Privacy Policy
Last updated 3 November 2026
This policy explains how Prestige Social ("we", "us") handles information in Prestige Social Ads Reporting (the "App"), available at ads.prestigesocial.au. The App is an internal tool used by Prestige Social staff to report on marketing campaigns we manage for our clients. We handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Information we access
When an authorised Prestige Social team member connects an account, the App requests read-only access to:
- Google Ads (scope
https://www.googleapis.com/auth/adwords, plus your Google account email address): account names and IDs, and campaign, keyword and conversion performance metrics such as impressions, clicks, cost and conversions. - Meta (Facebook) Ads (
ads_read,business_management): ad account names and IDs, ad names, creative thumbnails and performance metrics such as impressions, reach, clicks and spend. - Instagram and Facebook Pages (
pages_show_list,pages_read_engagement,instagram_basic,instagram_manage_insights): the list of Pages and linked Instagram business accounts, account-level insights (reach, interactions, follower changes) and post-level data (captions, thumbnails, permalinks, like, comment, share and save counts).
The App does not access private messages, does not access personal information about individual people who see or interact with ads or posts (all metrics are aggregated by the platforms), and never creates, edits or deletes ads, posts or settings.
How we use it
- To show campaign performance dashboards to the Prestige Social team.
- To produce monthly performance reports that we share with the client who owns the account.
- To draft written commentary for those reports. Aggregated performance figures (not personal information) may be sent to our AI provider, Anthropic, solely to generate that commentary.
We do not sell this information, use it for advertising, or share it with anyone other than the client the data belongs to and the service providers below.
Google API Services – Limited Use
Prestige Social Ads Reporting's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the reporting features described above, is not transferred to third parties except as necessary to provide those features or as required by law, is not used for advertising, and is not read by humans except with consent, for security purposes, or as required by law.
Storage and security
Data is stored in a managed Postgres database (Neon) and the App is hosted on Vercel. Data is encrypted in transit (HTTPS) and at rest, access tokens are stored server-side only, and the App is restricted to authorised Prestige Social staff by password. Our service providers may store data outside Australia, including in the United States.
Retention and deletion
Cached performance data is refreshed regularly and expires automatically. Saved reports are kept for as long as we provide services to the client, then deleted on request or when no longer needed. You can revoke the App's access at any time from your Google account permissions or Facebook Business Integrations settings. When access is disconnected we delete the stored access tokens. To request deletion of any data associated with your account, email hello@prestigesocial.au and we will action it within 30 days.
Access, correction and complaints
You can ask to access or correct information we hold, or make a privacy complaint, by emailing hello@prestigesocial.au. If you are not satisfied with our response you may contact the Office of the Australian Information Commissioner (oaic.gov.au).
Changes
We may update this policy from time to time. The date at the top shows when it was last changed.
