Privacy policy
Last updated: 13 August 2026
Groclub Analytics ("the Service") is operated by Groclub Marketing ("we", "us"). The Service is a private reporting tool that reads social media performance data from accounts our clients own, with their permission, and presents it as dashboards. This policy explains exactly what we collect, why, how long we keep it, and how to have it deleted.
1. Who this policy covers
It applies to two groups:
- Clients — businesses who authorise us to read performance data from social accounts they own.
- Agency users — Groclub Marketing staff who sign in to view those dashboards.
2. What we collect
2.1 Social media performance data
When a client connects an account, we read the following through the platform's official API. Access is read-only.
- Account details: account or page name, username or handle, profile picture URL, follower or subscriber count.
- Post performance: for recent posts — the caption or title, publish date, link to the post, media type, and its likes or reactions, comments, shares, saves, reach, impressions and views.
- Access tokens issued by the platform, so the daily refresh can run without asking the client to sign in again.
We do notcollect private messages, comment contents, follower lists or contact details, advertising data, payment information, or any personal data about the people who follow or engage with our clients' accounts.
2.2 Account information
For people who sign in to the Service we store a name, an email address, and a password stored only as a salted cryptographic hash — never in readable form.
3. Why we use it
Solely to produce performance reporting for the client the data belongs to: dashboards, trend charts and post-level breakdowns. We do not use it for advertising, profiling, resale, or to train machine-learning models.
4. Google API Services — Limited Use disclosure
Groclub Analytics' use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including its Limited Use requirements.
We request the youtube.readonlyscope for a single purpose: to read a connected channel's subscriber count and public video statistics so they can be shown on that client's dashboard. We do not transfer this data to third parties, and no human reads it except the client and the Groclub Marketing staff reporting to them.
5. Meta Platforms data
Data read from Instagram and Facebook is used only as described above and in line with Meta's Platform Terms. Clients can revoke our access at any time from their Facebook settings under Business integrations, and may request deletion as set out in section 8.
6. How we store and protect it
- Data is held in an access-controlled PostgreSQL database, encrypted in transit and at rest by our hosting provider.
- Platform access tokens are stored server-side only and are never sent to a browser.
- Signing in is required for every dashboard. Client logins can only see their own client's data; there is no cross-client access.
- Sessions use signed, HTTP-only cookies and expire after 7 days.
7. Sharing
We do not sell or rent data, and we do not share it with advertisers. It is processed only by the infrastructure providers that run the Service on our behalf — our application host and our database host — and by the social platforms the data comes from. We disclose data otherwise only where legally required.
8. Retention and deletion
We keep performance data for as long as the account stays connected, and up to 400 days of daily history. Disconnecting an account removes its stored posts and metrics from the Service. Deleting a client removes that client's accounts, posts, metrics, history, logins and any invite links.
To request deletion, follow the instructions on our data deletion page or email data@groclub.marketing. We action requests within 30 days.
9. Your rights
Depending on where you live you may have the right to access, correct, export or delete your data, or to withdraw consent. Revoking the Service's access in your platform settings withdraws consent immediately. To exercise any other right, email us at the address below.
10. Children
The Service is a business tool and is not directed at children under 13, and we do not knowingly collect their data.
11. Changes
If we change this policy we will update the date at the top and, where the change is significant, notify connected clients by email.
12. Contact
Groclub Marketing — data@groclub.marketing