Privacy policy

Draft, pending legal review. If anything material changes, we’ll say so on this page.

Gearhead Growth (“we”) does local marketing for independent off-road, lift, and 4x4 shops. This page says what we collect, why, who helps us run the service, and how to get your data deleted. Questions: contact@gearheadgrowth.com. Our business name and mailing address will be listed here before launch.

What we collect

Free checks (shops that haven’t signed up)

• Public business information about the shop being checked: its Google listing, public reviews and replies, map results, recent Google posts, its public website, and whether ChatGPT or Gemini names it. Public reviews can include the reviewer’s display name as Google shows it.
• The email address, if you ask us to email the full report.
• A one-way hash of your IP address, to stop abuse (rate limits). We don’t keep the IP address itself.

Customers

• Your name, email, and the logins you use (Google sign-in or an emailed link).
• Billing details, handled by Stripe. We never see or store your full card number.
• Data from the accounts you connect: your Google Business Profile (listing details, reviews, posts, and listing performance such as calls and direction requests) and your Instagram business account (your posts, photos, and captions).
• Drafts we write, what you approve, edit, or skip, and when.
• Notes you send through the feedback button, with the page you sent them from.

How we use it

• To run the free check and show or email the results.
• To write Google posts, review replies, and listing changes for you to approve, and to publish only the ones you approve.
• To send you approval emails, reminders, monthly reports, and account emails.
• To keep the service working and safe: error tracking, abuse limits, and checking our AI drafts.

We don’t sell your data, we don’t use it for advertising, and we don’t use it to train AI models.

Google user data

When you connect your Google Business Profile, we read your listing, reviews, posts, and performance numbers, and we create posts, review replies, and listing edits only after you approve each one. Gearhead Growth’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. People at Gearhead Growth don’t read your Google data except with your permission, to fix a problem you reported, for security, or when the law requires it.

Instagram data

When you connect Instagram, we read your posts, photos, and captions so we can turn your builds into Google posts. We never post to Instagram. If you remove our access in Instagram’s settings, we delete the Instagram data we hold.

Who helps us run the service

These companies process data for us, only to provide their part of the service:

• Vercel (hosting), Supabase (database and logins), Inngest (background jobs)
• Anthropic (writing drafts and summaries with AI)
• OpenAI and Google Gemini (asking “which shops would you recommend” questions for the AI check; we send a search question, not your personal data)
• Google Maps Platform and DataForSEO (public business data for the free check)
• Stripe (payments), Resend (email), Cloudflare (bot check)
• Sentry and Langfuse (error and AI-quality logs, with emails and access tokens removed)

How long we keep it

• Free-check results: up to 12 months, then deleted.
• Customer data: while you’re a customer, then deleted within 30 days of a deletion request.
• Billing records: as long as tax law requires.

Your choices

• Remove my shop: we stop checking your shop for good.
• Delete my data: how to have us delete your data, and how to disconnect Google or Instagram yourself.
• Every email has an unsubscribe or preferences link.

The service is for businesses and isn’t meant for anyone under 18.