Privacy Policy
This Privacy Policy explains how Argrow — a service of Resimplify Pty Ltd (ABN 67 629 229 143), a company registered in the Australian Capital Territory, Australia ("we", "us", "our") — collects, uses, holds, discloses and protects personal information. It covers both this website (argrow.ai) and the Argrow SEO platform and related services (together, the "Service"). Argrow is operated from Australia and we comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). We offer the Service internationally; where the EU or UK GDPR applies to our handling of your information, we aim to handle it consistently with those requirements.
1. Who is responsible for your information
For information collected through this website and for the operation of the Service, Argrow (a service of ReSimplify) is the data controller. When we deliver the Service to a business customer, that customer is the controller of personal information contained in their end-users' data (e.g. their website's analytics audiences), and we act as their data processor / APP entity handling data on their behalf under our Terms of Service (which include our data-processing commitments).
2. Information we collect
2.1 From visitors to this website
- Your email address, if you submit it to register interest or be notified about launch.
- Technical logs created automatically by our hosting provider (IP address, browser type, request time) to keep the site secure and working.
- Analytics data (page views, approximate location) — only if you accept analytics in our cookie banner. If you decline, none is collected. See sections 6 and 7.
2.2 From customers and their authorised users
- Account & business details: name, business name, email, phone, billing details, website address, industry and service area.
- Authentication & access tokens you grant us so the Service can read your marketing data and (where you enable it) prepare and publish approved changes — for example Google Search Console, Google Analytics 4, Google Business Profile, and your website CMS (e.g. WordPress). These are stored encrypted.
- Performance & site data retrieved from those accounts and from public business listings such as your Google Business Profile: search clicks, impressions, rankings, traffic, audience, backlink and technical-audit data about your website, availability/uptime checks of your website, the content of your web pages, and public business-listing information (for example, your Google Business Profile business details, photos and reviews).
- Usage, product-analytics & support data: log-ins, actions taken in the platform, approvals you make, and messages you send us or our in-product assistant. To understand how the platform is used, diagnose issues, provide support and improve the product, we also collect product-analytics events and session recordings — a screen-style replay of how you move through the signed-in portal. These recordings are captured by our own self-hosted analytics, run on our own infrastructure in Australia (they are not sent to any third-party analytics vendor), and sensitive input fields are masked so their contents are not recorded. See section 6.
We do not seek to collect sensitive information (as defined in the Privacy Act). Please do not connect accounts or submit content that contains health, biometric or other sensitive personal data.
3. How we use information
- To provide the Service: track performance, audit your site, generate SEO recommendations and draft content/metadata, and — only with your approval — publish approved changes to your connected properties.
- To operate, secure, support and improve the Service, and to communicate with you about it — including, inside the signed-in platform, through product analytics and session recordings that help us understand usage, diagnose issues and improve the product (see section 6).
- To process payments and manage your subscription.
- To email you about launch / product updates where you have asked us to (consent), with an unsubscribe link in every message.
- To comply with law and enforce our Terms.
We do not sell your personal information, and we do not use it for third-party advertising. We do not use your business's confidential data to train third-party AI models, and our AI providers are engaged on terms that do not permit them to train their general models on our customers' data (see section 5).
4. AI processing & the human in the loop
The Service uses artificial intelligence (large language models) to analyse your site and generate recommendations and draft content/metadata. To do this, page content, keywords and performance data may be sent to our AI subprocessor for processing and returned to us. Nothing the AI produces is published to your live website automatically. Drafts are presented to you, and you choose whether to publish or apply them. Where you authorise us to publish an approved change on your behalf, you remain the publisher of record for the content on your site. This human-in-the-loop control is described further in our Terms of Service.
Where you connect your own AI provider key ("bring your own AI"), your plan's AI work runs against that provider instead of ours, and your content is sent to that provider for processing under that provider's own terms. That provider is a third party we do not control; we store your key encrypted and use it only to provide the Service to you.
5. Who we share information with (subprocessors)
We use trusted service providers ("subprocessors") who process data only on our instructions and under contractual confidentiality and security obligations. We share only what is necessary for each provider's function:
| Provider / category | Purpose | Data involved | Region |
|---|---|---|---|
| AI / language-model providers | AI analysis & draft content generation | Page content, keywords, performance data (no payment data) | USA / global |
| SEO data & analytics providers | Keyword, ranking, SERP & backlink data collection | Domains, keywords, locations | USA / EU |
| Google (Google LLC) | Your Search Console / Analytics / Business Profile data, and (website only) optional Analytics | Search & analytics data for your own properties | USA / global |
| Stripe | Payment processing & subscription billing | Billing name, email, card/payment details (handled by Stripe) | USA / Australia |
| Cloud hosting & infrastructure | Hosts the platform, database and encrypted backups; serves this website | All Service data at rest, technical logs | Australia |
| Email service provider | Launch / marketing email list (website sign-ups) | Email address | EU / USA |
A current list of our named subprocessors is available on request.
