Privacy policy

01Who we are

AgencyGuard provides independent marketing review and reporting services to Australian businesses. In this policy, "we", "us" and "our" mean AgencyGuard. "You" means a visitor to this website, a questionnaire respondent or a member.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

02What we collect

We collect only what we need to deliver the service you have asked for.

• Identity and contact details — name, business name, email address, phone number and website.
• Questionnaire responses — your answers to the free AgencyGuard Check and the resulting score.
• Membership and onboarding information — your marketing provider, services purchased, approximate fees and advertising spend, business goals, conversion actions and current concerns.
• Documents you upload — agency reports, proposals, contracts, screenshots, exported advertising data and similar material.
• Read-only account data — where you have explicitly granted read-only access to an advertising or analytics platform, the performance data available through that access.
• Billing information — held and processed by Stripe. We store a customer reference and subscription status; we never see or store your full card number.
• Technical and marketing data — IP address, browser and device information, pages viewed, referrer, UTM parameters and advertising click identifiers.

03What we never collect

We do not ask for, want, or knowingly store passwords to your advertising, analytics, CRM or email accounts. There is no field anywhere in our product for one. If you send us a password, we will ask you to change it immediately and will delete the message.

Access to your platforms, where you choose to grant it, is read-only and granted through the platform’s own permission system, which you can revoke at any time without contacting us.

04How we use it

• To produce your Honest Marketing Report and respond to Priority Question Line submissions.
• To calculate and send your Agency Oversight Score.
• To create and administer your membership, including billing and support.
• To send transactional email — welcome messages, sign-in links, report notifications and billing alerts.
• To send marketing email about AgencyGuard, where you have provided your details and not opted out. Every marketing email includes an unsubscribe link.
• To measure which advertising campaigns produce enquiries and memberships, so we can spend our own marketing budget sensibly.
• To improve our review methodology in aggregate. We do not use one member’s confidential material as an example to another member without written permission.

05Who we share it with

We do not sell personal information. We do not disclose your information to your marketing agency, and we never contact your agency unless you have specifically asked us to.

• Stripe — payment processing and subscription billing.
• Google Cloud and Firebase — application hosting, authentication, database and file storage.
• Resend — transactional and marketing email delivery.
• Analytics providers — Google Analytics and Meta, in aggregated or pseudonymised form for advertising measurement.
• Professional advisers, or a regulator or court, where we are legally required to disclose.

06Overseas disclosure

Some of our service providers store or process data outside Australia, including in the United States and the European Union. We select providers that offer contractual protections consistent with the Australian Privacy Principles, but you should be aware that overseas recipients may be subject to laws that differ from Australian law.

Where practical, we configure services to store data in Australian regions.

07Security

Member documents and reports are stored in private, per-business storage with no public URLs. Downloads are served through short-lived signed links issued only after an access check, and every access is logged.

Access controls are enforced at the database level rather than only in the application interface. Staff accounts with access to member data require multi-factor authentication, and reviewer and administrator permissions are separated.

No system is perfectly secure. If a data breach occurs that is likely to result in serious harm, we will notify affected members and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

08How long we keep it

• Uploaded documents and reports remain available while your membership is active and for 30 days after cancellation, so you can download them.
• After that period, uploaded documents are deleted.
• Account, billing and transaction records are retained for seven years where required by Australian tax law.
• Questionnaire responses from non-members are retained for 24 months, then deleted.

09Cookies and tracking

We use cookies and similar technologies for essential site function, for remembering which advertising campaign brought you here, and for measuring conversions.

You can block or delete cookies in your browser. Essential cookies — including the one that keeps you signed in to your member portal — cannot be disabled without breaking the portal.

10Your rights

You can request access to the personal information we hold about you, ask us to correct it, or ask us to delete it. Email hello@agencyguard.com.au and we will respond within 30 days.

Deletion requests are actioned within 30 days. We will confirm in writing what was deleted and identify anything we are legally required to retain.

11Complaints

If you believe we have mishandled your personal information, contact us first at hello@agencyguard.com.au. We will investigate and respond within 30 days.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

12Changes to this policy

We may update this policy from time to time. Material changes affecting how we use member information will be notified by email at least 14 days before they take effect.