Privacy policy

Updated 26 October 2026

This policy explains how Social Space Reports, operated by Social Space, accesses and handles information for website reporting.

Google data we access

With the Google account holder's permission, the app uses read-only access to Google Analytics and Search Console. It lists available Analytics properties and Search Console sites so the administrator can select the correct client properties.

For selected properties, it reads website visitor totals, counts of phone_click and email_click events, daily contact event totals, the Analytics reporting timezone, and Search Console clicks, impressions, click-through rate and average position. It compares reporting periods and prepares monthly reports. These permissions do not allow the app to change Analytics or Search Console settings.

Other information

The app stores client names, website addresses, source property identifiers, report recipient addresses and reporting preferences. It retrieves selected Netlify form submissions, which may contain a person's name, email address, phone number, requested service and message. It also uses an administrator account for dashboard authentication.

Storage and retention

Supabase stores administrator authentication data, client settings, monthly report summaries and delivery records. Report summaries contain aggregate statistics rather than individual form enquiry details. Saved summaries and settings remain until removed by Social Space; the app does not currently apply an automatic deletion schedule.

Form enquiry details are retrieved from Netlify when needed to generate previews, CSV exports or emails. The app does not save those details in its report history database. Netlify retains the original submissions under the site's own settings. Downloaded files and delivered emails remain with their recipients and service providers under their respective retention settings.

Use and sharing

Social Space uses this information to prepare and review website reports and provide services to its clients. Reports are available to the authorised administrator and, when email sending is enabled, the configured recipient. Customer enquiry details and an enquiry CSV are included in emails only when the administrator enables that option and confirms the recipient is authorised.

Netlify hosts the application and handles form submissions. Supabase provides authentication and database storage. Google provides Analytics and Search Console data. Resend processes report emails when configured. These providers process information needed to deliver their services, which may involve processing outside Australia.

Social Space Reports does not sell Google user data, use it for advertising, or use it to train general-purpose AI models. Its use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Access protection

The dashboard requires administrator sign-in. Server-side checks restrict access to the configured administrator. Provider credentials are configured as server environment variables rather than included in browser code. The app uses HTTPS connections to its providers. A signed-in browser holds a session token, so administrators should sign out on shared devices.

Disconnecting and deletion

The Google account holder can revoke access through Google Account connections. Revocation stops future Google data retrieval; it does not automatically delete saved report summaries or emails already delivered.

For access, correction, deletion or privacy questions, contact hello@socialspace.com.au. Social Space can remove stored client settings and report history on request, subject to any applicable record-keeping obligations. Removing a reporting connection does not delete source data held in Analytics, Search Console or Netlify.

Changes

Social Space may update this policy as the reporting service changes. The date above identifies the latest version.