Privacy policy

This is the Privacy Policy of Solid Growth B.V. (hereinafter referred to as "Solid Growth," "we," "us" or "our"), a company having its address at Cort Heyligersstraat 4, 2518PD Den Haag. Solid Growth is registered with the Chamber of Commerce under number 87966433. Our Privacy Policy explains how we collect, use, share and protect information in relation to our website www.solidgrowth.com and our app at app.solidgrowth.com (together, the "Service"). We collect this information when you visit our website or use our app with your computer, tablet, phone or smartwatch ("Computer"). We process personal data in a manner that is in accordance with the General Data Protection Regulation (the “GDPR”), the GDPR-based legislation and the other current privacy legislation.

By using the Service, you understand and agree to the collection and use of information in accordance with this Privacy Policy. Our Privacy Policy applies to all visitors, users, and others who access the Service ("Users").

What kinds of information do we collect?

Information you provide

We collect the following information you provide us with directly:

1. Your username, password and e-mail address when you register for an Solid Growth account;
2. Profile information that you provide for your user profile;
3. Communications between you and Solid Growth (e.g., we may send you Service-related emails);

Log file information

We collect information that your browser sends whenever you visit our Service. This log file information may include information such as your computer's Internet Protocol address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages and other statistics.

Analytics services (non-personally identifiable information only)

We use third-party analytics tools to help us measure traffic and usage trends for the Service. These tools collect information sent by your device or our Service, including the web pages you visit, add-ons, and other information that assists us in improving the Service. The tools use ‘cookies’, which are text files placed on your device, to collect your log information and behavior information in an anonymous form. Cookies cannot damage your device or the files on your device. We collect and use this analytics information with analytics information from other Users so that it cannot reasonably be used to identify any particular individual User. With respect to Google Analytics, although Google Analytics plants a permanent cookie on your web browser to identify you, the cookie cannot be used by anyone but Google. Google’s ability to use and share information collected by Google Analytics about your visits is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. You can prevent Google Analytics from recognizing you on return visits by disabling cookies.

DoubleClick Cookies

Google, as a third-party vendor, uses cookies to serve ads on our Service. Google's use of the DoubleClick cookie enables it and its partners to serve ads to our users based on their visit to our Service or other web sites on the Internet. You may opt out of the use of the DoubleClick Cookie for interest-based advertising by visiting the Google Ads Settings web page.

Remarketing

Solid Growth uses remarketing services to advertise on third party web sites to you after you visited our Service. We, and our third-party vendors, use cookies to inform, optimize and serve ads based on your past visits to our Service.

How do we use this information?

We use all the information we have to help us provide and support our Services. Here is how:

1. remember information so you will not have to re-enter it during your visit or the next time you visit the Service;
2. provide, improve, test, and monitor the effectiveness of our Service;
3. To help you efficiently access your information after you sign in;
4. monitor metrics such as total number of visitors, traffic, and demographic patterns;
5. diagnose or fix technology problems;
6. develop and test new products and features; and

Communications

We may use your information to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link.

Purposes of processing data

By using our Service, you leave certain information with us, for example by creating an account. This may include data such as name, e-mail address, place of residence, telephone number and payment details. Solid Growth B.V. collects and processes this data to make our services accessible. We also collect information about your Computer (such as IP address, browser type and operating system) so that we can improve our services. The personal data will not be provided to third parties unless we are obliged to do so on the basis of legislation and regulations.

Legal basis for processing data

There are several bases on which Solid Growth B.V. can process personal data. These are: the execution of an agreement, the legitimate interest, based on a legal obligation or on the basis of your permission. We process your personal data to the extent necessary to achieve the purpose for which we collect the personal data.

How is this information shared?

We will not rent or sell your information to third parties outside Solid Growth.

Change of control

If we sell or otherwise transfer part or the whole of Solid Growth or our assets to another organization (e.g., in the course of a transaction like a merger, acquisition, bankruptcy, dissolution, liquidation), your information collected through the Service may be among the items sold or transferred. The buyer or transferee will have to honor the commitments we have made in this Privacy Policy.

Legal requests and preventing harm

We may access, preserve and share your information in response to a legal request (like a search warrant, court order or subpoena) if we have a good faith belief that the law requires us to do so. We may also access, preserve and share information when we have a good faith belief it is necessary to: detect, prevent and address fraud and other illegal activity; to protect ourselves, you and others, including as part of investigations; and to prevent death or imminent bodily harm. Information we receive about you may be accessed, processed and retained for an extended period of time when it is the subject of a legal request or obligation, governmental investigation, or investigations concerning possible violations of our terms or policies, or otherwise to prevent harm.

