Privacy notice
Last updated 2026-10-21
This notice explains what data Green Flag Digital holds about the businesses we work with and the people at them, in GFD ONE and its client portal: what we hold, why, who sees it, how long we keep it and who helps us process it. It is written for business clients. See also the client portal terms.
What we hold
- Account details for people with a login: name, work email, role, and when you signed in.
- Your business data that we need for the work: websites and domains, goals and plans, reports, media coverage and pitches, search and backlink data, and notes from our meetings and calls.
- Analytics you connect, such as Google Analytics and Search Console, only for the properties you give us access to.
- Relationship records: business contact details, proposals, invoice status and the history of our work together.
- Feedback you send from the portal, with the page you sent it from.
- Technical data: short-lived logs and error reports. Error reports have cookies, sign-in headers, form contents and email addresses removed before they leave our app.
We don't ask for payment card details, and we don't need sensitive personal data such as health information.
Why we hold it
- To do the work you hired us for and report on it.
- To run your account: sign-in, access control, support and billing records.
- To keep the portal secure and fix problems.
- To improve our service, using your feedback and aggregate patterns, never by selling your data.
Who sees it
The Green Flag Digital team members who work on your account, and our administrators. Access is limited by role: team members see only the clients they work on once roles are switched on. Other clients never see your data. The providers below process it for us under their own terms. We don't sell your data, and we don't use it to train AI models.
Providers that process data for us (subprocessors)
| Provider | What for | What data |
|---|---|---|
| Supabase | Database, sign-in and file uploads for GFD ONE. | Account details and everything stored in the portal. |
| Vercel | Hosts and serves the GFD ONE web app. | Requests to the app and short-lived technical logs (such as IP address and time). |
| Anthropic | AI model (Claude) behind summaries, triage and drafts. | The text we send in a request, such as notes, coverage and report data. |
| Sentry | Error alerts, so we can fix problems quickly. | Technical error reports. Cookies, sign-in headers, form contents and email addresses are removed before sending. |
| Ahrefs | Search and backlink data for reporting. | Your public website domains and search terms we track. |
| HubSpot | Our customer relationship records. | Business contact details and the history of our relationship. |
| Analytics, Search Console and Workspace (email and documents). | Analytics and search data you give us access to, and our email and documents with you. |
These providers may process data in the United States. We will update this list when it changes.
How long we keep it
- While you are a client, we keep what we need for the work.
- After our work together ends, we delete or anonymise your portal data within 90 days, unless you ask us to keep it longer or we must keep records (such as invoices) by law.
- Database backups roll off on our provider's schedule after that.
- Technical logs and error reports are kept for a short period, typically up to 90 days.
How we protect it
Data is encrypted in transit, access needs a login, database rules limit who can read what, and we keep secrets out of the code. We do not currently hold a formal security certification such as SOC 2 or ISO 27001.
Your choices
You can ask for a copy of your data, ask us to correct it, or ask us to delete it, subject to records we must keep by law. You can remove our access to your analytics at any time from your Google account.
Contact
Questions or requests about your data: email privacy@greenflagdigital.com, contact Green Flag Digital, or ask your account lead. We will update this page and its date if anything changes.
Green Flag Digital LLC, 10089 Willow Creek Rd #200, San Diego, California 92131, United States