Start free trial

Legal

Privacy policy

Last updated 16 October 2026

Draft under legal review. This page describes how GroundReach works today; the final wording may change after review, and we'll show the new date above when it does.

This policy explains how Raghavender Mantatikar, trading as GroundReach ("GroundReach", "we") handles personal information when you use this website (https://groundreach.si) and the GroundReach app (https://app.groundreach.si). We follow the Australian Privacy Principles under the Privacy Act 1988 (Cth) and, for users in the United States, applicable state privacy laws.

What we collect

Your account

  • Your name, email address and a one-way hash of your password (we can't read your password).
  • When you accepted our terms: the version, time, IP address and browser, as a record of your agreement.
  • Your organisation, workspaces and team members.

Accounts and services you connect

  • Access tokens for the platforms you connect (Google, Meta, and in future LinkedIn and TikTok), and API keys you enter for other services. These are encrypted (AES-256-GCM) and used only to do what you ask: read reports, create or change campaigns you approved, read leads, post content you approved.
  • Data we read through those connections: ad account and Page names, campaign performance, Google Analytics and Search Console reports, and leads from lead forms.

Your marketing data

  • Your website's public pages (for site health checks and audits), keywords, competitors, rankings, and the plans and content you create.
  • Leads: the details a person entered in your lead form. For follow-up emails we read the address when sending; for conversion reporting, email addresses, phone numbers and IDs are stored only as one-way hashes.
  • Unsubscribe requests, so we never email someone who opted out.

This website

This website uses Google Analytics to understand how visitors find and use it: for example which pages are viewed, for how long, roughly where visitors are, and which site or search brought them. Google Analytics sets cookies in your browser and sends this information to Google, which processes it for us. We use it only in aggregate to improve the website, not to identify you or to advertise to you. You can block these cookies in your browser settings, or install Google's opt-out add-on (tools.google.com/dlpage/gaoptout). The website also remembers, in your browser only and for 30 days, the first page you visited and any campaign tags in the link that brought you (such as utm_source or an ad click ID). If you create an account, these are passed to the app with your sign-up so we can see which of our own marketing works. You can clear them by clearing this site's data in your browser. The GroundReach app uses only the cookies it needs: one to keep you signed in, and a short-lived one to show the result of an action.

How we use it

  • To provide GroundReach: audits, plans, content, campaigns, reports, lead follow-up and the results ledger.
  • To keep the service secure, prevent abuse and fix problems.
  • To contact you about your account. We don't sell personal information, and we don't use your data to advertise to you.

AI processing

Some features send data to AI models: for example your website text and audit findings to write a plan, or anonymised lead details (contact fields removed) to score leads. AI visibility checks send your buyers' questions to answer engines. The model provider depends on what your organisation chooses. Providers process this data to return an answer; we don't send it for them to train their models where they offer that choice.

Google user data

When you connect a Google account to GroundReach, you choose which of these GroundReach may use:

  • Google Analytics (read-only): traffic and conversion reports for the properties you select, shown on your Analytics page and used in your marketing audits.
  • Google Search Console (read-only): the searches, pages, clicks and positions for your verified sites, shown on your Keywords page and used to find opportunities and to measure whether changes worked.
  • Google Ads: your ad accounts, keyword ideas and campaign performance, and creating or changing the campaigns you approve (always created paused).
  • Data Manager: sending the conversions your own website reports (such as sign-ups) to your Google Ads account.
  • Your Google account's name and email address, to show which account is connected.

We use Google user data only to provide these features to you. We don't sell it, don't use it for advertising, and don't let anyone read it except as needed to run the service for you, for security, or to comply with the law. When a feature uses AI (for example writing your audit), the relevant figures are sent to the AI provider your organisation chose, only to produce that result for you; we don't use Google user data to develop, improve or train generalised AI or machine-learning models, and don't send it for providers to train theirs.

GroundReach's use and transfer to any other app of information received from Google APIs will adhere to theGoogle API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google at any time under Settings → Integrations in GroundReach, or remove GroundReach's access atmyaccount.google.com/permissions. We then stop reading your Google data; reports already shown in GroundReach are deleted with your workspace or on request (see data deletion).

Who we share it with

We use these service providers, only for the purposes above:

  • Hosting: Hostinger (our servers are in Malaysia).
  • AI models: Anthropic, Amazon Web Services (Bedrock), and, for AI visibility checks, OpenAI, Perplexity and Google (Gemini).
  • Search data: DataForSEO (rankings, keywords, backlinks) and Google PageSpeed Insights.
  • Website analytics: Google Analytics (this website only).
  • Email: Resend (follow-up emails and alerts you set up).
  • The ad and analytics platforms you connect (Google, Meta), which receive the campaigns and conversions you approve.

Your information is stored on our servers in Malaysia, and some providers process it in other countries (mainly the United States). We choose providers with appropriate protections and take reasonable steps so they handle it consistently with the Australian Privacy Principles. We may also disclose information when the law requires it.

How long we keep it

  • Account and marketing data: while your account is active, and deleted within 30 days after you close it.
  • Database backups: kept for 14 days, then overwritten.
  • Records we must keep by law (for example billing records) for as long as the law requires.

Your choices and rights

  • Disconnect any connected account in the app (Settings → Integrations) at any time; we revoke our access where the platform allows it.
  • Ask to see, correct or delete your personal information: see data deletion.
  • If you're a lead who received an email from a GroundReach customer, use the unsubscribe link in that email.
  • If you're unhappy with how we handled a privacy matter, contact us first. In Australia you can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Security

Connection tokens and keys are encrypted, passwords are hashed, the app is served only over HTTPS, and access to customer data is limited to what's needed to run and support the service.

Contact

Raghavender Mantatikar, trading as GroundReach, ABN 34 557 691 587, Victoria, Australia. Email hello@groundreach.si.