Privacy Policy

Last updated: 20 July 2026

GrowthSignal Tools (“the tools”, “we”, “us”) is a free set of image utilities operated by GrowthSignal at tools.growthsignal.live. This policy explains exactly what happens to your files and to any Google account data when you use the tools. It reflects how the application actually works.

The short version

• In the Batch Image Processor, your images are prepared in your own browser — for most formats they are never uploaded to us at all.
• HEIC/HEIF photos are the one exception: browsers can’t read HEIC, so those files are sent to our converter, turned into JPG, and discarded immediately — never stored.
• Our single-purpose converter tools (e.g. HEIC to JPG) process your file temporarily, in memory, and keep no copy after the request finishes.
• No account is required, and there are no third-party advertising or tracking cookies. We don’t sell data.
• Saving to Google Drive happens only when you explicitly click “Save to Google Drive.”
• The app cannot browse or read your Google Drive. It can only work with files it creates, and you can revoke access at any time.

How your images are processed

Batch Image Processor (in your browser). When you drop a folder into the Batch Image Processor, the work — resizing, compression, format conversion, metadata removal and renaming — happens on your own device, inside your browser. For JPEG, PNG, WebP, AVIF and GIF files, the image data is never sent to our servers; the finished ZIP is assembled locally and downloaded straight from your browser.

The HEIC/HEIF exception. Web browsers cannot yet decode Apple’s HEIC/HEIF format. So when your batch contains HEIC or HEIF photos, only those files are sent over an encrypted (HTTPS) connection to our own converter, decoded and turned into JPG entirely in memory, and returned to your browser to finish processing. These temporary uploads are never written to disk for storage and are discarded the moment the conversion completes — we keep no copy. We are working to remove this step by decoding HEIC in the browser in a future release.

Single-purpose converter tools. Our standalone tools (for example, the HEIC to JPG converter) upload your file over HTTPS, convert it in memory, and stream the result back to you (or, if you choose, to your Google Drive). We do not write your files to disk for storage and keep no copy after the request finishes. Because nothing is retained, there is no file for us to delete later and no archive of your images.

Google Drive (optional)

Connecting Google Drive is entirely optional. If you use the “Save to Google Drive” feature, the following applies:

• Explicit action only. An upload to your Drive happens only after you click “Save to Google Drive” and grant permission. Converting an image never touches your Drive on its own.
• Minimal, per-file access. We request a single Google scope, drive.file. Under this scope the app can only see and manage the files it creates itself — it cannot list, read, or access any of your existing Drive files or folders.
• Where files go. Converted files are placed in a dedicated “GrowthSignal Tools” folder that the app creates in your Drive.
• How we hold your authorization. We use a short-lived access token (about one hour) with no refresh token. The token is stored only in your browser’s signed, HttpOnly session cookie — not on our servers — and expires on its own. We never store your Google password.
• Compliance. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google Drive data for advertising and we do not transfer or sell it.

Data deletion & revoking access

Because we do not permanently store your files or your Google token on our servers, there is no stored personal data for us to delete. To be completely thorough:

• Uploaded and converted files: discarded automatically when your request completes — nothing to delete.
• Your session / Drive connection: click “Disconnect” in the tool, or simply close the tab and let the ~1-hour token expire.
• Revoke app access from Google: visit myaccount.google.com/permissions, select GrowthSignal Tools, and choose “Remove access.” This immediately revokes the app’s permission to create files in your Drive.
• Files already saved to your Drive belong to you; delete them from your Drive like any other file.

Logs and analytics

We keep minimal, aggregate, first-party usage analytics to understand how the tools are used and to improve them — for example: that a page was viewed, which workflow was chosen, how many images were in a batch, the mix of formats (such as HEIC vs JPEG), whether processing completed or failed, and how long it took. These events contain no file names, no image contents, no account identities, and no IP addresses, and they are not tied to a profile of you. We use no third-party analytics or advertising trackers and set no tracking cookies.

Separately, to keep the service available we apply basic abuse prevention (rate limiting) to the endpoints that do server-side work. This briefly processes your IP address in memory to count recent requests; the IP is not written to our event logs and not stored.

Cookies

We use a single essential cookie: a signed, HttpOnly session cookie that secures the OAuth sign-in flow and temporarily holds your short-lived Drive access token. It is not used for tracking or advertising.

Data sharing

We do not sell or share your data. The only external party involved is Google — and only when you choose to save a file to your own Google Drive, at which point Google processes that upload under its own terms.

Security

All traffic is encrypted with HTTPS. We request the narrowest possible Google scope, validate uploads by content, process in memory, and run the service in a hardened, read-only container. See our Terms of Service for service terms.

Children

The tools are not directed to children under 13, and we do not knowingly collect data from them.

Changes to this policy

We may update this policy as the tools evolve. Material changes will be reflected by the “Last updated” date above.

Contact

Questions about privacy? Email hello@growthsignal.live.