Who we are
Frank Data (“Frank Data”, “we”, “us”) is a service that brings your website, search, ads and social numbers into one dashboard, and explains them in plain English. We are based in Ireland.
For the personal data described here, we are the data controller. You can reach us at hello@getfrankdata.com.
Some agencies offer Frank Data to their own clients under the agency’s name. In that case the agency decides which accounts are connected and who can see them, and is a controller of that data too. You can contact either the agency or us.
What we collect
Your account
- Your name and email address.
- Your password, which is stored only as a secure hash. If you sign in with Google, we receive your name, email address and profile picture from Google.
- Your two-step verification setting, if you use one.
Accounts you connect
When you connect an account, you sign in with that platform and approve read-only access. We then read performance numbers from it:
| Connection | What we read |
|---|---|
| Google Search Console | Searches, clicks, impressions and positions for your websites |
| Google Analytics | Visits, traffic sources, pages and conversions (such as enquiries) |
| Google Ads | Campaign spend, clicks and results |
| Google Business Profile | Calls, direction requests, website clicks and reviews |
| YouTube | Channel views and subscribers |
| Facebook, Instagram, Meta Ads | Page and profile reach, followers, post performance, ad spend and results |
| LinkedIn, TikTok | Followers, post or video reach and engagement |
| Shopify, WooCommerce | Order counts, sales totals and best-selling products. Never card details. |
We also keep the access tokens these platforms give us, so the numbers can update each night. Tokens are stored on our servers only, never in your browser.
These numbers are mostly totals about your business. Some of them, such as reviews or comment counts, can include other people’s names or words, and we handle those carefully as described here.
Website enquiry tracking (optional)
If you add our tracking script to your website, it records that an enquiry happened (a form sent, or a tap on a phone number, email address or WhatsApp link), along with the page, the time and where the visitor came from. It does not record what people typed into your forms. It is designed to work without cookies, and it does not store visitors’ full IP addresses.
How you use Frank Data
- Basic technical logs: sign-in times, errors, and browser type.
- Questions you ask Frank, so that he can answer them.
How we use it
- To run your dashboard: showing your numbers, updating them each night, and showing reports.
- To have Frank explain your numbers. When you ask Frank about a number, the relevant figures are sent to our AI provider to write the explanation (see “Who we share it with”).
- To keep your account secure, for example email confirmation, two-step verification and spotting misuse.
- To contact you about your account, such as sign-in emails, reconnect reminders and important service changes.
- To fix problems and improve Frank Data. Wherever we can, we use totals and anonymised information for this.
We do not sell your data, show you ads based on it, or use your connected data to build advertising profiles.
Our legal basis
- Contract: to provide the service you signed up for.
- Legitimate interests: to secure the service, prevent abuse and improve the product, in ways you would reasonably expect.
- Consent: for anything optional, such as marketing emails. You can withdraw consent at any time.
- Legal obligation: for example, keeping invoices for tax purposes once paid plans launch.
Google user data
Frank Data’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In practice, this means:
- We only use Google data to show and explain your numbers in your own dashboard, and to keep the service secure.
- We never use Google data for advertising, and we never sell it.
- We never transfer Google data to anyone else, except to run the features you use (for example, sending a figure to our AI provider when you ask Frank about it), for security, or where the law requires it.
- Nobody at Frank Data reads your Google data, unless you ask us to help with a specific problem, it is needed for security or to meet the law, or it has been made anonymous and combined with other data.
- We do not use Google data to train general AI models.
- Access is read-only. Frank Data cannot change your Search Console, Analytics, Ads, Business Profile or YouTube settings.
You can remove Frank Data’s access at any time from Frank Data (Settings › Connections) or from your Google account permissions.
International transfers
Our main database is in Ireland. Our web server is in the United Kingdom, which the EU recognises as giving adequate protection. Where data goes to the United States, we rely on the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework, so that it gets the same level of protection.
How long we keep it
- Connected account data: while the connection is active. If you disconnect an account, we delete its tokens straight away and its numbers within 30 days, unless you choose to keep the history.
- Your account: until you delete it. Everything is then deleted within 30 days, apart from what the law makes us keep, such as invoices.
- Logs: up to 90 days.
Deleting your data
You are always in control of your data:
- Disconnect one account: go to Settings › Connections and choose Disconnect.
- Delete everything: go to Settings › Account and choose Delete account, or email hello@getfrankdata.com from the email address on your account.
- Facebook and Instagram: you can also remove Frank Data in Facebook under Settings › Apps and websites. When you do, Meta tells us and we delete the data we got from Meta within 30 days. To ask us directly, email hello@getfrankdata.com with the subject “Delete my Meta data”, and we will confirm once it is done.
Your rights
Under the GDPR you can ask to see, correct, delete or download your personal data, and you can object to or limit how we use it. Email hello@getfrankdata.com and we will reply within one month.
If you are not happy with how we handle your data, you can complain to the Data Protection Commission in Ireland, or to the data protection authority where you live.
Security
All data is encrypted in transit (HTTPS) and at rest. Platform tokens are kept on the server, never in your browser. Admin accounts must use two-step verification. Each customer can only see their own data, and the database itself enforces this.
Children
Frank Data is a business tool and is not meant for anyone under 18.
Changes to this policy
If we make an important change, we will email you before it takes effect. The date at the top shows when this policy last changed.
Contact
Questions about your data or this policy: hello@getfrankdata.com.