Privacy policy

Last updated 3 November 2026

Growthladder is operated by Niko Developments LTD, registered in England and Wales (company number 17450168), 25 Pateley Square, Wigan, WN6 7HG, United Kingdom (“we”). This policy explains what we collect when you use searchladder.com and why. Contact: raivis.olehno@proton.me.

What we collect

• Your account: your name, email address and a hashed password.
• Your websites and apps: the domains and store listings you add, the business details you enter or we draft from your public pages, and the content our agents create for you (articles, replies, reports).
• Public data we read for you: your public web pages, app store listings and reviews, and public posts on community sites, to audit, plan and draft content.
• Data from tools you connect: read-only reports from Google Search Console, Google Analytics, Bing Webmaster Tools, Microsoft Clarity, PostHog and App Store Connect, when you choose to connect them.

Google user data

If you sign in with Google, we request read-only access to Search Console (webmasters.readonly) and Google Analytics (analytics.readonly) for the properties you choose, plus your email address to identify the connection. We use this data only to show your search and traffic reports in your Growthladder account and to help our agents plan content for your own site. We don’t sell it, use it for advertising, share it with other users, or let people read it except where you ask us to or the law requires.

Growthladder’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

To produce reports and drafts, we send your business details and the relevant data to our AI provider, Microsoft Azure OpenAI, under terms that don’t allow it to train models on your data.

How we keep it

Data is stored in Microsoft Azure in the United Kingdom. Credentials for connected tools (OAuth refresh tokens, API keys) are encrypted at rest with AES-256 and are never shown again after you enter them. You can disconnect a tool at any time in Integrations, which deletes its credential and synced reports; you can also revoke Google access at myaccount.google.com/permissions.

How long we keep it

For as long as your account exists. Removing a website deletes its data; deleting your account deletes everything within 30 days, except backups, which expire within 35 days.

Your rights

Under UK GDPR you can ask to see, correct, export or delete your data, or object to how we use it, by emailing us. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Cookies

We use one essential cookie to keep you signed in. We don’t use advertising or tracking cookies.