Report Studio Privacy Policy
Report Studio Privacy Policy
Effective: 26 October 2026
This policy explains how Opus Web Design Limited handles data in Report Studio, our internal tool for producing performance reports for our clients. It applies to data we read from client accounts on LinkedIn, TikTok, Facebook, Instagram and Google, and to the reports we create from it.
Who we are
Opus Web Design Limited, Cavan Digital Hub, Kilmore Business Park, Pullamore Far, Cavan, H12 PD82, Ireland. Company number 684547.
Email: info@opuswebdesign.ie
Phone: +353 87 966 3260
For the client data described here, we act on behalf of each client and only with their authorisation. For our own business records, we are the data controller.
What Report Studio is
Report Studio is a private web application at reports.opuswebdesign.ie, used only by Opus Web Design staff. It is not available to the public. It produces monthly reports showing how a client's website, advertising and social media accounts are performing.
What data we access
We access only the accounts a client has authorised, and only read-only reporting data.
LinkedIn (company Pages)
Data we read: Page name and follower count; follower and Page view statistics; post content and aggregate post statistics (impressions, reactions, comments, shares, clicks).
Data we never access: private messages; individual members' profiles or contact details; any personal LinkedIn profile data beyond what is needed to sign in.
TikTok (business accounts)
Data we read: account name and follower count; profile and video views; aggregate video statistics (views, likes, comments, shares, watch time, reach); aggregate audience breakdowns; for accounts running ads, campaign performance (spend, impressions, clicks, results).
Data we never access: private messages; individual viewers' identities; payment details.
Facebook and Instagram
Data we read: Page and account details; posts and aggregate insights; ad account performance.
Data we never access: private messages; individual followers' profiles; payment details.
Google (Analytics, Search Console, Ads)
Data we read: aggregate website, search and advertising statistics.
Data we never access: information identifying individual website visitors.
Report Studio cannot post, comment, message, change settings or spend money on any account.
How we access it
A client authorises access through the platform's own sign-in and consent screen (for example, "Sign in with LinkedIn" or TikTok's authorisation page), or by sharing the account with Opus Web Design's business account on that platform. We never ask for or store account passwords.
The platform gives us an access token limited to read-only reporting permissions. Tokens are stored encrypted in Google Cloud in the EU and are used only by Report Studio.
Why we use it
We use the data only to produce, store and explain that client's own performance reports, and to advise that client on their marketing.
Our legal basis is the performance of our contract with the client and our legitimate interest in providing the reporting service they have asked for.
We do not sell this data. We do not use it for advertising, profiling or any purpose other than the client's reports. We do not combine one client's data with another's.
Who processes it for us
Google Cloud (Google Ireland Limited): hosts Report Studio and stores saved reports and access tokens. Location: EU (Belgium region).
Anthropic: writes draft report commentary from aggregate figures and post text. Location: United States.
monday.com: holds our client list and work log. Location: EU / United States.
Where data is transferred outside the European Economic Area, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses. Anthropic does not use data sent through its commercial API to train its models.
How long we keep it
Saved reports are kept for 5 years from the end of the reporting month, then deleted.
Access tokens are kept until the client disconnects the account, the token expires, or we stop working with the client, whichever comes first.
Revoking access and deleting data
A client can withdraw our access at any time:
- LinkedIn: remove the Report Studio app's access, or remove Opus Web Design as a Page admin.
- TikTok: remove Report Studio under the account's security settings for authorised apps.
- Facebook and Instagram: remove Opus Web Design as a partner in Meta Business Settings.
- Or email info@opuswebdesign.ie.
On request we delete the client's stored tokens straight away, and their saved reports within 30 days, unless we must keep a record by law.
Your rights
Under the GDPR you can ask us for access to, correction of, or deletion of personal data we hold about you. You can also object to or restrict processing, or ask for data portability. Email info@opuswebdesign.ie and we will reply within one month.
You can complain to the Data Protection Commission in Ireland (www.dataprotection.ie).
Security
Report Studio is available only to named Opus Web Design staff, signed in through Google. Data is encrypted in transit and at rest, and access tokens are kept in a secure store, never in code or email.
Changes to this policy
We will post any changes on this page and update the effective date.
Contact
Opus Web Design Limited
Cavan Digital Hub, Kilmore Business Park, Pullamore Far, Cavan, H12 PD82, Ireland
Email: info@opuswebdesign.ie
Phone: +353 87 966 3260