granvl is not your lead database. Form submissions go from the visitor's browser straight to the destinations you chose, such as your CRM, webhook, or lead platform. granvl keeps what reporting needs and doesn't store your leads' contact details. The one exception is lead receipts, an encrypted copy you can turn on. This article explains how it all works. The formal terms are in the privacy policy and the Data Processing Agreement.
Where submissions go
Each form submission is delivered directly from the visitor's browser to the destinations set on the funnel. If you set more than one, the browser sends it to each of them.
granvl's servers record that a submission happened, but they don't keep a copy of the lead.
To choose destinations, see Set up forms and lead delivery.
What granvl stores, and what it doesn't
granvl stores | granvl doesn't store |
That a submission happened, for your analytics | Contact details: names, email addresses, phone numbers, street addresses, postal codes, and dates of birth |
The visitor's answers that aren't contact details, such as a quiz selection or a coverage amount. Kept for 180 days, then deleted. | Free text from open text boxes. granvl keeps only whether the box was filled in and how long the answer was. |
Salted, one-way digests of the email and phone number, used to spot duplicate leads | The email and phone number themselves |
Answers are checked before they're saved. Any answer that looks like an email address, a phone number, or a Canadian postal code is redacted, whatever the field is called.
If you turn on lead receipts, granvl also keeps an encrypted copy of each submission that its servers can't read. See below.
Analytics on published pages are first-party and aggregate: page views, clicks, form submits, and session flow. Visitor identifiers are salted hashes.
Ad-platform measurement
When a visitor submits a form and hasn't opted out, the page stores a SHA-256 hash of the email, phone, and name they entered in a 30-day first-party cookie. It forwards those hashes, with ad click IDs, to the ad platforms you've connected, so you can measure which ads led to the submission.
Every form shows visitors how to opt out.
Visitors in the EU, EEA, UK, Switzerland, and Quebec are asked to opt in first.
Browsers that send Global Privacy Control or Do Not Track are treated as opted out. Their conversions are reported to the platforms without any identity and flagged for restricted processing.
Tracking pixels you add to your own pages are covered by your own privacy disclosures. See Configure pixels and conversion APIs.
Lead receipts (off unless you turn them on)
Lead receipts keep a sealed copy of each lead so you can recover leads an integration failed to deliver.
With receipts on, the visitor's browser also encrypts a complete copy of the submission (all fields, including free text) under a granvl public key before sending it.
The encrypted copy is stored for 21 days in a write-only vault in a separate cloud account, in Canada or the United States as you choose, and is then deleted automatically.
Nothing on granvl's servers can read a receipt. The only key that opens one is held offline and used only when a workspace admin asks granvl to recover leads their own integration failed to deliver. Every request is recorded.
Receipts are off unless turned on for a workspace. An Owner or Admin can turn them off at any time in Settings > Lead receipts.
AI features and your data
Your own agent. When you work through your own agent over MCP, what granvl's tools return goes to that agent, under your own account with its provider.
Hosted AI features, such as AI funnel analysis, stay off until a workspace Owner or Admin accepts the AI terms. AI funnel analysis is based on aggregate data, and no lead details are sent. Your prompt and the workspace data needed to answer it go to third-party model providers (currently OpenAI, Anthropic, and Google, reached through OpenRouter, which may route to other providers), and research features may use Exa, Firecrawl, or Apify.
Generation and research paid with Tool credits send only the prompt or query you wrote and the reference files you selected to the provider serving the model you chose. These requests never include other workspaces' data, your leads' contact details, or your workspace context. An Owner or Admin can limit which regions models are served from. Generated files stay in your workspace until you delete them.
Your leads' contact details are never part of any AI request. granvl turns on zero-data-retention and no-training options wherever a provider offers them, and disables request logging where it can. These are best-effort measures on infrastructure granvl doesn't operate, not a guarantee. The current list of providers, with what each one touches, is at granvl.com/subprocessors.
How long data is kept
Data | How long |
Answers that aren't contact details | 180 days |
Lead receipts | 21 days after the submission, whatever the account status |
Ad text pulled from the ad library | At most 30 days. Your own notes about an ad stay until you delete them. |
Generated images and videos | Until you delete them |
Nightly encrypted backups | 30 days |
Synced Google Ads data after you disconnect | Deleted automatically if you don't reconnect within 7 days |
Everything else in your workspace | While your account is active |
Deletion requests and your rights
Delete your account or specific data. Use granvl.com/delete-my-data or email [email protected]. granvl verifies the request, acts on it within 30 days, and confirms when deletion is complete, except for records it's legally required to keep.
Disconnect an ad platform. Disconnecting Google Ads or Meta in Settings deletes the stored tokens immediately. Synced Meta data is deleted on request through the same form.
Other privacy requests, such as access, correction, or a copy of your data: email [email protected] or use the form. granvl responds within 30 days.
Your leads' data. For visitor data granvl processes on your behalf, you're the controller and granvl is the processor under the Data Processing Agreement. Apart from encrypted lead receipts, granvl doesn't hold your leads' contact details; they're in the destinations you chose.