Who We Share Your Personal Information With.
  1. Additional information relating to California consumers personal information.

    Personal Information We Sold, Shared or Disclosed.
    In the past 12 months, we have sold, shared or disclosed the following categories of California consumers’ personal information:

    Categories of personal information sold or shared to third parties: 
    Personal and online identifiers (such as first and last name, email address, phone number)
    • Transaction information (such as subscription or purchase details)
    • Other information about you that is linked to the personal information above

    Categories of third parties to whom the information was sold or shared: 
    Customers
    • Third Party Services Processors

    Business or commercial purpose for selling or sharing

    • Providing Services
    • Internal Operations
    • Maintenance / Testing
    • Product Development
    • User Authentication
    • Legal compliance

    To make a request under the California Consumer Privacy Act, or for any questions or concerns about our Privacy Policy or practices, please contact us at privacy@growthbook.io. We may verify the request by asking you to provide information that matches the information we have on file about you. If you designate an authorized agent to exercise these rights on your behalf, we will additionally require verification that the person is authorized to act on your behalf. 
  1. Keeping Your Personal Information Secure. We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorized way. We limit access to your personal information to those who have a genuine business need to access it. Those processing your information will do so only in an authorized manner and are subject to a duty of confidentiality. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

  2. More Information and How to Exercise Your Rights. If you would like more information on our privacy policies or wish to exercise any of your rights as described in this Privacy Notice, please:
  • Email us at privacy@growthbook.io.

    Please note that you may only make a CCPA-related data access or data portability disclosure request twice within a 12-month period.
  1. Changes to This Privacy Notice. This privacy notice was published on [date] and last updated on [date]. We may change or update this privacy notice from time to by posting the new notice on our website. We may additionally provide notice through the service or by email that the notice has been updated, however, you should regularly review this Privacy Notice to stay informed of our policies and practices.

  2. “Do Not Track.” Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers at this time.

  3. Contacting Us. If you have any questions about this Privacy Policy or our privacy practices, please contact us at privacy@growthbook.io, or send mail to: GrowthBook, Inc., 1950 W Corporate Way # 34560, Anaheim, CA 92801