Privacy Policy

Last updated: April 2026  ·  Effective immediately

1. Who We Are

TrickleUp is a digital marketing agency operating at trickleup.co.uk. We provide SEO, paid advertising, and social media management services to clients. The IRS Portal is our internal dashboard used to consolidate and report on campaign performance data across all departments.

2. Information We Collect

We collect the following types of information from authorised users of the IRS Portal:

• Account Information: Full name, email address, department, and role within TrickleUp
• Authentication Data: Encrypted passwords and session tokens
• Google OAuth Tokens: Refresh tokens obtained via OAuth 2.0 for accessing Google Ads data on behalf of the team member
• API Performance Data: Campaign metrics fetched from Google Ads, Google Analytics, Semrush, and social media platforms for client reporting purposes
• Usage Logs: System action logs for audit and security purposes

3. How We Use Your Information

• To authenticate and authorise internal team members
• To fetch and display client campaign performance data from connected platforms
• To generate internal performance reports
• To maintain audit logs of system actions for accountability
• To ensure the security and integrity of the platform

We do not use your personal information for marketing, advertising, or any external purposes.

4. Google Ads API Data

The IRS Portal uses the Google Ads API to retrieve performance metrics (impressions, clicks, spend, conversions, ROAS) from Google Ads accounts that our team manages on behalf of clients. Access is obtained through OAuth 2.0 and is strictly read-only. We do not create, modify, or delete any Google Ads campaigns, budgets, or settings through this tool.

Google Ads data retrieved through the API is:

• Stored in our private database solely for internal reporting
• Never shared with third parties
• Accessible only to authenticated internal team members
• Used only for performance monitoring and client reporting within TrickleUp

5. Data Sharing

We do not sell, rent, or share personal information or API data with any third parties. All data is stored on our private server hosted at trickleup.co and is accessible only to authorised TrickleUp team members.

6. Data Retention

User account data is retained for as long as the team member is employed at TrickleUp. API performance data is retained for up to 12 months for historical reporting purposes. Users may request deletion of their account and associated data by contacting the system administrator.

7. Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encrypted passwords using bcrypt hashing
• HTTPS encryption for all data in transit
• Session encryption and CSRF protection
• Role-based access control restricting data visibility by department
• OAuth tokens stored securely in an encrypted database

8. Your Rights

As an internal user, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Disconnect your Google account at any time via your profile settings

To exercise these rights, contact your system administrator.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated effective date. Continued use of the IRS Portal following any changes constitutes acceptance of the revised policy.

10. Contact

For any questions regarding this Privacy Policy, please contact the TrickleUp development team at trickleup.co.uk.