Privacy Policy

DistrictDigital(“we”, “us”, “our”) operates the public website at districtdigital.co and the marketing analytics and management platform at app.districtdigital.co(together, the “Service”).

The platform at app.districtdigital.co is an internal tool used by our own staff to manage and report on the third-party advertising and analytics accounts that our clients have authorized us to access on their behalf. Clients do not log in to the platform; they grant our agency access directly within their own Google and Meta accounts (for example, by adding our agency as a Manager on their Google Business Profile). This policy applies to both the website and the platform and explains what data we handle and how.

We collect and process the following categories of data:

• Account information — your name, email address, and authentication credentials managed through our authentication provider.
• Client platform data— using the access our clients have granted our agency account, we read data from Google Analytics 4, Google Search Console, Google Ads, Google Business Profile, and (where enabled) Meta (Facebook/Instagram) Ads and Pages, strictly to display analytics, generate reports, and — where the client has authorized it — manage advertising campaigns and respond to Google Business Profile reviews on the client's behalf.
• CRM data — contact and deal records that you or your agency enter into or import to the Service.
• Usage and diagnostic data — limited technical logs and error reports used to keep the Service reliable and secure.

• Display dashboards, charts, and key performance metrics.
• Generate and deliver performance reports and email summaries.
• Where explicitly enabled, optimize and manage advertising campaigns.
• Where the client has authorized it, read and respond to Google Business Profile reviews; review replies are prepared and approved by our staff before they are published.
• Maintain, secure, and improve the Service.

We do not sell your data, and we do not use it for advertising or any purpose unrelated to providing the Service to you.

The Service's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only access Google user data to provide and improve user-facing features of the Service.
• We do not transfer or sell Google user data to third parties for advertising, resale, or other purposes.
• We do not use Google user data for serving advertisements.
• We do not allow humans to read Google user data unless we have your consent for specific data, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or our use is limited to internal operations and the data has been aggregated and anonymized.

Data is stored in managed cloud infrastructure with database-level access controls, restricted to authorized agency staff and limited to each client's own data. Access credentials for connected platforms are held securely server-side and are never exposed to end users or used in client-side code. Data is encrypted in transit. Time-series performance metrics are retained for a rolling window of approximately 95 days; client, CRM, and report records are retained until deletion is requested or the client engagement ends.

We rely on the following providers to operate the Service: a database and authentication provider, an application hosting provider, a transactional email provider, an error-monitoring provider, and the Google and Meta platform APIs. Each processes data only as needed to provide their service to us.

You may request access to, correction of, or deletion of your data at any time. Because access is granted from within your own accounts, you can revoke our agency's access directly at any time — for example, by removing our agency as a Manager on your Google Business Profile, or via your Google Account permissions. To make a request, contact us at info@districtdigital.co.

We use strictly necessary cookies to keep you signed in and maintain your session. We do not use advertising or cross-site tracking cookies.

The Service is intended for business use and is not directed to individuals under 18.

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

Questions about this policy? Email info@districtdigital.co.