Last updated: October 2, 2026
Northic is a marketing analysis and management platform for businesses. This policy explains what data we collect, why we collect it, and what we do with it. It covers both our free marketing audit and our paid subscription services.
Northic is operated by Hamdaam LLC, a limited liability company registered in the State of New York, United States. Where this policy says "we" or "us," it means Hamdaam LLC operating the Northic service.
Google Search Console. If you connect it, we read the search queries that showed your site, the pages Google showed, your average position, and your impressions and clicks. We read only — we never submit, change or remove anything in your Search Console account. You can disconnect at any time from your Settings page, and revoke our access directly at myaccount.google.com/permissions.
If your page is hosted by us. A page on northicgrowth.com sits on our domain, so you cannot connect Search Console to it yourself — Google verifies ownership of a domain, and that domain is ours. Instead we read Google's search figures for your page out of our own Search Console account, filtered to your page and no one else's. We see the same things as above: the searches that showed your page, its position, impressions and clicks. We never see anything about a page that is not yours, and no other customer sees anything about yours. This needs no account or permission from you, and it stops when your page comes down. If you later move to your own domain, this stops and you connect your own Search Console instead.
Google Business Profile. Without any permission from you we read your listing as any customer would see it — your name, address, phone, hours, category, rating, and the handful of reviews Google shows the public. Which listing is yours is decided one of two ways: you pick it, or Google's public listing carries the phone number or the website you gave us, in which case we connect it and tell you by email. Either way it is one press on Settings to disconnect it.
If you grant the permission, we read the same listing through your own account instead, which shows us more: your full review history rather than a handful, and the replies you have already posted to those reviews. We read it on a daily schedule, so that a new review reaches you the day it arrives; that reading is the only thing that happens without a press from you. We also write to the listing on your behalf — replies to reviews, posts, and changes to fields such as your description, phone or website — and every one of those is something you have read and approved first, one at a time. We never post or change anything you have not approved.
Google API Services. Northic's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to provide the features you have turned on, never for advertising, and never to train AI models.
Photographs and a logo you upload. Images you add to a page we host, and a logo if you give us one, are stored on our infrastructure and served publicly as part of that page. Please don't upload images containing personal information about other people without their agreement. Remove a logo or a photo from your dashboard and it comes off the page at the next rebuild.
Proving your site is yours, to Google. Google only shows search figures for a site whose owner has been proved. If your site prints what Northic feeds it, we include a verification tag from Google in that feed and ask Google to check it — which lets us read your search figures for you without you setting up Search Console. We read those figures and nothing else; we can't change your site or your Google account. The tag is visible in your own page source, and if you stop printing our feed the verification lapses, which is how you undo it. You can also connect your own Search Console at any time, and yours takes precedence over ours.
Sites we feed. If your website was built for you and connected to Northic, it fetches two things from us about once an hour: the markup that search engines and AI assistants read, and a document of your own facts — your hours, phone, address, rating, the reviews chosen to show, and your questions and answers. Anyone with the address of those two can read them; they contain nothing that isn't already on your public page. We also read your site's front page and its sitemap once a week, to check the markup is still there and to see which pages exist. We store the page addresses, not the pages.
The one-line version. If your platform only lets you add a script, the line we give you fetches the same markup from us as the page loads and puts it on the page. It reads from us; it sends us nothing about you or your visitors. That markup now includes the Concierge script, described below, which stays inert until you switch the Concierge on. Remove the line and it all stops.
The Northic WordPress plugin. If you install it, your site fetches a small piece of markup from us about once an hour and prints it on your pages. The plugin sends us nothing — not your visitors, not your pages, not your site's settings. The markup it prints includes the Concierge script, described below; that script does nothing until you switch the Concierge on, and once you do it is the Concierge itself that talks to us, from your visitor's browser. Deactivate the plugin and the markup goes with it.
Access you invite us to. If you invite us to your Wix, Squarespace, GoDaddy or Weebly site so we can add that markup for you, we add it, check it's there, and touch nothing else. We ask you to remove the access as soon as the check passes, and we keep a record of the request until it's done and nothing after.
Reading your current website. If you choose to keep your domain and have us rebuild what's behind it, we read the front page of your existing site once — its text, its phone number and up to six photographs — to draft your answers and photo set for you to check. We store what we drafted and the photographs; we don't store the page itself. If you ask us to call you about the switch, we keep the number and time you gave us until the call is done.
Reading and posting to your Google listing on your behalf. If you choose to let Northic manage your Google Business Profile, you sign in with Google and grant that permission yourself. We use it in two ways, and the difference between them matters.
Reading happens on a daily schedule without you: once a day we read your listing and your reviews, so a new review reaches you the day it arrives rather than the next time you happen to look. Writing happens only when you press a button — to post a reply you approved, a post you approved, or a change to your listing you approved — and never on a schedule or on our own initiative. We keep the sign-in token encrypted, and you can withdraw the permission at any time from Settings or from your Google account.
