Privacy Policy

We collect information from you when you submit it to us, for example, when you request products, services, or information from us, register for an account, register to participate in a conference on our Site, participate in public forums on the Site, or respond to our customer surveys.

We may also:

• automatically collect usage, analytics, viewing, logs, metrics and other device and technical data when you access our Sites or use the GrowthBook Service as an end user. For example, when you access our Sites or log into the GrowthBook Service, our servers will automatically record certain information about your device and browser, and we may collect usage, clickstream, event data, crash data, and other technical data, and
• automatically acquire information when you reply to or interact with an email we send, such as to track your engagement with our messages or when your replies to our messages contain additional email addresses.

We may use the information collected to:

• process your orders and requests and respond to your questions and concerns; for example, if you inquire about our services or submit an application to GrowthBook, we may use your data to respond to and process these requests;
• provide you with products and services, and personalize your experience; for example, we may use information on your prior activities or job function to tailor the features and content on the GrowthBook Services or Sites, or we may use technical data to remember your preferences;
• communicate with you about your account or transactions, and provide you with product-related communications, such as information about new features and policy updates;
• operate, maintain, analyze, develop, update and improve our product, the GrowthBook Service, and other products and services we offer. For example, we may administer and track users’ activities on our Sites and the GrowthBook Service to determine how to improve our content and features, or we may analyze trends and gather demographic information about our user base to better tailor our marketing efforts;
• detect, investigate and prevent activities that may violate our policies, including our Acceptable Use Policy, or applicable laws (such as fraud detection and prevention) or that may threaten the security, integrity or availability of our or another party’s products, systems and services;
• send you news, updates, promotions, product information, event announcements, and other marketing communications. Please see the section entitled "Your Controls and Choices" for an explanation of your choices relating to these communications;
• act pursuant to your consent for a specific purpose not listed in this policy. For example, with your consent, we may post your testimonial along with your name on our Sites. If you wish to update or delete your testimonial, please contact us as explained below; and
• perform the activities described in our Cookie Policy.

We also use aggregated information, such as usage data, for other lawful purposes, such as to create blog posts and content that others may find useful.

We do not share your personal information outside of GrowthBook except in certain circumstances, including:

When you allow us to share the information, such as when you:

• When our service providers are providing services on our behalf. For example, we may use an outside platform to host portions of our Sites or to provide certain features on the GrowthBook Service, or we may use a credit card processing company to bill you for services you purchase. Unless otherwise expressly noted, when acting as GrowthBook’s agents, these services providers are prohibited from using the personal information we have shared with them for purposes other than those requested by us or required by law;
• To enforce our terms, agreements, policies or rules, to help protect the security, integrity and availability of our or another party's products, systems and services; to exercise or protect the rights, property (including intellectual property), or safety of GrowthBook, our users, or others; to comply with legal requirements; or in other cases if we believe in good faith that disclosure is required by law (including in response to a lawful subpoena or other law enforcement request); and
• In connection with a sale, divesture, or transfer of our company (including any shares in the company) or any combination of its products, services, assets, affiliates, and/or businesses. Your personal information (such as customer names and email addresses, and user information related to the GrowthBook Service) may be among the items sold or otherwise acquired in these types of transactions. We may also sell, assign or otherwise transfer such information in the course of corporate divestitures, mergers, acquisitions, bankruptcies, dissolutions, reorganizations, liquidations, similar transactions or proceedings involving all or a portion of the company. You will be notified via email and/or a prominent notice on our Site of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

We may also share aggregated information (such as usage data, referring/exit pages and URLs, platform types, number of clicks, etc.) for other business purposes. For instance, we may share aggregate reports with interested third parties to help them understand the usage patterns for certain GrowthBook Services or for our Sites or those of our partners.

We provide you with certain controls and choices regarding the use of your personal information, which may include:

• Correcting and Updating Account Information. By logging into your account on our Site and/or the GrowthBook Service, you may be able to change certain account information. Your account settings may also permit you to opt-out of some types of notification messages. To protect your privacy and security, we require your username and password in order to verify your identity before granting you account access or making changes.
• Changing your choices for marketing communications. You can opt-out of the marketing communications we send by clicking the unsubscribe link in the applicable email. Please note that, even after you opt out from receiving marketing messages from us, you may continue to receive transactional and product-related messages..
• Cookies and Other Technologies. You may be able to opt-out of certain cookies, targeted advertising and other technologies as specified in our "Cookie Policy."

In many circumstances, you can exercise these choices yourself using the tools described above. If you cannot do so, please contact us as indicated in the "Contact Us" section below to discuss your options. We will respond to your request within 30 days. Please be aware that, if you do not allow us to collect personal information from you, we may not be able to deliver certain products, features and services to you, and some of our products and services may not work appropriately or be able to take account of your interests and preferences.