Our in-platform product analytics and session recording are self-hosted on our own infrastructure in Australia. They are not sent to a third-party analytics vendor, so this processing does not add a new external subprocessor; sensitive input fields are masked in the recordings.
Google user data — Limited Use. Argrow's use and transfer of information received from Google APIs (including your Google Search Console, Google Analytics 4 and Google Business Profile data) to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We keep this list current. Your Service data is hosted in Australia; some subprocessors above process limited data overseas (see section 7). We may also disclose information where required by law, to protect our rights or safety, or in connection with a sale or restructure of our business (subject to equivalent privacy protection).
6. Cookies & browser storage (website)
On this website we set no cookies until you choose. Essential browser storage (remembering your privacy choice and sign-up flag) is strictly necessary and needs no consent. Analytics cookies are opt-in: a banner asks whether to allow analytics; "Accept" loads Google Analytics (which sets cookies such as _ga with IP anonymisation enabled), "Decline" never loads it. You can withdraw consent any time by clearing this site's data or emailing us. For the specific cookies, their durations and how to control them, see our Cookies Policy.
6.1 Inside the signed-in platform
When you are logged in to the Argrow platform we set the cookies and similar browser storage needed to keep you signed in and secure. We also run our own product analytics, including session replay — a screen-style recording of how you move through the portal — to understand usage, diagnose issues, provide support and improve the product. This analytics and session recording is self-hosted on our own infrastructure in Australia; it is not sent to a third-party analytics vendor, and sensitive input fields are masked so their contents are not recorded. Because it supports the operation, security, support and improvement of the platform you are signed in to, this processing forms part of providing the Service to you.
7. International data transfers
We host the platform and store your Service data in Australia. Some subprocessors store or process limited data outside Australia (including the United States and the EU). Before disclosing personal information overseas we take reasonable steps, as required by APP 8, to ensure the recipient handles it consistently with the APPs.
Australia does not currently have an EU adequacy decision. Where the EU or UK GDPR applies, before transferring personal data overseas (including onward to subprocessors in the United States) we take reasonable steps to protect it and, where appropriate, put safeguards in place such as the Standard Contractual Clauses (and, for UK data, the UK Addendum). By using the Service you acknowledge these transfers are necessary to provide it. Our own product-analytics and session-recording data is hosted in Australia and is not transferred overseas.
8. Storage, security & retention
- Data is held in our managed database with encrypted off-site backups; access tokens and secrets are stored encrypted.
- Access is restricted to personnel who need it to deliver and support the Service.
- We keep customer data for the life of your account and a reasonable period afterwards; on termination we delete your data and revoke stored access within a reasonable period, subject to legal retention requirements. Website sign-up emails are kept until you unsubscribe or ask us to delete them.
- No system is perfectly secure; we will notify affected individuals and the OAIC of an eligible data breach as required by the Notifiable Data Breaches scheme. Where the EU/UK GDPR applies, we will also notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of a personal-data breach, and affected individuals where the breach is likely to result in a high risk to them.
9. Your rights
Depending on where you live (including under the Australian Privacy Act and, where it applies, the EU/UK GDPR) you may have the right to access, correct, delete, port or restrict your information, to withdraw consent, and to object to certain processing. To exercise any right, or to complain, email support@argrow.ai. We may need to verify your identity first. If you are not satisfied with our response you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, or your local data-protection authority.
9.1 EU/UK GDPR — lawful bases and your rights
Where the GDPR applies, we rely on these lawful bases:
- Performance of a contract — to provide the Service to you and your business, including reading your connected data and preparing and (with your approval) applying changes.
- Legitimate interests — to secure, support, analyse and improve the Service (including product analytics and session recording), balanced against your rights and freedoms.
- Consent — for marketing communications and for analytics cookies on our website; you can withdraw consent at any time without affecting processing already carried out.
- Legal obligation — where we must process information to comply with the law.
You have the right to access, rectification, erasure, restriction and data portability, to object to processing based on our legitimate interests or to direct marketing, and to withdraw consent at any time. Because you decide what goes live (section 4), we do not make automated decisions that produce legal or similarly significant effects about you without human involvement (GDPR Article 22). You may also lodge a complaint with your local supervisory authority.
9.2 Other jurisdictions
If you live somewhere that gives you privacy rights beyond those above — for example, California residents under the CCPA/CPRA — contact us at support@argrow.ai and we will honour any rights that apply to you. As a general matter, we do not sell your personal information, and we do not "share" it for cross-context behavioural advertising. You may use an authorised agent to make a request, and we may verify your identity.
10. Children
The Service is for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16.
11. Changes
We may update this policy. Material changes will be communicated and a new version date recorded above.
12. Contact
Privacy enquiries: Resimplify Pty Ltd (ABN 67 629 229 143), Gordon, Australian Capital Territory, Australia — trading as Argrow. Email support@argrow.ai.