Privacy policy

Poe is an internal content tool operated by Growth Rocket ("Growth Rocket", "we") at poe.vill.ar. Questions about this policy or your data: privacy@growth-rocket.com.

Growth Rocket staff who sign in with a @growth-rocket.com Google account and are approved by an administrator, and client reviewers who open a share link that Growth Rocket sends them.

• Google sign-in: your name, email address, profile photo and Google account ID.
• Google Drive and Google Sheets (optional, only after you choose to connect Google in Poe):
  • drive.file lets Poe create Google Docs and Sheets when you export, and open only the files Poe created. It can't see the rest of your Drive.
  • spreadsheets.readonly lets Poe read a Google Sheet you paste a link to, so you can import a content plan. Poe never edits your sheets.
  We store the connection's token encrypted. Separately, Poe can sync a Google Sheet that someone has shared with Poe's own service account; it reads only those sheets.
• Google Ads API: Poe requests keyword ideas and search-volume estimates through a Google Ads account owned by Growth Rocket. It doesn't access your Google Ads accounts or any personal data.
• Client website credentials (optional, only when staff connect a client's site for publishing): the site address and an access credential for it, such as a WordPress Application Password, a Ghost Admin API key, or a Shopify access token or app credentials. Poe stores the credential encrypted, never shows it again, and uses it only to save, publish or check articles on that site. Disconnecting a site deletes the credential.
• Content you create: plans, briefs, keywords, articles, guidelines, comments, and the history of changes to them.
• Client setup contacts: when staff ask a client to connect their website, the contact's name and email address, an optional note from the sender, and when they opened and finished the setup link. The email is sent through Resend. The link expires after 14 days and can be revoked.
• Client reviewers: the name and email address entered when commenting on or approving shared work, and the comment itself.
• AI usage records: for each AI call Poe makes for someone's work — the provider and model, token counts, web searches, cost in USD, when it ran, and the article, plan or client it belonged to — kept to report AI spend, including per person, to Growth Rocket administrators.
• Technical: a sign-in session cookie, a cookie that remembers the last client you opened, and your light/dark theme choice stored in your browser. Poe uses no advertising trackers. Stock photo providers may count image views and selections as described below.

Only to provide and improve Poe's features: signing you in, researching, generating and editing content, importing and exporting the documents you choose, sending the notifications you've switched on, keeping a record of who changed what, and reporting AI usage and costs (broken down by person) to Growth Rocket administrators.

To research and write, Poe sends the relevant brief, keywords, guidelines, sources and draft text to the AI provider an administrator has selected: Anthropic, OpenAI or Moonshot AI. Poe also sends text to OpenAI to build search embeddings for a client's content library, and to TypeSafe to rank which retrieved passages are relevant. This can include rows from a Google Sheet you chose to import.

Poe doesn't train AI models. Under their API terms, Anthropic and OpenAI don't use data sent through their APIs to train their models by default.

Poe's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google user data only to provide the features described above. We don't sell it, use it for advertising, or use it to train generalized AI or machine-learning models, and people don't read it unless you ask us to, it's needed for security, or the law requires it.

Service providers that run Poe for us: Hostinger (hosting), the AI providers listed above, Resend (email notifications) and Google (sign-in, Drive, Sheets and the Ads API). Clients see only what Growth Rocket shares with them by link, and anyone with a share link can view what it points to. We don't sell personal data.

When you search for stock photos, Poe sends your search terms to Pexels or Unsplash, depending on the source you choose. Photo previews and inserted stock photos load directly from the provider, which receives your IP address and may count views. When you add an Unsplash photo, Poe reports the selection to Unsplash. Uploaded images are stored in Poe and can be viewed by anyone with their image link, including reviewers of shared articles.

When you generate an image in the editor, Poe can first ask the AI providers listed above to write an image description from the article's title and draft. The description you choose to use is sent to fal.ai, which creates the image; Poe asks fal.ai to return it directly rather than keep it in its request history. When you edit, upscale or remove the background of a generated image, Poe sends that image to fal.ai. Generated images are stored in Poe like uploaded images.

Content stays in Poe until Growth Rocket deletes it or removes the client. Disconnecting Google in Poe deletes the stored token and revokes it with Google; you can also remove Poe's access at myaccount.google.com/permissions. To have your account data deleted, contact privacy@growth-rocket.com.

Poe is served over HTTPS. Google tokens, client website credentials and API keys are encrypted at rest, and only approved Growth Rocket staff can sign in.

When we change how Poe uses data, we update this page and the date at the top.