← Back to home

Privacy Policy

Last updated: 24 May 2026

1. Introduction

This Privacy Policy describes how Stky ("we", "us", or "our") collects, uses, and protects information when you use the Web Agency CRM platform (the "Service"). The Service is operated for internal agency use and for authorised staff and client portal users.

2. Who this applies to

This policy applies to:

  • Agency staff who sign in to the staff dashboard
  • Client portal users who access their account via magic-link sign-in
  • Visitors to public pages of this application

3. Information we collect

Depending on how you use the Service, we may process:

  • Account information — name, email address, and authentication data for staff and portal users
  • CRM and business data — client records, leads, pipeline information, tasks, notes, and related metadata entered by authorised users
  • Integration data — identifiers and configuration for connected services (for example Google Ads customer IDs, analytics property IDs, and API connection settings)
  • Google Ads data — when Google Ads is connected, we access Google Ads account information and reporting data via the Google Ads API on behalf of authorised agency users. This may include account names, campaign performance metrics, keywords, and related advertising data
  • Technical data — server logs, IP addresses, request timestamps, and error diagnostics used for security and reliability

4. How we use information

We use collected information to:

  • Provide, operate, and maintain the CRM and client portal
  • Authenticate users and enforce access controls
  • Display Google Ads performance and related reporting inside the dashboard
  • Support agency workflows such as lead management, client records, and automations
  • Monitor security, prevent abuse, and troubleshoot errors
  • Comply with legal obligations

We do not sell personal information. We do not use Google user data for advertising, retargeting, or building user profiles unrelated to providing the Service.

5. Google API Services and Limited Use

The Service's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, Google user data accessed via the Service is:

  • Used only to provide agency CRM and reporting features you request
  • Not transferred to third parties except as needed to operate the Service (for example hosting or infrastructure providers), or as required by law
  • Not used for serving ads
  • Not used to train generalised AI or machine-learning models unrelated to the Service

Human access to Google user data is limited to authorised agency personnel who need it to support client accounts and platform operations.

6. Sharing of information

We may share information with:

  • Infrastructure providers — such as hosting, database, and email delivery services that process data on our behalf under contractual safeguards
  • Google — when you connect Google Ads or other Google services, data is exchanged according to Google's terms and your authorisation
  • Legal and safety — when required by law or to protect rights, security, and integrity of the Service

We do not share Google user data with third parties for their own marketing purposes.

7. Data retention

We retain information for as long as needed to provide the Service, meet contractual obligations with clients, resolve disputes, and comply with legal requirements. Retention periods may vary by data type and business need. When data is no longer required, we delete or anonymise it where practicable.

8. Security

We use reasonable technical and organisational measures to protect information, including access controls, encrypted transport (HTTPS), and hashed storage for sensitive credentials such as API keys. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information, or to object to certain processing. Portal users and client contacts should contact their agency account manager. Staff users may contact the platform administrator.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of the Service after changes become effective constitutes acceptance of the updated policy where permitted by law.

11. Contact

For privacy-related questions about this Service, contact the platform administrator at rhyse@stkysites.com.