AI & Integrations Terms

Effective: September 23, 2026

These terms supplement the Terms of Service. They govern GrowingWhale's AI features, including the Claude MCP server, automations (n8n workflows) and third-party connectors. If there is a conflict, these terms control for those features.

Part A: AI features

A1. What they are

GrowingWhale uses third-party AI models, including Anthropic's Claude, for features such as:

• content and ad copy generation
• review replies
• chat assistants
• page assembly
• insights
• agentic actions

A2. You are the final reviewer

• AI output can be wrong, outdated, biased, offensive or infringing, and it can "hallucinate" facts.
• You must review and approve AI-generated content before publishing, sending or relying on it.
• You are solely responsible for published content, including ads and claims about your products, pricing, health, finance and legal matters.
• AI features do not provide legal, financial, medical, tax or other professional advice.

A3. Ownership of outputs

As between you and us, you own the outputs generated for you, to the extent permitted by law. Similar outputs may be generated for others, and we make no guarantee of uniqueness or copyright protection.

A4. No training on your data

We do not use your Member Data or prompts to train generalized AI models. We use AI providers under terms that prohibit them from training on customer inputs and outputs.

A5. Prohibited AI use

You must not use AI features to:

• generate unlawful, deceptive, defamatory or harassing content, or fake reviews or testimonials
• impersonate people
• make automated decisions with legal or similarly significant effects on individuals
• violate the usage policies of the underlying model provider, including Anthropic's Usage Policy

Part B: Claude MCP server (mcp.growingwhale.ai)

B1. What it does

Our MCP server lets you connect Claude (and other MCP-compatible AI clients) to your GrowingWhale workspace. The AI can then read data and take actions, such as creating pages, posts or CRM records, on your behalf.

B2. Authorization

• Access requires OAuth sign-in and your explicit consent to the listed scopes.
• Tokens are scoped to your workspace and can be revoked anytime in Settings → Connected Apps or in your AI client.

B3. You are responsible for AI-initiated actions

• Actions taken by an AI client through your MCP connection are treated as actions by you.
• Review what the AI proposes. Use confirmation prompts where your client offers them.
• Do not grant MCP access to AI clients or people you don't trust.
• We are not liable for actions an AI client takes through your authorized connection, including deletions, publications or messages sent. This does not apply where the loss is caused by our own gross negligence.

B4. Third-party AI clients

Claude apps and other AI clients are provided by their own companies, which store conversations under their own terms. We do not control them and are not responsible for their availability, security or data practices.

B5. Security

We apply rate limits, input validation and least-privilege tool design, and we monitor the MCP server for abuse. Despite this, prompt-injection and similar attacks on AI systems are an evolving risk. You should:

• avoid feeding untrusted content to agents with write access
• keep a human in the loop for high-impact actions

Part C: Automations (n8n workflows)

C1. How they run

Workflows may run on n8n infrastructure operated by us or our hosting providers. They may also run on your own n8n instance if you connect one.

C2. Your responsibility

• You design, enable or approve each workflow, including its triggers, recipients, data mappings and frequency.
• You are responsible for:
  • making sure automations comply with law. This includes consent for emails, SMS and WhatsApp (CAN-SPAM, TCPA, GDPR/DPDP), anti-spam rules and platform terms.
  • their results, including mistaken sends, duplicate records, data overwrites and API charges.
• Test workflows before enabling them on live data.

C3. No guarantee of execution

Automations depend on third-party APIs, webhooks, network conditions and quotas. We do not guarantee that any workflow will run on time, exactly once, or at all. We are not liable for missed, delayed, duplicated or failed runs, or for data loss caused by third-party failures.

C4. Self-hosted n8n

If you connect your own n8n instance, you are solely responsible for its hosting, security, updates, credentials and data.

C5. Limits

We may throttle, pause or disable workflows that:

• exceed plan limits
• create security risk
• break platform rules
• harm Service performance

Part D: Third-party connectors

D1. Connecting apps

You can connect third-party services (e.g. Google, Meta, Stripe, Zoho, HubSpot, Shopify, Slack, webhooks and custom APIs) per Member account. Each connection is authorized by the Member or user who owns that third-party account.

D2. Your authorization and representations

When you connect a service, you represent that:

• you own it or are authorized to connect it
• sharing data between it and GrowingWhale is permitted by that service's terms and by law

D3. What we do and don't control

• We access connected services only within the scopes you grant, and only to perform features you use.
• We do not control third-party services. They may change APIs, prices, permissions or policies, suspend your account, or experience outages and breaches. We are not responsible for these events or their consequences, including loss of features that depend on them.
• Features that depend on a third-party approval (e.g. Meta App Review, Google verification) may be limited or unavailable at any time.

D4. Credentials

• API keys, OAuth tokens and webhook secrets are encrypted at rest and isolated per Member.
• You must rotate keys if you suspect compromise, and tell us at hello@growingwhale.com.
• Do not paste credentials into free-text fields, prompts or content areas.

D5. Data flowing out

Once data is sent to a third-party service at your direction, it is governed by that service's terms. We are not responsible for how that service handles it.

Part E: Liability

The disclaimers, liability cap and indemnity in the Terms of Service (Sections 13–15) apply in full to AI features, the MCP server, automations and connectors.

Contact

Shopinzip Inc · 222 Highview Drive, Clifton, NJ 07013, USA · hello@growingwhale.com