Privacy policy
Avenue Right Client Portal · Effective October 14, 2026
This policy covers the Avenue Right Client Portal at portal.avenueright.com (the "portal"), operated by Avenue Right, Inc. ("Avenue Right", "we"). Our public website, avenueright.com, has its own privacy policy.
Who uses the portal
The portal is for Avenue Right staff and for the businesses that are Avenue Right clients. Accounts are created by invitation only; there is no public sign-up.
Information we collect
- Account information: name, email address, role, and the multi-factor authentication factor you enroll.
- Security and activity records: sign-in sessions and an audit log of actions taken in the portal.
- Advertising data: campaign results that Avenue Right uploads or imports for its clients (spend, impressions, clicks, calls and leads).
- Data from Google APIs, only when a client's Google account is connected: read-only Google Search Console data (search queries, clicks, impressions, average position) and read-only Google Analytics data (website sessions and the city or region they come from). We request only the
webmasters.readonlyandanalytics.readonlyscopes.
How we use Google user data
- We use Google Search Console and Google Analytics data only to build reports about the connected client's own website and show them to that client and its Avenue Right account team.
- We never change anything in a Google account; all access is read-only.
- We do not sell Google user data, use it for advertising, use it to build user profiles, or share it with data brokers.
- We do not use Google user data to train or improve artificial intelligence or machine learning models.
- Avenue Right staff can see this data only to prepare and review the client's reports, to provide support, for security, or where the law requires it.
Avenue Right's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How we store and protect information
- The portal runs on Vercel (hosting) and Supabase (database and sign-in) in the United States.
- Google access tokens are encrypted at rest with AES-256-GCM and are never shown to anyone, including staff.
- Every staff account must use multi-factor authentication. Database rules ensure each client can see only its own data.
- Information travels over encrypted HTTPS connections.
Who we share information with
We share information only with the service providers that run the portal (Vercel for hosting, Supabase for the database and sign-in, Amazon Web Services for sending email), and only so they can provide that service. We do not sell or rent personal information. We may disclose information if the law requires it.
How long we keep it, and how to delete it
- Google data is kept while the client's Google connection is active and for as long as the client relationship needs it for reporting.
- You can revoke the portal's Google access at any time at myaccount.google.com/permissions. When Google reports a revoked grant, the portal deletes the stored credential.
- To have your account, a Google connection, or the data collected through it deleted, email info@avenueright.com. We complete deletion requests within 30 days.
Cookies
The portal uses only the cookies needed to keep you signed in and secure. It does not use advertising or analytics cookies.
Children
The portal is a business tool and is not intended for anyone under 18.
Changes
If we change this policy we will update the effective date above, and we will tell clients about material changes before they apply.
Contact
Avenue Right, Inc., 68 Broadway North #204, Fargo, ND 58102 · 701-356-3212 · info@avenueright.com