Privacy Policy

Last updated: 8 October 2026

Gromad ("we", "us") is a restaurant growth and food marketing agency based in Dubai, UAE, serving the UAE, KSA, the wider GCC and Europe. This policy explains what personal data we collect through gromad.io, our free tools and our services, how we use it, and the choices you have.

Contact for privacy questions

Email: hello@gromad.io

Phone / WhatsApp: +971 58 654 5105

Dubai, United Arab Emirates

1. What we collect

Details you give us

Enquiry and audit forms: your name, restaurant or company name, phone or WhatsApp number, email and the approximate size of your business.
Downloads (for example our case studies): name, email, phone, and optionally your brand and location, plus whether you agree to receive marketing from us.
Free tools: the business figures you enter or upload (for example delivery app invoices, sales, discounts, food cost and marketing budget) and the contact details we ask for before showing results.
Careers form: your name, email, phone, LinkedIn or portfolio links, CV and anything else you choose to tell us.
WhatsApp, email and calls: the messages and details you share when you contact us.

Public Instagram data (social tools)

Some of our free social tools let you enter an Instagram username. When you do, we use Meta's official Instagram API to look up that account's public business or creator profile information, such as follower count, number of posts, bio, website link, and recent posts with their likes, comments, views, post type and date. We only do this for the account you ask us to look up.

We do not ask you to log in with Instagram or Facebook, and we cannot see private accounts, personal accounts, direct messages, passwords or anything that is not already public on a business or creator profile.

Client data

When a restaurant hires us, we may access its delivery platform partner portals, POS and sales data to provide our services. That data is handled under our agreement with the client, and the client stays the owner of its accounts and data.

Technical data

Like most websites, our hosting provider automatically processes basic technical information such as IP address, browser type and pages requested, to deliver the site securely and protect it from abuse.

2. How we use it

To reply to your enquiry, run your free audit and send what you asked for.
To calculate and show the results of our free tools, including your score or report.
To provide and improve our services to clients.
To follow up about Gromad's services, and to send marketing only where you agreed to it. You can opt out at any time.
To review job applications.
To keep our website and tools secure and working properly.

We do not sell personal data, and we do not use data from Meta's platforms for advertising targeting, profiling individuals, or any purpose other than producing the tool results you requested.

3. Who we share it with

We only share data with service providers that help us run Gromad, such as website hosting (Cloudflare), form and spreadsheet storage (Google Workspace), and messaging (WhatsApp). They process data on our behalf. We may also disclose data where the law requires it.

4. How long we keep it

Enquiries and leads: for as long as needed to respond and follow up, and no longer than 24 months without further contact.
Instagram lookup results: only as long as needed to produce your result, and no longer than 30 days.
Job applications: up to 12 months, or until you ask us to delete them.
Client data: as set out in our client agreement.

5. Your choices and rights

Depending on where you live, including under the UAE and Saudi personal data protection laws, you may have the right to access, correct or delete your personal data, to object to or limit how we use it, and to withdraw consent to marketing. To use any of these rights, contact us at hello@gromad.io.

6. How to delete your data

To ask us to delete your data, including any data from an Instagram account lookup:

1. Email hello@gromad.io with the subject "Delete my data".

2. Include the name, email or phone number you used, and the Instagram username if your request is about a social tool lookup.

3. We will confirm and delete the data within 30 days, unless the law requires us to keep part of it.

7. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted connections, restricted access and keeping access keys off the public website. No online service is completely secure, so please contact us if you think something is wrong.

8. Cookies

Our website uses only the cookies and browser storage needed for it to work, such as remembering a choice you made in a tool. If we add analytics or advertising cookies in future, we will update this policy and ask for consent where required.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.