Legal
Privacy policy
Last updated: 26 May 2026
Contents
- 1. Who we are
- 2. What data we collect
- 3. How we collect data
- 4. How we use your data
- 5. Lawful basis for processing
- 6. Platform integrations
- 7. Cloud storage integrations
- 8. AI-assisted features
- 9. E-signature and contract data
- 10. Automated communications
- 11. Shareable media kit
- 12. Team members and invited users
- 13. Payments
- 14. Data storage and security
- 15. Data sharing
- 16. International data transfers
- 17. Data retention
- 18. Your rights
- 19. Complaints
- 20. Cookies
- 21. Third-party links
- 22. Changes to this policy
1. Who we are
With Agency Method Ltd ("we", "us", "our") is a company registered in England and Wales.
Company number: 17010339
ICO registration number: ZC088673
For the purposes of UK data protection law, With Agency Method Ltd is the data controller of personal data collected through our website and platform.
This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website or use our platform.
2. What data we collect
Information you provide directly
- Name
- Email address
- Business information
- Information submitted via forms
- Account registration details
Technical and usage data
- IP address
- Browser type and version
- Device information
- Usage data relating to how you interact with our platform
Platform account data
When you use Agency Method, we may process data you create or upload within your account, including:
- Campaign and deal information
- Invoice and payment records
- Brand and contact details
- Contract, content and performance data
- Calendar events and deadlines
- Team member information
Social media and platform data
When you connect third-party platforms, we may access and store:
- Post-level performance metrics (views, likes, comments, shares, reach, saves)
- Follower and audience data
- Media content metadata including captions, thumbnails and media URLs
- Account-level analytics and insights
- Channel and profile information
You are responsible for ensuring you have the appropriate rights and permissions to upload personal data of third parties into the platform.
3. How we collect data
We collect personal data when you:
- Create an account
- Subscribe to our services
- Contact us
- Use platform features
- Connect third-party integrations
- Invite team members or managers to your account
- Import data from external sources such as Notion or Google Sheets
- Visit our website (via cookies and analytics tools)
4. How we use your data
We use your personal data to:
- Provide and operate the Agency Method platform
- Manage your account and subscriptions
- Process payments
- Generate invoices and reports
- Sync authorised third-party integrations
- Display performance analytics and insights
- Parse and extract data from contracts using AI-assisted tools
- Generate AI-powered campaign reports and summaries
- Facilitate e-signature workflows including capturing signatures, IP addresses and timestamps
- Send automated communications to brands on your behalf (payment reminders, PO requests and statutory interest claims)
- Sync documents to your connected cloud storage
- Generate and host a shareable media kit on your behalf
- Import and map data from external sources
- Improve product functionality and user experience
- Communicate service updates
- Comply with legal obligations
We do not sell your personal data.
5. Lawful basis for processing
Under UK GDPR, we rely on:
- Contract - where processing is necessary to provide our services
- Legitimate interests - to operate, improve and secure the platform
- Consent - for marketing communications and third-party integrations
- Legal obligation - where required by law
You may withdraw consent for integrations at any time by disconnecting them within your account settings.
6. Platform integrations
Agency Method integrates with a number of third-party platforms to provide its core functionality. Below we explain what data is accessed for each integration and how it is used.
Instagram / Meta
If you connect your Instagram Business or Creator account, we access data via the Meta Graph API, including post-level metrics (views, reach, likes, comments, shares, saves, impressions), media content metadata (captions, thumbnails, media URLs, timestamps), follower and audience counts and Instagram Stories insights (where available).
This data is used solely to display performance analytics within your Agency Method account. We do not access your Instagram password. You may disconnect at any time.
TikTok
If you connect your TikTok account, we access data via the TikTok API, including video-level metrics (views, likes, comments, shares, reach, watch time) and account and profile data.
This data is used solely to display performance analytics within your Agency Method account. You may disconnect at any time.
YouTube / Google
If you connect your YouTube channel, we access data via the YouTube Data API and YouTube Analytics API, including video-level metrics (views, likes, comments, watch time, impressions, subscribers gained) and channel and profile data.
This data is used solely to display performance analytics within your Agency Method account. You may disconnect at any time.
Xero
If you connect Xero, we may access limited accounting data including invoice details, payment status, customer and contact information and financial totals. Access is granted via secure OAuth authentication.
We use this data solely to sync invoice statuses, display financial summaries and reduce manual data entry. We do not access your Xero password. You may disconnect at any time.
QuickBooks Online
If you connect QuickBooks Online, we may access limited accounting data including invoice details, payment status, customer and contact information and financial totals. Access is granted via secure OAuth authentication.
We use this data solely to sync invoice statuses, display financial summaries and reduce manual data entry. We do not access your QuickBooks password. You may disconnect at any time.
FreeAgent
If you connect FreeAgent, we may access limited accounting data including invoice details, payment status and financial totals. Access is granted via secure OAuth authentication.
We use this data solely to sync invoice statuses and display financial summaries. You may disconnect at any time.
Apple Calendar, Google Calendar and Microsoft Outlook
If you connect a calendar integration, we access calendar event data to sync campaign deadlines, deliverable due dates and content schedules with your external calendar.
