Privacy policy
Summary for evaluation. Have counsel review before production use.
What we collect
Account details (name, email), the website analytics and SEO data you connect, activity logs needed for security and auditing, and contact requests you submit.
How data is used
Only to provide reporting to the agency and its authorised client users. We do not sell data. Third-party data sources are accessed with read-only, least-privilege permissions.
AI processing
Metric summaries are sent to AI providers only when your organisation’s data-governance settings allow it. Self-hosted models can be used to keep data in your infrastructure.
Security
Credentials are encrypted at rest (AES-256-GCM); all traffic is encrypted in transit; access is role-based and every change is audit-logged.
Retention
Raw provider payloads are kept for a limited period; normalised metrics are retained per your subscription plan and then aggregated or deleted.
Your rights
You can export your personal data or delete your account from Account settings. Agencies can permanently delete a website and all derived data. Contact privacy@sandlerdigital.com for any request (GDPR/CCPA).