Privacy Policy

Last updated: 22 June 2026

This Privacy Policy explains how CGX Group ("CGX", "we", "us", or "our") collects, uses, stores, and protects information in connection with the CGX Hub reporting platform (the "Service"), available at hub.cgxgroupau.com. CGX Hub is a business-reporting dashboard that displays performance data for our clients by connecting, on the client's authorisation, to third-party platforms they already use.

1. Who this policy covers

This policy applies to our clients and their authorised users who use CGX Hub, and to the connected accounts they choose to link (for example Google Ads, Xero, ServiceM8, Simpro, or similar). We act as a data processor on behalf of our clients for the reporting data we access.

2. Information we collect

Category	Examples	Why
Account & contact details	Name, business name, email, phone	To set up and operate your dashboard and communicate with you
Connected-platform data	Reporting and performance data accessed via the APIs you authorise (e.g. advertising metrics, invoices, jobs, financial summaries)	To generate the dashboards and reports you've engaged us to provide
Authorisation tokens	OAuth refresh/access tokens for the platforms you connect	To securely retrieve your reporting data on your behalf
Usage information	Basic logs needed to run and secure the Service	Security, reliability, and support

We only access connected-platform data that you explicitly authorise through that platform's own consent flow, and only on a read-only basis where the platform supports it. We do not create, edit, or delete anything in your connected accounts.

3. Google user data

When you connect a Google account (for example, Google Ads), Google's consent screen asks you to authorise access using the https://www.googleapis.com/auth/adwords scope. We use this access solely to read advertising reporting data (such as campaigns, spend, impressions, clicks, and conversions) so we can display it in your dashboard. We do not create, edit, pause, or delete campaigns, and we do not make any changes to your Google Ads account.

Limited Use disclosure. CGX Hub's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, we do not transfer it to third parties except as needed to provide and secure the Service (or as required by law), and we do not allow humans to read it except with your consent, for security purposes, to comply with law, or where the data has been aggregated/anonymised.

4. How we use information

To provide, maintain, and display your reporting dashboards.
To authenticate with the platforms you connect and refresh data on a schedule.
To provide support, communicate with you, and improve the reliability and security of the Service.

We do not use connected-platform data (including Google user data) for advertising, profiling, or any purpose other than delivering the reporting you've engaged us to provide.

5. How we share information

We do not sell your data and we do not share it for advertising. We may share information only:

With the client/agency account that authorised the connection, to display their dashboards;
With trusted service providers that host and operate the Service on our behalf (for example, our cloud hosting provider), under confidentiality obligations and only to the extent needed to run the Service;
Where required by law, regulation, or valid legal process.

6. How we store and protect data

Data is transmitted over encrypted connections (HTTPS/TLS) and stored on secured, access-controlled cloud infrastructure.
OAuth tokens and credentials are stored securely and are never exposed through our public interfaces or APIs.
Access to data is restricted to authorised personnel who need it to operate or support the Service.

7. Data retention

We retain connected-platform data only for as long as needed to provide the Service to you, or as required by law. When you disconnect a platform or close your account, we delete or de-identify the associated tokens and cached reporting data within a reasonable period.

8. Revoking access & deleting your data

You can disconnect a connected platform at any time. For Google specifically, you may also revoke our access directly at myaccount.google.com/permissions. To request deletion of your data held by CGX Hub, contact us at the address below and we will action it promptly.

9. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

10. Children's privacy

CGX Hub is a business tool intended for use by businesses and is not directed to individuals under 18. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact us

If you have any questions about this Privacy Policy or how we handle your data, contact us:

CGX Group
Email: cam@cgxau.com
Website: cgxgroupau.com