We do not store full calendar contents. Sync is used solely for deadline management within Agency Method. You may disconnect at any time.
Notion
If you connect your Notion workspace for data import, we may access database structures, property names and record contents from databases you select. This data is used solely to map and import your existing deal and brand information into Agency Method. We do not access workspaces or databases you have not explicitly selected. You may disconnect at any time.
Google API Services disclosure
Agency Method's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
7. Cloud storage integrations
If you connect a cloud storage provider (Google Drive, Dropbox or OneDrive), Agency Method automatically uploads copies of invoices, contracts and statutory interest claims to a dedicated folder in your connected storage.
We use only the minimum permissions required to create and update files within the Agency Method folder. We do not access, read or modify any other files in your storage. You may disconnect at any time.
8. AI-assisted features
Agency Method uses AI-assisted features for certain functionality, including:
- Contract parsing and field extraction
- Contract autoscan (comparing contract terms against your preferences)
- Campaign brief extraction from uploaded documents
- Campaign report generation and performance summaries
- AI-powered content highlights
- Data import field mapping
Where AI features process your data, this may involve sending relevant content to third-party AI providers. Data sent to AI providers is used solely to generate the requested output and is not used to train AI models. We select AI providers who meet appropriate data protection standards.
You will always be able to identify where AI features are in use within the platform.
9. E-signature and contract data
When you use Agency Method's e-signature feature, we collect and store the following data for each signing event:
- The signer's name
- Signature image data
- IP address at the time of signing
- Timestamp of the signing event
- A cryptographic hash of the signed document
This data is captured to establish a legally binding audit trail. It is stored alongside the contract record and included in the execution certificate generated upon countersignature. Brand signatories are informed that their IP address and timestamp will be recorded as part of the signing process.
10. Automated communications
Agency Method sends automated emails to brands on your behalf as part of the following features:
- Payment reminders - three-stage automated emails sent to brands when invoices become due or overdue
- PO Clock - automated emails requesting purchase order numbers from brands after content is posted
- Statutory interest claims - formal claim documents sent to brands under UK late payment legislation
- Contract signing requests - emails inviting brand contacts to sign contracts via the e-signature feature
These emails are sent using brand contact email addresses that you provide within the platform. We process this data on the basis of our contract with you to provide the platform's functionality.
11. Shareable media kit
Agency Method generates a media kit page from your account data. If you choose to share this via a public link, the following data may be visible to anyone with the link:
- Your name and profile information
- Follower counts and engagement rates
- Rate card information
- Audience demographics (if enabled)
- Brand testimonials (if added)
No login is required to view a shared media kit. You can disable the shareable link at any time from within the platform.
12. Team members and invited users
If you invite team members or managers to your Agency Method account, we will process their name and email address to create their account and facilitate collaboration within your workspace.
Invited users are subject to this Privacy Policy. As the account holder, you are responsible for ensuring you have appropriate authority to share their details with us for this purpose.
Team member data is processed only for the duration of their active membership of your account.
13. Payments
Payments are processed securely by Stripe. We do not store full payment card details.
Stripe may process personal and payment data in accordance with its privacy policy: stripe.com/privacy
14. Data storage and security
We implement appropriate technical and organisational measures to protect personal data. These include:
- Encrypted data transmission (HTTPS)
- Two-factor authentication via email OTP
- Row-level security ensuring account data isolation
- Role-based access controls within the platform
- Secure third-party infrastructure providers
Access to data is limited to authorised personnel.
15. Data sharing
We may share data with trusted service providers including:
- Hosting providers
- Email service providers
- Analytics providers
- Payment processors (Stripe)
- AI service providers (for AI-assisted features)
- Accounting platforms (if connected by you)
- Cloud storage providers (if connected by you)
- Social media platforms (if connected by you)
All third-party processors are required to comply with applicable data protection laws.
16. International data transfers
Our platform infrastructure is currently hosted in the United States. Some of our service providers may also process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, including:
- UK-approved standard contractual clauses
- Adequacy regulations (including the UK-US Data Bridge)
- Secure processing agreements
17. Data retention
We retain personal data only as long as necessary:
- Account data is retained while your account is active
- Financial records are retained for statutory accounting periods
- Social media metrics and platform data are retained for the duration of your account
- E-signature audit data (IP addresses, timestamps, document hashes) is retained for the duration of your account and for a reasonable period after deletion to support legal obligations
You may request deletion of your account at any time via the Account Setup page within the platform or by contacting us. Upon deletion, your personal data will be removed subject to any legal retention obligations.
18. Your rights
Under UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent
To exercise your rights, contact us at hello@withagencymethod.com.
19. Complaints
If you believe your data has been handled improperly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
We encourage you to contact us first so we can resolve any concerns directly.
20. Cookies
We use cookies and similar technologies to improve functionality and analyse usage. Full details are available in our Cookie Policy.
We use Microsoft Clarity to understand how users interact with our platform. Microsoft Clarity collects behavioural data including mouse movements, clicks and scrolling. This data is processed by Microsoft in accordance with their privacy policy. You can opt out of Microsoft Clarity data collection at clarity.microsoft.com/optout.
21. Third-party links
Our website and platform may link to third-party websites. We are not responsible for their privacy practices.
22. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be published on our website.

