Back to sign in
Iceberg Digital · Legal

Privacy Policy

Last updated: 18 February 2026

This Privacy Policy explains how Iceberg Digital (“we”, “us”, “our”) collects, uses, stores, and shares personal information when you use our marketing reporting platform (the “Service”). We comply with the Australian Privacy Principles in the Privacy Act 1988 (Cth) and, where applicable, the GDPR.

1. Information we collect

  • Account data — name, email, role, company affiliation, and credentials used to sign in.
  • Client & campaign data — marketing performance data you upload via CSV/Excel or that we fetch from connected third-party platforms on your authorisation.
  • Usage data — logs of pages viewed, features used, and timestamps for security and product improvement.
  • Device data — browser type, operating system, IP address, and similar diagnostics.
  • Communications — messages you send us via email or in-app channels.

2. How we use information

  • Provide, operate, and maintain the Service.
  • Generate the dashboards, charts, PDF reports, and AI-assisted recommendations you request.
  • Authenticate users and protect against fraud, abuse, and unauthorised access.
  • Respond to support requests and communicate platform updates.
  • Improve and develop new features (using aggregated, de-identified data wherever possible).
  • Comply with legal obligations and enforce our terms.

3. AI processing

The Service uses large language models (“LLMs”) to draft commentary and recommendations. When you trigger an AI feature, the campaign metrics and the prompt template are sent to the LLM provider over an encrypted connection. We use enterprise-grade providers that do not train on customer data by default. AI output is generated automatically, may contain errors, and should always be reviewed.

4. Third-party data sources

With your authorisation we connect to and fetch data from third parties on your behalf, including (non-exhaustively): Google Ads, Google Analytics 4, Google Search Console, Google Business Profile, YouTube Analytics, Meta Marketing API, WhatsApp Business, LinkedIn Marketing, Microsoft Advertising / Bing Webmaster / Clarity, X (Twitter), Pinterest, OpenAI, ProductReview.com.au, Trustpilot, SendGrid, and Twilio. Each provider has its own privacy policy and retention rules; we recommend you review them.

5. How we share information

We do not sell personal information. We share information only:

  • With service providers that host or support the Service (cloud hosting, database, email delivery, error monitoring), under written contracts.
  • With your authorised users — e.g. agency staff and client contacts on the same account.
  • To comply with law, respond to lawful requests, protect rights, or in connection with a corporate transaction.

6. Data storage & security

Customer data is stored in encrypted databases hosted in cloud regions that we select for proximity, redundancy, and compliance. Access is restricted on a least-privilege basis, all administrative actions are logged, and tokens for third-party integrations are encrypted at rest. While no system is perfectly secure, we use commercially reasonable safeguards and regularly review them.

7. Retention

We retain personal information for as long as your account is active, then for a reasonable export window plus a short archive period to satisfy legal, accounting, and reporting obligations. You may request earlier deletion by contacting us.

8. Your rights

You have the right to:

  • Request access to the personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of your information, subject to lawful retention.
  • Withdraw consent for any optional processing at any time.
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or your local data-protection authority.

To exercise these rights, email privacy@icebergdigital.com.au.

9. Cookies & local storage

We use a small number of essential cookies and browser local-storage entries to keep you signed in, remember preferences, and provide security features. We do not use third-party advertising or behavioural-tracking cookies inside the platform.

10. International transfers

Some of our hosting and AI providers operate in regions outside Australia. Where personal information is transferred internationally, we use providers with appropriate safeguards (e.g. Standard Contractual Clauses) to ensure equivalent protection.

11. Children

The Service is intended for business users and is not directed to individuals under 18. We do not knowingly collect information from children.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email. The “Last updated” date at the top reflects the most recent revision.

13. Contact

Privacy questions? Reach our Privacy Officer at privacy@icebergdigital.com.au.