• In General. We are not responsible for the practices employed by websites, applications, or services linked to or from the Growth Book Services or Sites, including the information or content contained there. Please remember that your browsing and interaction on any third-party website, service or application, including those that have a link or advertisement on our Site, are subject to that third party’s own rules, policies, and practices, and not our privacy policy.
• Partner Pages. Some of our partner pages may have the look and feel of being on growthbook.io; however some information collected on those pages may be collected by, or sent to, our partners. Information collected by, or sent to, our partners is subject to their respective privacy policies.
• Social Media and Commenting Features. Our Site may include social media and commenting features provided by third parties. These features may collect your IP address and which page you are visiting on our Site, and may set a cookie to allow the feature to function properly. Your interactions with these features are governed by the privacy policy of the organization providing it.
• Notice to End Users of the GrowthBook Services. The GrowthBook Services are primarily intended for use by organizations. Where the GrowthBook Services are made available to you through an organization (such as your employer), that organization is responsible for administering the accounts over which it has control. If this is the case, please direct your data privacy questions and requests to your administrator. We are not responsible for the privacy or security practices of your administrator's organization, which may be different than this policy.
• Notice to Users of our Customers’ Websites and Digital Product. As noted above, when GrowthBook’s customers use the GrowthBook Services as part of their own websites, apps, and digital products, they may collect information from you using our services, but they remain responsible for their own privacy and security practices. We are not responsible for our customers' privacy and security practices, which may differ from ours. If you have used one of our customers’ sites or products, and you would like to access, correct or delete the personal data collected through that product, you should direct your request to the applicable customer.

EEA Data Subjects:

If you are an individual in the European Economic Area (EEA), we collect and process information about you only where we have legal bases for doing so under applicable EU laws. The legal bases depend on the Sites and GrowthBook Services you use and how you use them. This means we collect and use your information only where:

• We need it to provide or operate the Sites and GrowthBook Services, including to provide customer support and process your orders, requests, questions and concerns;
• It satisfies another legitimate interest that is not overridden by your data protection interests, including our interest in:
• collecting product usage, analytics and performance data relating to our Sites and the GrowthBook Services, in order to maintain, analyze, develop, update, and improve our products and services;
• maintaining records of bugs, customer support requests and similar requests you file, and our response to these requests;
• using information to personalize content and features on our Sites and the GrowthBook Services;
• detecting, investigating and preventing activities that may violate our policies or applicable laws (such as fraud detection and prevention);
• maintaining corporate or business records consistent with our retention policies and applicable laws;
• protecting against activities that may threaten the security, integrity, or availability of our or another party’s products, systems, and services; and
• for marketing and selling our products and services, consistent with applicable laws.
• We are processing your information to protect our legal rights;
• You give us consent to process your personal data;
• We need to process your data to comply with a legal obligation, such as a lawful subpoena or law-enforcement request or to fulfill the lawful instructions of our customers (when they are acting as the controller); and/or
• We have another lawful basis for processing in accordance with applicable EU laws.

If an individual in the EEA has consented to our use of their personal information, and our processing is based on that consent, that individual has the right to withdraw their consent in accordance with the General Data Protection Regulation (“GDPR”), but this will not affect any processing that has already taken place. If you object to or restrict processing, you may not be able to use the Sites and GrowthBook Services or certain features any longer.

Where we are using your information because we or a third party (e.g. your employer) have a legitimate interest to do so, individuals in the EEA have the right to object to that use as specified in Article 21 of the GDPR, though, in some cases, this may mean no longer using the Sites or GrowthBook Service. Growth Book further acknowledges that EEA data subjects have certain other rights under the GDPR, including the right to lodge a complaint with a supervisory authority and to request from the controller access to, and rectification or erasure of, personal data, restriction of processing concerning the data subject, and data portability (in each case, as specified under the GDPR).

Where GrowthBook is acting as a controller, you can initiate a by contacting us as specified in the “Contacting Us” section below. Please note that these requests apply only to information that GrowthBook holds as a “controller.” If your request relates to the personal data collected through a customer’s websites or digital products, you should direct your request to the owner of that website or product. Please note that you must verify your identity and request before GrowthBook will process your request. You may be required to provide email confirmation or other information in order for us to verify your identity.

Finally, EEA and Swiss data subjects can contact GrowthBook’s data protection officer by emailing dpo@growthbook.io.

Effective January 1, 2020, the California Consumer Privacy Act of 2018 (the “CCPA”) allows consumers who are California residents, upon a verifiable consumer request, to request from a business:

• Delete any personal information about the consumer which the business has collected from the consumer;
• Disclose to the consumer certain information about the personal information that the business collects from the consumer; and
• Direct a business that sells personal information about the consumer to third parties not to sell the consumer’s personal information

GrowthBook does not sell any consumer personal information to third parties. To submit an data access or data deletion request, please visit our portal or contact us at privacy@growthbook.io. Please note that these requests apply only to information that GrowthBook holds as a “controller.” If your request relates to the personal data collected through a customer’s websites or digital products, you should direct your request to the owner of that website or product. Please note that you must verify your identity and request before GrowthBook will process your request. You may be required to provide email confirmation or other information in order for us to verify your identity. Consistent with California law, if you choose to exercise your rights, you will not receive discriminatory treatment by GrowthBook.

Under certain circumstances, you may designate an authorized agent to make a request on your behalf. In order to designate an authorized agent to make a request on your behalf, you must provide a valid power of attorney, your valid government government issued identification, and the authorized agent’s valid government issued identification to allow GrowthBook to verify that the agent is authorized to make the request on your behalf.

If you have any questions about GrowthBook’s privacy policies and practices, please contact us at privacy@growthbook.io.

CA Civil Code § 1798.83 permits California residents to request and obtain from GrowthBook once a year, free of charge, a list of the third parties to whom GrowthBook may have disclosed their personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those third parties. As a general policy, GrowthBook does not share personal information with third parties for their own direct marketing purposes without your prior consent. Accordingly, you can prevent disclosure of your personal information to third parties for their direct marketing purposes by withholding consent. Please contact us at privacy@growthbook.io if you would like to make such a request.