Connecting your CRM shouldn’t be a leap of faith.
How Growth7 protects the credentials, contact data, and content you connect to it — stated plainly, and only what is true today.
What happens to what you connect
Credentials Encrypted Before They Are Stored
The keys and tokens that connect Growth7 to your CRM, ad accounts, social accounts, and providers are encrypted with AES-256-GCM before they are saved. They are only ever decrypted on Growth7's servers, are never sent to a browser, and are never written to logs in plain text.
Encrypted in Transit
Everything between your browser, the Growth7 mobile app, and Growth7's servers travels over HTTPS.
Encrypted at Rest
Growth7's data is stored with Supabase, which encrypts it at rest, and the platform runs on Vercel.
Each Company Kept Separate
Every company in Growth7 has its own contacts, content, connected accounts, and queue. An operator who runs several brands switches between them, and each brand's data stays with that brand.
Access by Role
Each person sees and does only what their role in a company allows, and that is set per company — someone can administer one brand and hold a narrower role in another.
Your Infrastructure, Your Reputation
Growth7 sends through the email domain, phone numbers, and social accounts you connect, not through a shared pool. Your sender reputation is yours, and it is not affected by anyone else's campaigns.
Your data, your outreach
The contacts, content, and creative your company brings into Growth7 belong to your company. Growth7 processes them on your behalf, only to provide the platform.
Because Growth7 sends through your own accounts, your company remains responsible for the lawfulness of its outreach — including any consent your jurisdiction requires before email, text, or voice contact.
The rights people have over their personal information, including under laws such as the GDPR and the CCPA where they apply, are set out in the Privacy Policy.
Leaving, and deleting
Anyone can ask for their Growth7 account and the personal information tied to it to be deleted — here’s how. Content created in a company’s workspace belongs to that company, and is kept or removed on its instructions.
For how Growth7 uses AI, and which jobs wait for a person before they happen, see How Growth7 Uses AI.
Found a security issue, or need our security details for a review? Email hello@growth7.io.
Evaluating Growth7 for
a security review?
Book a call and we'll walk your team through how credentials, data, and access are handled.