Privacy Policy

Last updated: 20 July 2026

Northspire Agency ("we", "us", "our") operates the website dashboard.northspireagency.com, the social media scheduling tool Northspire Social at social.northspireagency.com, which we provide to our clients, and related advertising tools. This policy explains how we collect, use, and protect information when you interact with our services or our advertisements, and how we handle data obtained from the social media platforms we connect to, including Meta (Facebook/Instagram), TikTok, LinkedIn, YouTube and X.

1. Information We Collect

• Lead form submissions: When you submit a lead form through one of our Facebook or Instagram advertisements, we receive the information you provide (e.g. name, email address, phone number).
• Ad performance data: We collect aggregated, non-personally-identifiable metrics from Meta's advertising platform (impressions, clicks, cost) to measure campaign effectiveness.
• Website usage: Standard server logs (IP address, browser type, pages visited) when you access our dashboard.

2. How We Use Your Information

• To respond to enquiries submitted through lead forms on behalf of our real estate clients.
• To measure and optimise advertising campaign performance.
• To operate and improve our dashboard and Northspire Social, the scheduling tool we provide to our clients.

3. Connected Social Media Accounts

We provide a social media scheduling and publishing tool, Northspire Social, at social.northspireagency.com to the real estate professionals we work with. Each client has their own workspace in which they connect the social media accounts they own; our team is added to that workspace to prepare and schedule content for them. We also connect accounts owned by Northspire Agency for our own marketing.

• What we access: When you connect a social media account you own (including TikTok, Facebook, Instagram, LinkedIn, YouTube and X) to Northspire Social, we receive an access token from that platform, together with basic profile information for the connected account, such as the account's display name, username, avatar and profile link.
• How we use it: Profile information is displayed inside Northspire Social so you and our team can see which account a scheduled post will be published to, and so posts are not sent to the wrong account. Access tokens are used solely to upload and publish the video and image content that has been created and scheduled in your workspace.
• TikTok specifically: Where you connect a TikTok account, we use TikTok's Login Kit and Content Posting API under the user.info.basic, user.info.profile, video.upload and video.publish scopes. We do not read, collect or store any other TikTok user's personal data, and we do not access followers, comments, direct messages or analytics belonging to other users. Nothing is posted to your TikTok account without a post being created and scheduled in your workspace first, and every TikTok post carries the privacy level and the duet, stitch and comment settings chosen for it.
• Storage and protection: Access tokens are stored encrypted at rest on our own servers, are never shared with third parties, and are never exposed in any public-facing page or client-side code.
• Revoking access: A connected account can be disconnected at any time from within Northspire Social, which deletes the stored token. Access can also be revoked directly from the platform's own settings. For TikTok, this is under Settings and privacy > Security and permissions > Manage app permissions. Tokens are deleted when an account is disconnected or when it is no longer required.

4. Sharing of Information

We share lead form data only with the specific real estate professional whose advertisement you responded to. We do not sell personal information to third parties. We may use trusted service providers (e.g. Google Cloud, Meta) to process data on our behalf, subject to appropriate data protection agreements.

5. Data Retention

Lead form data is retained for the duration of the client engagement plus 12 months, after which it is deleted. Ad performance data is retained in aggregated form for reporting purposes.

6. Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us at the email below. If you are located in the EU/UK, you have additional rights under GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.

7. Cookies

Our dashboard uses essential cookies for authentication. We do not use third-party tracking cookies on our website.

8. Security

We use industry-standard measures including HTTPS encryption, access controls, and secure credential storage to protect your data.

9. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent revision.

10. Contact

If you have questions about this privacy policy, contact us at:
Northspire Agency
Email: leo@northspireagency.com