Telling search engines about your page. When a page we host for you is published or rebuilt, we send its web address — nothing else — to Bing and the search engines that share its notification system, and we ask Google through our own Search Console account whether it has the page yet. That is the address of a page that is already public; no information about you or your customers is sent.
Reviews you choose to feature. If you mark a public review to show on your page, we display its text, its star rating and the reviewer's first name only, as it appears on the platform it came from. Unmark it and it comes off at the next rebuild.
Referral partners. If you hold a referral code, we keep your name, the email you gave us, the code, and a record of which customers signed up with it and what they paid, so we can work out and pay what you have earned. We never show a partner the details of a customer's account — only that a customer exists and what the commission is.
We use an AI model to draft review replies, social posts and page copy from what you have told us about your business, and from your public reviews and listing. Those inputs are sent to the model to produce the draft. The model is run by our infrastructure provider and your data is not used to train it. Everything it produces is a draft for you to read, edit and approve.
A website address is optional. If you don't give one, we look your business up by name and town and the audit runs on what is publicly published about you — your Google listing, your reviews, and what search engines and AI assistants can find. We keep that reading with the record of your audit in the same way as any other.
When you do submit a website address for an audit, we request that page the way a visitor's browser would, under our reader's own name, NorthicBot (what it reads, and how to keep it out), and analyse the publicly available code to check for things like security certificates, page titles, mobile compatibility, analytics tags, and links to social profiles. We only look at pages that are publicly accessible. We do not attempt to access private, password-protected, or restricted areas of any site.
Sometimes we run the same public check on a business before it has asked, and email the business once at an address it has made public itself — on its Google listing, its own website or a directory. We never buy lists. To find the address we read at most two public pages of the business's site (its home page and its contact page), and before writing we ask public DNS whether the address's domain accepts email at all, so we don't write to a mailbox that can't receive it. We keep the business's name, website, that address and the report; what Google told us about the business (its name and rating) is kept for no more than 30 days. There is no follow-up email: we write once. A person answers any reply, and the unsubscribe link in the email stops all of it. If the business opens its report and presses the button to have the full report emailed, it is sent to that same address, shown on the page beside the button; from then on it is treated like any address given to us for a report, described under "Contact details" above. An address that unsubscribes, bounces or reports us as spam goes on a stop list that holds only the address, so it is never written to again, including after a deletion request.
Google Search Console, Google Business Profile, and your Facebook Page. Those are the only accounts Northic connects to. For pages we host, we also read Google's search figures for your page from our own Search Console account, because the domain is ours rather than yours — that is described above. When we add another platform, this policy will name it, and say what we read from it and why, before the connection is offered. You are always asked for permission before any account is connected, and you can disconnect at any time.
Your Facebook Page. If you connect a Page, we read the details it already shows the public — its name, category, description, phone number, address, website link, opening hours, follower count and whether it is published — and the date of its most recent post. We use this for one purpose: to compare your Page against your Google listing and show you where they disagree, and to tell you how long it has been since anything was posted.
We ask Facebook for two read-only permissions, pages_show_list and pages_read_engagement. We have not asked for permission to post, to reply, or to send messages, so we cannot do those things — not as a setting, but because the access was never granted to us. We cannot see your personal profile, your friends, your private messages, or any Page you did not choose. Disconnecting revokes our access with Facebook and deletes what we stored.
The Concierge script on your website. Wherever Northic’s code is on a site we don’t host — code you pasted in, the one-line script, the WordPress plugin, or a feed a builder reads — every page carries the Concierge script whether or not you have switched the Concierge on, so that switching it on works straight away without anyone having to change your site again. When a page loads, the visitor’s browser asks northicgrowth.com for that script, which means we see their IP address and browser details on those requests, as any website receives from anyone who loads it. While the Concierge is switched off the script does nothing: it returns an empty file, draws nothing, sets no cookie, and we keep no record of who asked for it. On a page we host ourselves the script is not there at all until you switch the Concierge on, because we rebuild that page the moment you do.
The creator rate calculator. The tool at /rates works without an account and stores nothing at all. The figures you type stay in the web address so you can share or bookmark the result; we do not record them, do not keep a list of who used it, and there is no sign-up, email wall or tracking on that page. It makes no request to any outside service.
When you use Northic we receive your IP address and basic browser details, as any website does. We use the IP address only to limit how often the free audit and the sign-in form can be used from one place, and we store it as a one-way hash, not as the address itself. Signing in sets a session cookie so you stay signed in; it holds a random token and nothing about you. We do not use advertising or tracking cookies, and we do not run third-party analytics. When you run the free audit, we note where it was started from — the page or site that linked to it (for example one of our guides, or a Google search) — and keep that label with the audit, so we know which of our pages are useful. It is not a cookie and it identifies nobody.
