Privacy Policy

Last updated: August 8, 2026

This policy is written to be accurate to how Armasite Intelligence actually works today, but it has not yet been reviewed by a lawyer. It will get a formal legal review before the platform takes on paying customers at meaningful scale. If anything here is unclear, contact us at the address below before connecting any account.

Who we are

Armasite Intelligence is a marketing intelligence dashboard built by Armasite Group for marketing agencies and their clients. It aggregates data from connected marketing platforms and public sources into a single reporting view.

What we collect

Account data: your name, email address, and role, used to sign you in and control what you can see (via Supabase Auth).
Connected platform tokens: when you connect Google Analytics, Google Search Console, YouTube, or (once approved) Meta, TikTok, or LinkedIn, we store an OAuth access/refresh token for that connection, encrypted at rest using Supabase Vault. We request read-only reporting access — never permission to post, message, or act on your behalf.
Aggregated metrics: the actual numbers those platforms report back — sessions, engagement, reach, mentions, and similar — stored against your organization’s own isolated data.
Public source data: news articles and media mentions of your brand, pulled from public search results (e.g. Google News), not from any account you connect.
Usage logs: a record of significant actions (who connected what, who ran a sync, who was invited) for audit and troubleshooting purposes.

How we use it

Solely to generate the dashboards, reports, and alerts your organization sees inside the platform. We do not sell your data, use it for advertising, or share it with any third party beyond the infrastructure providers listed below that are necessary to run the service.

Who else touches it

We rely on a small number of infrastructure providers, each only for their specific function: Supabase (database, authentication, and encrypted secret storage), our hosting provider (running the application), Cloudflare (DNS), and Resend (delivering account emails like sign-in links and invitations). None of them can see your data outside of processing it on our behalf.

How your data is isolated

Every organization’s data is walled off at the database level (row-level security), not just in the application code — one organization’s staff and clients cannot query another organization’s data even in principle. Connected-account tokens are encrypted separately from the data they produce.

How long we keep it

Data stays for as long as your account or a given connector remains active. If you disconnect a connector, its stored access token is deleted automatically and immediately. If you close your account, we delete your organization’s data within a reasonable period after your request, except where we’re required to retain records for legal or accounting reasons.

Requesting deletion

See our data deletion instructions for exactly how to disconnect a specific account or request full deletion of your data.

Contact

Questions about this policy or your data: privacy@armasiteintelligence.com.