Privacy Policy
Effective August 30, 2026. Updated October 5, 2026.
Grovalo (“the Service”) is a product of and operated by That Social Geek LLC, Queen Creek, Arizona (“we,” “us”). Grovalo plans social media posts and short videos for local businesses, lets the business owner review and approve each one, publishes the approved posts to the social accounts the business connects, and reports how those posts performed. This policy explains what information we collect, how we use it, how we protect it, who we share it with, how long we keep it, and the choices you have. Questions go to info@thatsocialgeek.com.
Information we collect
Information you give us
- Account information: your name and email address, and the email addresses of any team members you invite.
- Business information: your business name, website, phone number, service area, logo, brand colors and fonts, and your answers about what the business does, who its customers are, and how its posts should sound.
- Content: the scripts, captions, images, voice recordings, and videos you record, upload, edit, or approve in Grovalo, and the comments and change requests you leave on them.
Information we receive when you connect a social account
You connect each account yourself, through that platform’s own sign-in. We never see or store your password for any platform. The platform gives us an access token limited to the permissions you approve on its consent screen, and we receive only the following:
- Google account (YouTube and Google Business Profile): your name, email address, and profile picture, to show which account is connected; your YouTube channel’s name, ID, and picture; the videos Grovalo uploads for you and their view, like, and comment counts; your channel’s YouTube Analytics reports (watch time, average view duration, subscribers gained and lost); the Business Profile locations you manage; and each location’s performance numbers (map views, calls, website clicks, and direction requests).
- TikTok: your display name, username, and avatar; your follower, following, likes, and video counts; and the view, like, comment, and share counts of the videos Grovalo posts for you.
- LinkedIn: your name and profile picture; the company Pages you administer; and the impressions, clicks, reactions, comments, and shares of the posts Grovalo publishes to the Page you choose.
- Facebook and Instagram: the Pages and Instagram business accounts you choose, and the reach and engagement of the posts Grovalo publishes there.
Information collected automatically
When you use Grovalo we keep the basic records needed to run and secure it: a sign-in session cookie that keeps you signed in, the date and time of actions such as an approval, and server logs with IP address and browser type, kept for security and troubleshooting. We do not use advertising or cross-site tracking cookies.
How we use information
- To build your content calendar, write captions and scripts, and make the images and videos for your posts.
- To show you each post before it goes out and record your approval or change request.
- To publish only the posts you approved, to the accounts you connected, at the time you chose, with the settings you chose, such as who can see a TikTok video or a YouTube video’s title and visibility.
- To show you how your posts and accounts performed on your Results screen, and to plan next month’s posts around what worked.
- To provide support, keep the Service secure, prevent abuse, and meet legal obligations.
We use data from a connected account only to provide these features to the business that connected it. We do not use it for advertising, we do not sell it, and we do not use it to build profiles of people.
Google API Services Limited Use disclosure
Grovalo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the features you request in Grovalo; we do not transfer it except as necessary to provide those features, to comply with law, or as part of a merger or acquisition with prior notice; we do not use it for advertising; and we do not allow humans to read it except with your consent, for security purposes, to comply with law, or when the data is aggregated and anonymized.
Google user data is never used to develop, improve, or train generalized artificial intelligence or machine learning models. When Grovalo plans your next month of posts, the text of your best-performing recent posts and their engagement counts, which can include YouTube view and like counts, are sent to Anthropic’s API so it can write that plan for you. Anthropic processes them only to return the plan and does not train its models on data sent through its API.
YouTube API Services
Grovalo uses YouTube API Services. When you connect a YouTube channel, Grovalo uploads the videos you approve to that channel, with the title, description, and visibility you choose, and reads your channel’s and videos’ statistics to show them on your Results screen. By connecting YouTube to Grovalo, you agree to be bound by the YouTube Terms of Service. Google’s handling of your data is described in the Google Privacy Policy. You can remove Grovalo’s access at any time from Setup in Grovalo, or from Google’s security settings at security.google.com/settings/security/permissions.
How we protect information
Data travels over encrypted connections (HTTPS) and is stored with the hosting providers listed below, which encrypt it at rest. Access tokens for connected accounts are held by our publishing service and are never shown in Grovalo or sent to your browser. Within That Social Geek, access is limited to the people who run the Service and support your account, and each business can see only its own data.
Who we share information with
We do not sell or rent your information. We share it only as follows:
- The platforms you connect (Facebook, Instagram, Google Business Profile, YouTube, TikTok, LinkedIn), to publish the posts you approved and read their results.
- Service providers that run Grovalo for us: Vercel and DigitalOcean (application hosting), Supabase (database and sign-in), Cloudflare (network security and file storage), and Moda (design rendering). For businesses whose posts we manage as an agency, Publer or GoHighLevel may be used to schedule posts.
- AI providers that help make your content: Anthropic (captions, scripts, and monthly plans), OpenAI (images), ElevenLabs (voiceovers), and Kling (generated video footage). They receive your business details and the content being made, and Anthropic also receives the post results described above, only to return the result.
- When required by law, or to protect the rights and safety of our users, the public, or us, or as part of a merger or acquisition with notice to you.
Each provider receives only what it needs to perform its function and is bound by its own privacy and security commitments.
How long we keep information
- Account, business, and content data: for as long as your account is open.
- Data from a connected account: refreshed daily while it is connected. When you disconnect an account, we stop using its access token and delete its stored results right away, and the token itself is erased within 30 days. Anything we have not been able to refresh in 30 days, for example because you removed access in the platform’s own settings, is deleted automatically.
- When you close your account or ask us to delete your data, we delete it within 30 days, except where the law requires us to keep it longer.
Your choices and rights
- Disconnect any social account at any time from Setup in Grovalo.
- Remove Grovalo’s access from the platform itself: Google at security.google.com/settings/security/permissions, or the connected-apps settings in TikTok, LinkedIn, or Facebook.
- Ask for a copy of your data, a correction, or deletion of your account and data by emailing info@thatsocialgeek.com. We answer within 30 days.
Children’s privacy
Grovalo is a business tool for adults. It is not directed to children under 13, and we do not knowingly collect personal information from them.
Changes
If this policy changes in a way that matters, we will notify account holders by email before the change takes effect. The date at the top always reflects the current version.
Contact
That Social Geek LLC, Queen Creek, Arizona. info@thatsocialgeek.com