Where a feature involves customer-facing content — for example a review left on your Google listing — that content may include the name and profile picture of the person who wrote it, as shown publicly on that platform. We process this on your behalf so you can read and respond to it, and we hold it for no more than 30 days at a time (see below). We do not build profiles of these individuals, sell their data, or use it for any purpose other than delivering the feature you have enabled.
Checking your website. If you use the code we generate on your own site, we fetch your public homepage to confirm the code is actually there. We read the page the same way any search engine would, store only whether each piece was found, and never sign in to your site or ask for a password.
When you ask us something. Northic has a help button on every screen. What you type there is kept so we can answer you, so we can stop one person asking forty questions a minute from running up a bill, and so we can see what the product isn't explaining well. We keep the question, our answer and which page you asked from, for 90 days. It is never used for marketing and never shown to another customer.
When something goes wrong. If a page fails, or you press the “something wrong” button, we record what happened so we can fix it: the page you were on, which business you were looking at, the settings that decide what that page shows, any error message, and anything you chose to type. We do not capture your keystrokes, your passwords, or anything you have not submitted.
These records exist to fix faults and nothing else — never for marketing, never for profiling, and never sold. They may be shared with the people who maintain Northic, including outside technical help, purely to diagnose the fault. We keep them for 90 days and then delete them; if a fault is still open we keep the record until it is fixed. When we fix something you reported, we write to tell you.
If a business uses the Concierge, people visiting their website can ask questions in a chat window. Those people are not our customers — they are the business's. We hold what they send purely so that the business can answer them, and for nothing else.
What we keep. The messages in the conversation, and a phone number or email address if the visitor chooses to leave one so the business can get back to them. Nothing is required: a visitor who leaves no contact details still gets answered while they're on the page.
What we never do with it. We do not market to these people, ever. Their details are never added to any list, never used in any report or summary we send a business, never counted into anything shown to any other business, and never sold or shared with anyone. The information exists to answer one question for one person, and then it goes.
How long. Conversations and any contact details in them are deleted 30 days after the last message, automatically. A visitor or a business can ask us to delete a conversation sooner by emailing hello@northicgrowth.com.
What the Concierge is allowed to say. It answers only from what the business has written and what their Google listing already publishes. It does not invent answers; when it cannot answer, it says so and passes the question to a person.
Anything Northic publishes or changes under your business's name — a reply to a review, a post on your listing, a change to a listing field such as your description, phone or website, a page — you approved first, item by item. There are two exceptions, each only if you switch it on. On the Reviews tab you can ask Northic to post its replies to 4 and 5 star reviews for you; replies to 1, 2 and 3 star reviews, and to any review that raises a complaint whatever its stars, always wait for your approval, and every reply posted this way is listed on the Reviews tab, marked as posted for you, and can be changed. On the Site tab you can ask Northic to put the search-result wording it writes (the title and description of the page Northic hosts for you) onto that page without a press; every change made this way is listed on the Site tab and can be put back with one press, and additions that say what your business does (a service, a question and answer) always wait for your approval. Both switches are off until you turn them on and can be turned off at any time. Everything else Northic does (reading your listing and your reviews, tracking search positions, drafting, sending you the weekly summary) runs on its own and publishes nothing.
Everything Northic sends you is about your own account. We do not send marketing, we do not sell or rent your address, and there is no list you were added to without asking.
You can change the address we write to, or ask us to stop writing entirely, from your settings or by emailing us. Stopping the account emails means Northic can still do the work but cannot tell you about it, so we will say so before switching them off.
We share data only where it is necessary to run the service. Our providers are:
Beyond those:
You can ask us to show you the data we hold about you, correct it, delete it, or send you a copy. You can disconnect any third-party account at any time from your account settings, or by revoking access directly with Google. If your account holds more than one business, you can remove any one of them yourself from its Settings page: that deletes everything we hold for that business — its reviews and the replies sent for it, its page, its photographs and its connections — revokes its Google and Facebook access with those companies rather than only forgetting it, stops it being charged for, and leaves your other businesses untouched. It happens immediately and we keep no copy. Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA. To make any request, email us at the address below and we will respond within 30 days.
Access credentials for connected accounts are encrypted before they are stored, with a key held outside the database, and are decrypted only by the systems that need them to run the features you have enabled. We use sign-in links rather than passwords, so there is no password of yours to be stolen from us. No system is perfectly secure, but we take reasonable measures to protect your information and will notify you promptly if a breach affects your data.
We are based in the United States and our infrastructure providers may process data in other countries. Where data is transferred internationally, we rely on appropriate safeguards as required by applicable law.
Northic is a business tool and is not directed at anyone under 18. We do not knowingly collect information from children.
If we make a material change, we will update the date at the top of this page and, where the change significantly affects you, notify you by email.