Legal
Privacy Policy
Growthstory AI Inc. (“Growthstory”, “we”) runs growthstory.ai. This policy says what we collect, why we have it, who else sees it, and how to make us delete it. It is written to be read rather than to cover us.
Last updated 12 October 2026
The short version
- We collect what you type into our forms, and nothing else about you.
- There is no analytics, no advertising pixel and no third-party tracker on this site.
- We do not sell or share your information, and we never will.
- Email blake@growthstory.ai and we will delete your record.
1. What we collect
When you contact us
Our “Let’s talk” form asks for your name, job title, company, company website, work email address, phone number and a description of what you need. We also record your IP address and browser user agent with the enquiry, and whether you ticked the consent box, the exact wording you were shown and the time you ticked it.
The IP address and user agent are there to stop automated abuse of the form and to prove where a consent came from. They are not used to profile you.
When you book a meeting
Meetings are scheduled through Cal.com, which is embedded on this site. Cal.com receives the name, email, phone number and notes you submit with the booking, and creates a calendar event and a video link. Cal.com handles that data under its own privacy policy as well as this one.
If you are a client with a portal login
Clients get an invite-only account. We hold your name, email address, the documents in your engagement, any signature you apply to them, and a log of when the account signed in and what it opened. That log exists so we can tell a client exactly who saw a document and when.
Cookies
There is one cookie on this site, and only clients ever receive it: a signed session cookie that keeps you logged in to the portal. It is strictly necessary, so there is no cookie banner to dismiss. We run no analytics, no advertising and no cross-site tracking of any kind.
2. Why we have it
- To answer you. An enquiry is only useful if we can reply to it.
- To do the work. Client data exists to deliver the engagement you hired us for.
- To market to you, only if you agreed. See the next section.
- To keep the site working. Rate limiting and abuse prevention.
- To meet our obligations. Contracts, invoices and tax records.
3. Marketing consent, and how to withdraw it
When you tick the consent box you are agreeing that we may contact you about your enquiry and our services by email, phone or text. Message and data rates may apply to texts. We do not send to anyone who has not asked us to, and we do not pass your details to anyone else to contact you.
You can withdraw that consent at any time, for any reason, with no effect on anything else:
- Reply STOP to any text.
- Use the unsubscribe link in any marketing email.
- Say so on a call, or email blake@growthstory.ai.
Withdrawing marketing consent does not stop messages we have to send you about work already underway — a document to sign, an invoice, a meeting change.
4. Who else sees it
We use a small number of service providers to run the business. They may only process your data on our instructions, for us.
- Railway — hosting and the database this site runs on.
- Resend — sends our transactional email.
- Cal.com — scheduling and the embedded calendar.
- Google — calendar and video meetings.
We do not sell your personal information, we do not share it for cross-context behavioural advertising, and we have never done either.
We will disclose information if the law requires it, or to establish or defend a legal claim. If we are ever compelled to hand over your data and we are permitted to tell you, we will.
5. How long we keep it
- Enquiries that go nowhere — deleted within 24 months.
- Consent records — kept as long as the consent stands, and for 4 years after it is withdrawn, because the record is the proof.
- Client records — for the engagement and 7 years after, for contract and tax reasons.
- Access logs — 24 months.
Ask us to delete something sooner and we will, unless the law says we must keep it.
6. Your rights
Wherever you live, you can ask us for a copy of what we hold on you, ask us to correct it, or ask us to delete it. Email blake@growthstory.ai and we will answer within 30 days. We will not charge you and we will not treat you differently for asking.
If you are in California, that includes your rights to know, delete, correct, and to opt out of sale or sharing — though as above, we do neither. If you are in the UK or EU, it also includes the right to object, to restrict processing, to data portability, and to complain to your data protection authority.
7. Security
The site is served over HTTPS. The database is not reachable from the public internet. Portal access is invite-only and every session is signed. No system is perfect, and we will not pretend otherwise — if a breach ever affects your data, we will tell you promptly and directly.
8. Where your data is held
Growthstory is a United States company and our providers store data in the United States. If you contact us from outside the US, your information will be transferred there.
9. Children
This site is for business. It is not directed at anyone under 18 and we do not knowingly collect information from them. If a child has sent us something, tell us and we will delete it.
10. Changes
If this policy changes we will update the date at the top. If a change materially affects what we do with information we already hold, we will contact the people it affects rather than quietly editing the page.
11. Contact
Growthstory AI Inc.
5261 Dunhaven Rd
Noblesville, IN 46062
blake@growthstory.ai