Safety and security

Solid Growth has taken appropriate technical and organizational measures by using the latest technologies to protect your information against loss or unlawful processing. We use safeguards to help keep the information collected through the Service secure and take steps (such as requesting a unique password) to verify your identity before granting you access to your account. However, Solid Growth cannot ensure the security of any information you transmit to Solid Growth or guarantee that information on the Service may not be accessed, disclosed, altered, or destroyed. We request you to do your part to help us. You are responsible for maintaining the secrecy of your unique password and account information, and for controlling access to emails between you and Solid Growth, at all times. We are not responsible for the functionality, privacy, or security measures of any other organization.

International transfer

Your information may be transferred to, and maintained on computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. If you are located outside Netherlands and choose to provide information to us, please note that we transfer the information to The Netherlands. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Retention period

In accordance with the law, Solid Growth does not retain data any longer than is required for attaining the purposes for which they were collected unless Solid Growth is obliged to do so based on a legal provision.

Inspection and correction

If you wish to know which of your data Solid Growth has recorded or if you wish to amend or remove data that you cannot amend via your account, please contact Solid Growth.

Third-party applications, websites and services

We are not responsible for the practices employed by any applications, websites or services linked to or from our Service, including the information or content contained within them. Please remember that when you use a link to go from our Service to another application, website or service, our Privacy Policy does not apply to those third-party applications, websites or services. Your browsing and interaction on any third-party application, website or service, including those that have a link on our Services, are subject to that third party's own rules and policies.

Children's privacy

Our Service does not address anyone under the age of 13 or 16 ("Children"), depending on the applicable EU privacy rules. The age threshold for obtaining parental consent varies between 13 and 16 years. We do not knowingly collect personally identifiable information from children under 13 or 16. If you are a parent or guardian and you are aware that your Children has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under age 13 or 16 without verification of parental consent, we take steps to remove that information from our servers.

Changes to this privacy policy

Solid Growth may modify or update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Changes: on 4 October 2026 we added the section "Google user data", which explains how the App handles data it receives from Google, and we extended this policy to cover the App at app.solidgrowth.com. On 8 October 2026 we added the section "The free audit reads your website".

The free audit reads your website

When you give us your company website in the free audit, we read the public pages of that website. This is what happens with it:

• We ask Browserless, a service that opens web pages in a browser for us, to open up to ten public pages of your website. We only ask for pages of the same website, we follow its robots.txt, and we never ask for a private or internal address.
• Our own software looks in those pages for the tools your website uses (for example your analytics, your CRM or your chat).
• A language model reads the text of your homepage to describe what your company does. It receives that text and the website address, and not your name or your email address, and it cannot do anything except answer.
• We ask Surfe, a company-data service, for facts about your company from your website address, such as its size and industry.

We show you what we found, and you confirm, correct or skip each point. If you give us your email address, we keep the findings with you, each with where it came from, how sure we are and the date, so we can write to you with the right advice. A scan is deleted after 30 days if it is not linked to you, and it is deleted when you ask us to erase your data. Browserless, Surfe and the AI Gateway that hands the homepage text to the model act as processors on our behalf. You can ask us at any time to show or erase what we hold: write to us at the address below.

Google user data

This section explains how the Solid Growth app at app.solidgrowth.com (the "App") accesses, uses, stores and shares data it receives from Google ("Google user data"). If anything in the rest of this policy conflicts with this section, this section applies to Google user data.

Our commitment to Google's rules

Solid Growth's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain words:

1. We use Google user data only to provide and improve the features you see in the App, and to keep the App secure and lawful.
2. We do not sell Google user data and we do not use it for advertising, including retargeting, personalised or interest-based ads.
3. We do not use Google user data to develop, improve or train generalized artificial intelligence or machine-learning models.
4. We do not transfer Google user data to anyone except as this section describes: to the service providers that run the App for us, where the law requires it, or as part of a merger or sale of Solid Growth where the buyer keeps these commitments.
5. People at Solid Growth do not read Google user data unless you give permission (for example when you ask for support and approve access), it is needed for security (for example to investigate abuse or an incident), or the law requires it.

Sign in with Google

• What we access: your name, your email address and a link to your Google profile picture. We ask for the basic sign-in permissions only (openid, email and profile). We do not read your Gmail, Drive, Calendar or contacts through sign-in.
• Why: to create your account, recognise you when you come back, show your name and picture in the App, and send you messages about the service.
• Where it is stored: in our database and authentication service at Supabase, in the European Union (Ireland).
• How long: while your account exists. When you delete your account, or ask us to delete it, we delete this data, except what the law requires us to keep.

