Skip to content

Privacy Policy

Last updated: September 9, 2026

Skyshot Digital (“Skyshot Digital,” “we,” “us,” or “our”) is a small digital marketing agency serving local businesses. We build and maintain WordPress websites and manage SEO, Google Ads, and Google Business Profile listings for our clients. This policy explains what information we collect through skyshotdigital.com and through the software tools we operate, how we use that information, and what choices you have.

Skyshot Digital is a South Dakota limited liability company, based in Sioux Falls, South Dakota, USA. You can reach us any time at info@skyshotdigital.com.

Information we collect on this website

Information you give us

When you fill out a contact form, request a quote, or email us, we collect what you choose to send: typically your name, email address, phone number, business name or website, and whatever you write in the message. We also keep the ongoing email or message thread that follows.

Information collected automatically

Like most websites, ours collects some technical information automatically:

  • Pages you visit, how long you stay, and which page or search sent you here
  • Browser and device type, screen size, and operating system
  • Approximate location (city or region level) derived from your IP address
  • Standard web server logs kept by our hosting provider, which include IP addresses and request timestamps

How we use this information

  • To respond to your inquiry and provide a quote or proposal
  • To deliver and support the services a client has hired us for
  • To send invoices, project updates, and service-related messages
  • To understand which pages and marketing channels are working, so we can improve the site
  • To keep the site secure and troubleshoot technical problems
  • To meet legal, tax, and accounting obligations

We do not sell your personal information, and we do not rent or trade contact information to advertisers or data brokers.

Cookies and analytics

We use Google Analytics to measure site traffic. Google Analytics sets cookies in your browser and processes usage data on our behalf. We use it only in aggregate — to see traffic patterns, not to identify individual visitors.

You can block or delete cookies in your browser settings, or install the Google Analytics Opt-out Browser Add-on. Blocking cookies will not break the site. Our WordPress installation may also set functional cookies needed for basic site operation and spam filtering on forms.

Google user data: the Skyshot GBP Manager application

Skyshot Digital operates an internal tool called Skyshot GBP Manager. This section describes how that application handles Google user data, and it applies in addition to everything above.

What the application is

Skyshot GBP Manager is an internal-use, operator-run tool. It is not offered to the public, it has no public sign-up, and it does not authenticate other people’s Google accounts. It authenticates only as Skyshot Digital’s own Google account — the account that already holds owner or manager permissions on the Google Business Profile listings we manage for our clients.

What Google user data the application accesses

The application requests the following OAuth scopes:

  • https://www.googleapis.com/auth/business.manage — read and manage the Google Business Profile accounts and locations our Google account already has access to.
  • openid and https://www.googleapis.com/auth/userinfo.email — used only to confirm which Google account granted access, so we can verify the correct agency account consented.

Under the business.manage scope, the application reads and writes only Google Business Profile data, including:

  • Business listing details: business name, address, phone number, website URL, categories, hours, and similar profile fields
  • Performance and insights metrics: impressions, searches, calls, direction requests, website clicks, and comparable listing metrics
  • Customer reviews and star ratings left on the listings we manage, and owner replies to those reviews
  • Google Business Profile posts published to those listings

The application does not access Gmail, Google Drive, Google Contacts, Google Calendar, or any other Google service.

How we use that data

Google user data obtained through these scopes is used for one purpose: managing the Google Business Profile listings that Skyshot Digital owns or has been engaged by a client to manage. Specifically, we use it to view and update listing information, publish and remove posts, read and reply to customer reviews, and review performance metrics so we can report results to the client whose listing it is.

We do not use Google user data for advertising, we do not use it to build user profiles, we do not sell it, and we do not transfer it to third parties except as strictly necessary to provide or improve the tool itself, for security purposes, or to comply with applicable law. We do not allow humans to read this data except with the account owner’s consent for support purposes, for security purposes, to comply with applicable law, or where the data has been aggregated and anonymized.

Limited Use disclosure

Skyshot Digital’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How this data is stored and secured

The application runs locally on the operator’s own computer. OAuth tokens (the access and refresh tokens issued by Google) are stored in a restricted-access folder on that machine and are never uploaded to a Skyshot Digital server, shared with a third party, or committed to source control. There is no Skyshot Digital cloud database holding Google user data. Business Profile data is fetched from Google’s APIs when a task requires it; anything retained afterward is limited to working files and client reports kept on the operator’s machine and in our own business records. The folder holding these tokens is restricted to the operator’s own Windows user account and system administrators, the machine requires account-level authentication, and access is limited to authorized Skyshot Digital personnel. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.

Revoking access

The Google account that granted access can revoke it at any time at https://myaccount.google.com/permissions by selecting Skyshot GBP Manager and choosing “Remove access.” Revoking access immediately stops the application from reading or changing anything on that account. If a client wants us to stop managing their listing, they can also remove Skyshot Digital’s manager access directly from their Google Business Profile at any time, and can email us at info@skyshotdigital.com to request that we delete any Business Profile data we still hold for them.

Third-party services

We rely on a small number of outside providers to run our business. These providers process data on our behalf under their own privacy policies:

  • Google (Analytics, Business Profile, Google Ads, and Google account services)
  • Hostinger (website hosting) and Google Workspace (business email)
  • Formidable Forms, which processes contact-form submissions made on this website

We share information with these providers only to the extent needed to run the site and deliver our services. We may also disclose information if required by law, subpoena, or valid legal process, or to protect our rights or the safety of others.

How long we keep information

  • Contact form and email inquiries: kept for up to 24 months after our last contact with you
  • Client project files, records, and reports: kept for up to 3 years after an engagement ends
  • Analytics data: retained according to the data-retention setting configured in our Google Analytics property
  • Invoices and financial records: kept as long as required for tax and accounting purposes

When information is no longer needed for the purpose it was collected, we delete it or keep it only in a form that no longer identifies you.

Your choices and rights

You can email info@skyshotdigital.com at any time to ask what personal information we hold about you, to request a correction, to ask us to delete it, or to ask us to stop contacting you. We will respond within a reasonable time. Some information may need to be retained for legal, tax, or contractual reasons. Depending on where you live, you may have additional rights under your local privacy laws; tell us what you are asking for and we will work with you in good faith.

Children’s privacy

This website and our services are intended for businesses and adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, email us and we will delete it.

Changes to this policy

We may update this policy as our services or tools change. When we do, we will revise the “Last updated” date at the top of this page. Material changes affecting how we handle Google user data will be reflected here before those changes take effect.

Contact us

Questions about this policy, or about data we hold: