Privacy policy
YourReporting produces white-label client reports for marketing agencies. This policy explains what data we hold, why, and your rights over it. It is written to be read, not skimmed past.
Who we are
YourReporting Ltd, registered in England and Wales at 128 City Road, London, England, EC1V 2NX, operates yourreporting.co.uk ("YourReporting", "we"). For account data we act as a data controller. For the data in our customers' clients' Google properties, we act as a data processor on the instructions of the agency that connected them — see our Data Processing Agreement.
Google user data — what we access and why
This section covers data obtained through Google APIs, and applies to the Google account our customers connect.
- What we request. Two read-only scopes: Google Search Console (
webmasters.readonly) and Google Analytics (analytics.readonly). We cannot change anything in your Google account, and we never see your password. - What we retrieve. The list of Search Console sites and Analytics properties your Google account can access (so you can map them to clients), and monthly aggregate performance data for the properties you map: search queries, clicks, impressions, positions, page-level sessions and the conversion events you select.
- Why. Solely to produce the monthly reports you configure. Each report's underlying figures are stored as a snapshot so that a past report can be reproduced exactly as sent.
- What we do NOT do with it. We do not sell it, share it with third parties beyond the sub-processors needed to run the service, use it for advertising, pool it across customers, or use it to benchmark one customer against another. Humans at YourReporting access it only with your permission (support), or where required for security or by law.
- AI/ML limitation. Google user data is not used to develop, improve or train generalised artificial intelligence or machine learning models. Aggregated report figures are sent to our language-model provider only to draft the plain-English commentary in your reports, under contractual terms that prohibit training on that data.
- Storage and security. Google access tokens are encrypted at rest and are never written to logs. Report data is stored on servers in the EU/UK (see sub-processors).
- Retention and deletion. Disconnect a Google account and we revoke our own access with Google and delete its tokens immediately. Close your account and all associated data — including report snapshots — is deleted within 30 days. You can also request earlier deletion at [email protected].
YourReporting's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Account data we hold as controller
- Account details: your name, email address, password (hashed), agency name — to operate your account.
- Billing: handled by Stripe; we store your Stripe customer reference and subscription state, never your card number.
- Client configuration: the client names, websites and recipient email addresses you enter — to address and send the reports you configure.
- Operational records: delivery logs and an audit trail of access to client data — for security and reliability.
Cookies and analytics
The marketing site sets no advertising or cross-site tracking cookies. Where we measure visits at all, we use privacy-respecting, cookieless analytics that store no personal data — which is why there is no cookie banner. The application sets only the strictly necessary session cookies required to keep you signed in.
Legal bases
We process account data to perform our contract with you; we process your clients' property data as your processor, on your documented instructions; we process security and audit records in our legitimate interest of running a safe service.
Your rights
UK GDPR gives you rights of access, rectification, erasure, restriction, portability and objection. Email [email protected] and we'll act within a month. If you're unhappy with our answer you can complain to the ICO (ico.org.uk).
Changes
If this policy changes materially we will email account owners before the change takes effect.