Privacy Policy

This Privacy Policy explains how Site Hub (“Site Hub,” “we,” “us”) collects, uses, stores, and protects information in connection with the Site Hub Dashboards platform at reports.yoursitehub.com and related services (the “Service”). Site Hub is a white-label marketing reporting platform used by agencies to build and share dashboards for their clients from connected data sources.

Information we collect

• Account information — name, email address, and password (stored only as a secure hash) for the users who sign in to manage the Service.
• Agency & client records — the agencies, clients, dashboards, metrics, and settings you create.
• Connected data-source data — the marketing and analytics data you choose to bring in from connected sources (for example Google Ads, Google Analytics 4, Meta, or Windsor.ai), such as campaign, ad set, ad, spend, impressions, clicks, conversions, and similar reporting metrics.
• Credentials for connected sources — OAuth tokens and API keys you authorize, which are encrypted at rest and used only to retrieve the data you requested.
• Usage & audit logs — records of significant actions (such as logins, dashboard changes, and data-source refreshes) and basic technical logs for security and reliability.

Google user data

When you connect a Google account (for example, to use the Google Ads or Google Analytics integration), you authorize Site Hub, via Google’s OAuth consent screen, to access specific Google API data on your behalf — namely your advertising and analytics reporting data through the requested scope (e.g. the Google Ads API scope https://www.googleapis.com/auth/adwords). We use this access solely to retrieve the reporting metrics needed to build and display the dashboards and reports you configure.

Site Hub’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data for advertising, we do not sell it, and we do not transfer it to others except as necessary to provide the Service you requested, to comply with law, or as part of a merger or acquisition with equivalent protections. We do not allow humans to read this data except with your explicit consent, to comply with law, for security purposes, or where the data has been aggregated and anonymized.

How we use information

• To authenticate users and operate the Service.
• To retrieve, aggregate, and display the metrics in the dashboards and reports you build.
• To generate report drafts when you use the optional AI report builder (see “Third parties” below).
• To secure the Service, prevent abuse, and diagnose problems.

Third parties & sub-processors

We share data only with service providers that help us run the Service, under obligations to protect it:

• Hosting/infrastructure — our servers and database, which store your data.
• Data connectors — the platforms you connect (e.g. Google, Meta, Windsor.ai) return the reporting data you request.
• AI provider (Anthropic) — if you use the AI report builder, the natural-language prompt you enter and a description of the client’s available metric/dimension names are sent to Anthropic to generate a dashboard layout. Your underlying connected-source records are not sent for this purpose.

We do not sell personal information.

Data storage, retention & security

• Connected-source credentials (OAuth tokens, API keys) are encrypted at rest (AES-256-GCM). Passwords are stored only as salted hashes.
• Retrieved reporting data is cached to make dashboards fast and refreshed on a schedule.
• Access is isolated per agency (tenant isolation at the application layer and enforced by database row-level security).
• We retain data for as long as your account is active or as needed to provide the Service, then delete or anonymize it.

Your choices & deleting data

• Disconnect a source — remove a data source in the app to stop future access and delete its stored credentials and cached data.
• Revoke Google access — you can revoke Site Hub’s access to your Google account at any time at myaccount.google.com/permissions.
• Delete your account/data — contact us (below) to request deletion of your account and associated data.

Cookies

We use a strictly necessary session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

Children

The Service is intended for businesses and is not directed to children under 16.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated “Last updated” date and, where appropriate, additional notice.

Contact

Questions or requests about this policy or your data: sean@yoursitehub.com.