Trust & security
Your clients' data, treated like it matters.
ClientDeck holds performance data and connected ad accounts, so security isn't an afterthought. Here's exactly how your data, and your clients' data, is protected.
Encrypted and walled off
Connected ad account tokens and API keys are encrypted at rest. Every agency's data is isolated from every other. One account can never see another's clients, reports or leads.
Served securely
Everything runs over HTTPS with strict transport security, sensible security headers, and rate limited logins to blunt brute force attempts. Hosted on managed infrastructure with a managed Postgres database.
No tracking, no selling
We don't put third party analytics or ad trackers on your reports, and we never sell your data or your clients' data. Your clients see only their own private report link. No login, nothing to install.
You're in control
Remove a client or a report at any time. Reports stay private drafts until you publish them, so nothing reaches a client before you're ready. You can export a complete copy of your data as JSON whenever you like.
Deleting your account
Email us from the address on your account and we will delete the account and everything under it: your team logins, clients, reports, leads, comments, schedules, saved voices and templates, connected account tokens and custom domains. We confirm once it is done, always within 30 days. The one thing we do not delete is payment and invoice records. Those are held by Stripe, our payment processor, and kept as tax and accounting rules require. How to request deletion
How ClientDeck AI uses data
To draft a report, we send the report figures to our AI provider's API, along with the brief you set for that report, such as the client's industry, brand voice and reading level. We do not send lead details, client email addresses or payment details. Under our AI provider's commercial API terms, that data is not used to train its models by default. A person at your agency reads, edits and publishes every report. Automatic sending is something you can switch on for a recurring schedule, it is off by default, and reports built from Google Sheets can never send automatically.
Who handles your data
Our subprocessors, as at 30 September 2026, are Stripe for payments, an AI provider for drafting the written copy, a transactional email provider, a cloud hosting and database provider, and a custom domain routing provider, which applies only if you connect your own domain. Each is based in the United States. The current named list, with a link to each data processing agreement, is available on request, and the categories are set out in our Privacy Policy. Read the Privacy Policy
Privacy contact
Our privacy officer is James Findlay. For any privacy question or request, email marketing@clientdeck.co.nz.
The easiest way to get it is to try it.
Connect your data, and watch ClientDeck do the rest.