Google Search Console and Google Analytics: who connects

Today, only Solid Growth's own platform team, signed in with two-step verification, can connect a Google property, and it connects its own. When customers can connect their own properties, workspace owners and admins will be the people who can, and we will update this policy first. The rules in this section apply to every connection.

Google Search Console

• What we access: read-only. The permission we ask for is https://www.googleapis.com/auth/webmasters.readonly. For each property you connect, we read the property's details and your permission level, and its search performance data: search queries, pages, clicks, impressions, click-through rate and average position, by day, device and country. Google leaves out rare queries, but a search query can still contain personal data that a person typed into a search box.
• Why: to show you how your website performs in Google Search next to your other growth numbers in the App, to help you plan and review your work, and to run the checks and reports you set up. We never change anything in your Search Console account.
• Where it is stored: in our database at Supabase, in the European Union (Ireland), inside your workspace. Other workspaces cannot read it.
• How long: this is the rule we apply. We keep search queries for at most 13 months; after that, queries seen fewer than twice are folded into page totals and their text is removed. Page-level and property-level numbers are kept while your workspace exists, and we keep the history of how they changed for 25 months. All of it is deleted 30 days after your agreement with us ends. You can also ask us to delete it sooner.

Google Analytics

• What we access: read-only. The permission we ask for is https://www.googleapis.com/auth/analytics.readonly. For each property you connect, we read the property's details (such as its time zone, creation date and service level) and traffic reports: sessions, engaged sessions and key events by day, default channel group, source, medium and campaign name. These are totals, not information about individual visitors.
• Why: to show where your traffic and conversions come from, next to your ad, search and sales numbers, and to run the checks and reports you set up. We never change anything in your Analytics account.
• Where it is stored, how long, who can read it: the same as for Google Search Console above.

Google Ads (planned, not available yet)

We plan to offer a read-only Google Ads connection for reporting: campaign, ad group and ad performance such as impressions, clicks, spend and conversions. It is not live. Before it goes live we will update this policy, and Google Ads will only be connected if you choose to connect it. Google offers a single Google Ads permission that can technically change an account, so we will only run reporting requests and we will ask you to connect with a read-only Google Ads user.

Where Google user data goes

• Service providers: Google user data is processed on our behalf by Supabase (database and authentication, European Union, Ireland) and Vercel (hosting in Frankfurt, and the connection broker that holds your Google access tokens). They may only use it to run the App for us, under data processing agreements. Our error monitoring and our log archive do not receive Google user data: they receive identifiers only. Customers get the list of service providers in our data processing agreement and 30 days' notice before we add one.
• AI features: today we do not send Google user data to AI model providers. If we add AI features that read your connected data, we will send it only to model providers that do not keep it and do not train on it, only to produce the answer you asked for, only from your own workspace, and we will update this policy first.
• Never: we do not sell Google user data, we do not give it to data brokers or advertisers, and we do not use it to build profiles for advertising.
• Legal requests and sale of the company: see "Legal requests and preventing harm" and "Change of control" above. A buyer must keep the commitments in this section.

How we protect Google user data

• Data is encrypted in transit and at rest.
• Each workspace is separated in the database with row-level security: members of one workspace cannot read another's data.
• Google access tokens are held by Vercel Connect and not in our database. Our servers ask for a token when they need to sync, and the App only requests the read-only permissions listed above.
• Connecting a Google property is limited to Solid Growth's own platform team, who must be signed in with two-step verification. We offer two-step verification for every account.
• Staff access to a workspace's data is limited, logged, and only for the reasons given above.

Your control: revoke access and delete data

• Revoke: you can remove Solid Growth's access at any time in your Google Account, at myaccount.google.com/permissions. Our access to your Google data stops at once, and the sync stops.
• Delete: email support@solidgrowth.com to disconnect a Google property and to have the data we hold from it deleted, or to delete your account. We act without undue delay and within one month. Until you ask for deletion, data already synced stays in your workspace after a disconnect, so your history is not lost.
• Your other rights: to see, correct, restrict or move your data, or to object to our use of it, see "Inspection and correction" above, or email us.
• Questions or complaints: write to support@solidgrowth.com. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

How to contact us

If you have any questions about this Privacy Policy of the Service, please send an email to support@solidgrowth.com.