Privacy Policy

1. Introduction

Iconic Intelligence Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect personal data when you use our platforms, including Growth Gorilla, Blog Beaver, Social Hawk, Insight Owl, and any related services (the “Platforms”).

This policy applies to users in the United Kingdom and the United States.

2. Who We Are

Iconic Intelligence Ltd is a company incorporated in England and Wales under company number 16890421, with its registered office at:

Iconic Digital – BTS House
69–73 Manor Road
Wallington
Surrey
SM6 0DD
United Kingdom

Contact: [email protected]

We act as a data controller in relation to your personal data.

3. Business Use Only

Our Platforms are designed for use by businesses and professionals only.

By using the Platforms, you confirm that you are acting in a business capacity and not as a consumer.

4. Personal Data We Collect

We may collect and process the following categories of personal data:

4.1 Account and Identity Data

Full name
Address
Company name
Job title
Email address
Telephone/mobile number

4.2 Voice Data and AI Inputs

Voice recordings
Voice prints and derived voice models
Transcriptions of voice recordings
Lexicon Voice Analysis and linguistic profiling

4.3 Platform Usage Data

Login activity
IP address and device information
Platform usage behaviour
Content generation history
Interaction with features and modules

4.4 Analytics and Tracking Data

Website usage (via Google Analytics and similar tools)
Tracking pixels, cookies, web beacons and UTM parameters
Advertising interaction data (e.g. Meta and Google Ads)

4.5 Payment Data

All payment data is processed securely via Stripe. We do not store full payment card details.

4.6 Marketing and Communication Data

Email engagement
Campaign interaction
CRM data via platforms such as Spotler and ActiveCampaign

4.7 Google User Data

Google user data. When you connect your Google Analytics and Search Console accounts, GrowthGorilla accesses, read-only: your GA4 property list, traffic metrics (users, sessions, page views, bounce rate, session channels), and Search Console performance data (queries, clicks, impressions, positions) for the property and site you select. This data is used solely to display analytics reports and website audits to you within your account, including AI-generated written summaries of your own reports produced by our AI subprocessor (which does not use your data to train its models). We do not sell Google user data, do not use it for advertising, and do not share it with third parties except the subprocessors needed to provide these features. Data is encrypted in transit and at rest; access tokens are stored encrypted. Report data is retained while your account is active and deleted upon account deletion or disconnection of your Google account, which you can do at any time from the integrations folder in the menu. GrowthGorilla’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. How We Use Your Data

We process your personal data for the following purposes:

5.1 Contract Performance

To provide access to the Platforms
To generate AI outputs
To manage your subscription and account

5.2 Platform Functionality

To personalise outputs using voice data and voice print models
To deliver AI-generated content and automation

5.3 Platform Improvement

To analyse usage and improve system performance
To develop and enhance features and functionality
To optimise AI models and workflows

5.4 Marketing and Business Communications

To send relevant business communications
To provide updates, product announcements and service information

5.5 Legal and Compliance

To comply with legal obligations
To prevent fraud, misuse or unlawful activity

6. Legal Basis for Processing (UK GDPR)

We rely on the following legal bases:

Contractual necessity – to deliver the Platforms and services
Legitimate interests – to improve services, monitor usage, and communicate with business users
Consent – for the processing of voice data and cookies where required
Legal obligation – to comply with applicable laws and regulations

7. Voice Data and AI Processing

Where you upload or record voice data:

your voice recordings, transcriptions and voice prints are used to generate AI outputs tailored to your tone and style
we create a Lexicon Voice Analysis to enhance content generation

You confirm that:

you have the right to use any voice data uploaded
you have obtained all necessary consents from any individual whose voice is used

We do not accept responsibility for misuse of voice data uploaded by users.

8. Data Sharing

We do not sell your personal data.

We may share your data with trusted third parties to provide our services, including:

Stripe (payment processing)
Amazon Web Services (hosting)
Cloudflare (security and performance)
AI providers (including OpenAI, Claude, Perplexity, Gemini and others)
Make.com (automation)
Google (analytics and advertising)
Meta (advertising and retargeting)
Spotler and ActiveCampaign (email marketing)
Iconic Digital Marketing Consultants Ltd (Concierge Services)

All third parties are required to process data securely and in accordance with applicable laws.

9. International Data Transfers

Your data may be processed and stored in:

the United Kingdom
the United States

We ensure appropriate safeguards are in place, including:

Standard Contractual Clauses
UK International Data Transfer mechanisms
secure infrastructure via AWS

10. Data Retention

We retain personal data as follows:

Active accounts: for the duration of the subscription
Post-termination: up to 90 days for operational purposes
Billing and compliance data: up to 12 months after termination

Voice data and generated content are retained in line with the account lifecycle unless deleted by the user.

11. Your Rights

UK Users (GDPR)

You have the right to:

access your data
correct inaccurate data
request deletion
restrict or object to processing
request data portability

US Users

Depending on your jurisdiction, you may have rights to:

access your personal data
request deletion
understand how your data is used

Requests can be made via: [email protected]

12. Data Security

We implement appropriate technical and organisational measures, including:

encryption in transit and at rest
secure AWS infrastructure
access controls and authentication
monitoring and threat detection systems

13. Cookies and Tracking

We use cookies and similar technologies, including:

Google Analytics
tracking pixels
web beacons
advertising cookies (Google and Meta)

Full details are set out in our separate Cookie Policy.

14. Data Deletion

Users may request deletion of their account and associated data at any time.

Deletion of content and voice data is only available through full account deletion.

15. Children

Our Platforms are intended for adults only. We do not knowingly collect data from individuals under the age of 18.

16. Contact

For any privacy-related queries or requests:

Email: [email protected]

17. Updates to This Policy

We may update this Privacy Policy from time to time. Continued use of the Platforms constitutes acceptance of any updates.