Data security and access.

How we handle, restrict and delete your SaaS data. We treat your data like it is regulated even on the days it is not. No dark patterns. No surprises.

How we handle your data and security.

Access is least-privilege. Only the operators staffed on your account can see your accounts and access is named, logged and pulled the day an engagement ends. We do not keep a standing pool of people with the keys to everything.

Where your data lives

We work inside your tools wherever we can, your GA4, your CRM, your ad accounts, so the data stays in your house. When we do use our own processors for analytics or project work, we name them in our privacy notice and cookie policy. We do not pipe your data into random tools and we do not train public AI models on it.

What we will never do with your data.

• Sell or share your data. Ever. It is not our business model.
• Publish your numbers or name without written permission. That is why our case studies are anonymised unless a client opts in.
• Hold your data after you leave. We delete or return it on request when the engagement ends.

NDAs and regulation

Want a mutual NDA before the first call? Tick the box on the contact form and we send ours. We align our handling to GDPR and CCPA principles because most of our clients sell into the US, UK and EU and we would rather hold one high bar than juggle several low ones.

Questions about data security.