What this document is.
Stats BT Web Group (“Stats BT Web Group”, “we”, “us”, or “our”) is a marketing analytics portal operated by BT Web Group. We aggregate performance data from Google Analytics 4, Google Search Console, Google Ads, and Google Business Profile into a single client-facing dashboard. This Privacy Policy explains what we access, why we access it, where it lives, and how you can take it back.
We treat the words “data” and “information” the same way you do. If a sentence in this policy reads ambiguously, the interpretation that protects your privacy is the one we follow internally.
Stats BT Web Group is a read-only reporting tool. We never publish, modify, delete, or otherwise change anything in the Google services we connect to. The scopes we request are used strictly to fetch metrics for display.
What we read — and what we don’t.
When you authorize Stats BT Web Group via Google OAuth, you grant us read-only access to a specific, narrow set of metrics through the following Google API scopes:
| Scope | What we read |
|---|---|
analytics.readonly | Sessions, users, pageviews, traffic sources, and conversion metrics for GA4 properties you own or administer. |
webmasters.readonly | Clicks, impressions, CTR, average position, top queries, and top pages from your verified Search Console properties. |
adwords | Campaign-level performance — spend, clicks, impressions, conversions, CTR, CPC, ROI — from Google Ads accounts you have access to. |
business.manage | Profile views, calls, direction requests, website clicks, search type breakdowns, and customer-action insights from Google Business Profile locations. |
What we do not access
- Email contents, contacts, or address books.
- Files in Google Drive or Photos.
- Calendar entries or location history.
- Personally identifiable information about your end users or website visitors.
- Any Google service or scope not listed in the table above.
One job, done well.
Information accessed via Google APIs is used exclusively to power the Stats BT Web Group reporting dashboard. Concretely, that means:
- Displaying performance charts, KPIs, and trend lines in your dashboard.
- Generating period-over-period comparisons (e.g., this month vs. last month).
- Producing exportable reports and, where you opt in, scheduled email summaries.
- Caching metrics in our database so the dashboard loads instantly instead of re-querying Google on every page view.
What we never do
- Sell, rent, or otherwise transfer your data to data brokers or marketers.
- Use your data to train artificial intelligence or machine-learning models.
- Show advertising based on your Google data.
- Profile, score, or segment users in ways unrelated to dashboard reporting.
Where the data lives.
Aggregated metrics are stored in a managed PostgreSQL database operated by BT Web Group on infrastructure hosted within the United States. Access to the database is restricted to a small number of authorized engineers using IP-allowlisted credentials and multi-factor authentication.
Encryption
- OAuth refresh tokens are encrypted at rest using AES-256 symmetric encryption, with the encryption key stored separately from the database.
- Data in transit between your browser, our application, and Google’s APIs is protected by TLS 1.2 or higher.
- Database backups are encrypted using the storage provider’s native at-rest encryption.
Operational controls
- Principle of least privilege for all internal access.
- Audit logs of every sync operation, retained for 90 days.
- Quarterly review of access lists and key rotation procedures.
Take it back, any time.
You remain in control of the access you grant Stats BT Web Group. You can revoke that access at any time without contacting us:
Visit myaccount.google.com/permissions, locate Stats BT Web Group, and click Remove access.
Once revoked, our application can no longer fetch new data from Google on your behalf. Existing cached metrics in our database can be deleted on request — email developer@btwebgroup.com and we will confirm deletion within 30 days.
Other rights you may have
- The right to request a copy of the data we hold about you.
- The right to request correction of inaccurate data.
- The right to request restriction of certain processing activities.
- The right to lodge a complaint with a supervisory authority.
Limited Use, in writing.
Stats BT Web Group’s use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.
Specifically: we do not use Google user data for advertising purposes, we do not allow humans to read this data unless we have explicit affirmative consent from the user for specific messages, doing so is necessary for security purposes, the use is limited to internal operations and the data has been aggregated and anonymized, or it is required by law.
How long we keep things.
- Aggregated metrics — retained for as long as the connected account is active. Purged within 30 days of account closure or revocation.
- OAuth tokens — retained until you revoke access or the token is rotated. Encrypted refresh tokens are deleted within 24 hours of revocation.
- Sync logs — retained for 90 days for operational debugging, then automatically purged.
- Application logs — retained for 30 days. Personal identifiers are hashed at write time.
Not for kids.
Stats BT Web Group is a business-to-business analytics tool intended for use by marketing professionals and business owners. It is not directed to individuals under the age of 16, and we do not knowingly collect data from children. If we learn that we have inadvertently collected data from a child, we will delete it promptly.
If something changes, you’ll know.
We may revise this Privacy Policy from time to time as the service evolves or as legal requirements change. Material changes will be communicated via email to the registered account owner at least 14 days before they take effect, and the “Last updated” date at the top of this document will be revised.
Continued use of Stats BT Web Group after the effective date constitutes acceptance of the revised policy.
Questions, concerns, requests.
For any questions about this Privacy Policy, requests to exercise your data rights, or concerns about how we handle your information:
- Email — developer@btwebgroup.com
- Web — btwebgroup.com
We aim to respond to all inquiries within five business days. Complex requests involving data export or deletion may take up to 30 days.