← Back to SubAudit AI

Privacy Policy

Last updated: March 26, 2026

This privacy policy covers how SubAudit AI (the "Extension"), developed by RevGrow (revgrow.app), handles your data. We built this extension to help GoHighLevel professionals export and audit sub-account configurations. We take a minimal approach to data collection, and this document explains exactly what we do and don't collect.

What SubAudit AI Does

SubAudit AI is a Chrome extension that connects to GoHighLevel sub-accounts via OAuth and exports account configurations (workflows, funnels, forms, pipelines, and other asset types) into structured Excel, JSON, and optional AI-generated documentation.

Data We Collect and Store

Here is a complete list of what we handle:

• License key — Stored locally in Chrome's extension storage on your device. We validate this key against our server to confirm your license is active, but the key itself stays on your machine.
• GoHighLevel OAuth tokens — When you authorize the extension to access a GHL sub-account, OAuth access and refresh tokens are generated. These tokens are stored on our server in Supabase with encryption. We use them solely to make authorized API calls to GoHighLevel on your behalf.
• OpenAI API key — If you use the AI Analysis feature, you provide your own OpenAI API key. This key is stored locally in Chrome's extension storage and is never transmitted to our servers.

Data We Do Not Collect

• We do not collect personal data from your GHL contacts, leads, or customers.
• We do not collect browsing history, form inputs, or any data outside of GHL sub-account configurations.
• We do not run any analytics, tracking pixels, or telemetry in the extension.
• We do not sell, rent, or share any user data with third parties.

How the AI Analysis Feature Works

When you use AI Analysis, the extension sends anonymized asset configurations (workflow steps, funnel structures, etc.) directly to OpenAI's API using your own API key. This data goes straight from your browser to OpenAI. It does not pass through our servers. The data sent contains only structural configuration data and does not include contact information, personal data, or customer records.

OpenAI's handling of data sent via their API is governed by OpenAI's API data usage policies.

Chrome Extension Permissions

The extension requests the following Chrome permissions, each for a specific reason:

• activeTab — To detect when you're on a GHL sub-account page and read the current account context.
• storage — To save your license key, preferences, and OpenAI API key locally in Chrome.
• scripting — To interact with the GHL interface and extract account identifiers needed for API calls.
• downloads — To save exported Excel and JSON files to your computer.

Data Security

OAuth tokens stored on our server are kept in Supabase with encryption at rest. All communication between the extension and our server happens over HTTPS. Locally stored data (license key, OpenAI API key) is protected by Chrome's built-in extension storage security.

Data Retention and Deletion

OAuth tokens are retained on our server as long as your license is active. You can revoke access at any time by disconnecting the extension from your GHL account. If you want us to delete all data associated with your account, send us an email and we'll take care of it within 30 days.

GDPR Compliance

If you're based in the European Economic Area, you have the right to:

• Request access to the data we store about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data

To exercise any of these rights, contact us at the email below.

Third-Party Services

• GoHighLevel — We use GHL's OAuth API to read sub-account configurations. GHL's privacy policy governs their handling of your data.
• Supabase — We use Supabase to store OAuth tokens securely. Supabase acts as a data processor on our behalf.
• Stripe — Payment processing is handled by Stripe. We do not store your credit card information.
• OpenAI — If you use AI Analysis, data is sent to OpenAI's API using your own key. We have no control over OpenAI's data handling.

Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we'll notify users through the extension or via email. The "Last updated" date at the top of this page reflects the most recent revision.

Contact