Privacy.

David Zagury is the person in charge of protecting personal information at Growth Machines. Write to hello@davidzagury.ca for any request on this page.

Your website address, the goals you type and the conversation itself, kept so the agent remembers your business when you come back (a cookie on your device, for 90 days). The first answer needs no account. To keep going you create one: your name, work email and a password (or your Google account, which gives us your name and email only). Nothing else is asked.

We read your site's public pages and take screenshots of your homepage's first screen, which an AI model reads. We ask AI assistants (ChatGPT and Gemini) questions about your category, without your name in them. A voice note is transcribed and the audio is not kept. If you connect Google Analytics or Search Console, we read them read-only and store an encrypted token you can revoke from the chat.

We use it to answer you and, when you hand work to the studio, to prepare the call. A saved agent re-runs its checks every month and emails you what changed, with a one-click stop link; otherwise the only email you get is the follow-up you asked for.

Names, work emails, roles and language of the people we work with, the files you share with us, and usage figures for your AI tools that you or your admin consoles give us.

Accounts you connect, read-only, through the platform's own sign-in: Google Analytics, Search Console and Google Ads. We store an encrypted access token and the reports we read. We never change anything in your accounts.

We use it to run your engagement: your reports, answers to your questions about your data, and adoption tracking.

Account emails (confirming your address, resetting a password), the monthly update for a saved agent (with a one-click stop), the follow-up to work you hand to the studio and, for clients, short adoption check-ins that a person approves before they go out. Each marketing message carries an unsubscribe link. Nothing else is sent without your consent.

Two first-party cookies: one records your cookie choice, the other lets the growth agent find your conversation on your device. No analytics or advertising tags run before you accept, and none run today.

The booking page loads Calendly, which sets its own cookies under its own policy when you use it.

David Zagury and the specialists working on your engagement, under confidentiality. Never another client.

The services that run the system: Vercel (hosting), Supabase (database, files and accounts: your email and password hash live there, in its own project), Anthropic (AI models), OpenAI (ChatGPT's answers and voice note transcription), Google (Gemini's answers and the accounts you connect), TypeSafe (the judgment model that ranks actions), Resend (email) and Calendly (booking). Nothing is used to train AI models.

These services store and process data in the United States, outside Quebec. We chose them for their security commitments and use them only to deliver the work.

A conversation with the agent that does not lead to work with the studio is deleted after 12 months, with its screenshots, and the contact details attached to it are erased. Consent records are kept as long as the law requires. Client data is kept for the engagement and deleted on request once it ends.

You can ask to see, correct or delete your information, withdraw your consent, or ask where it is kept. Write to hello@davidzagury.ca. We answer within 30 days.

You can disconnect Google from the chat at any time; we revoke our access at the platform and delete the token. Your account page has a Delete my account button that removes your account and everything the agent kept, at once, with no email to us.

Growth Machines's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We read Analytics, Search Console and Ads data to answer your questions in the growth agent and to report on your engagement, and for nothing else.