Trust & security

Your clients' data, treated like it matters.

Clientdeck holds performance data and connected ad accounts, so security isn't an afterthought. Here's exactly how your data, and your clients' data, is protected.

01

Encrypted and walled off

Connected ad account tokens and API keys are encrypted at rest. Every agency's data is isolated from every other. One account can never see another's clients, reports or leads.

02

Served securely

Everything runs over HTTPS with strict transport security, sensible security headers, and rate limited logins to blunt brute force attempts. Hosted on managed infrastructure with a managed Postgres database.

03

No tracking, no selling

We don't put third party analytics or ad trackers on your reports, and we never sell your data or your clients' data. Your clients see only their own private report link. No login, nothing to install.

04

You're in control

Remove a client or a report at any time. Reports stay private drafts until you publish them, so nothing reaches a client before you're ready. You can export a complete copy of your data as JSON whenever you like.

05

Deleting your account

Email us from the address on your account and we will delete the account and everything under it: your team logins, clients, reports, leads, comments, schedules, saved voices and templates, connected account tokens and custom domains. We confirm once it is done, always within 30 days. The one thing we do not delete is payment and invoice records. Those are held by Stripe, our payment processor, and kept as tax and accounting rules require. How to request deletion

06

How Clientdeck AI uses data

To draft a report, we send the report figures to Anthropic's API, along with the brief you set for that report, such as the client's industry, brand voice and reading level. We do not send lead details, client email addresses or payment details. Under Anthropic's commercial API terms, that data is not used to train its models by default. A person at your agency reads, edits and publishes every report. Automatic sending is something you can switch on for a recurring schedule, it is off by default, and reports built from Google Sheets can never send automatically.

07

Who handles your data

Our subprocessors, as at 30 September 2026, are Stripe for payments, Anthropic for AI drafting, Resend for transactional email, Railway for hosting and the database, and Approximated for custom domain routing, which applies only if you connect your own domain. The full list, with where each is based and a link to each data processing agreement, is in our Privacy Policy. Read the Privacy Policy

08

Privacy contact

Our privacy officer is James Findlay. For any privacy question or request, email marketing@clientdeck.co.nz.

The easiest way to get it is to try it.

Connect your data, and watch Clientdeck do the rest.