Privacy Policy
Lantern (lanternreporting.com) compiles monthly marketing reports for agencies and their clients. This policy explains what data Lantern handles, why, and what it does not do.
Who uses Lantern
Lantern is used by marketing agencies to report on the clients they serve. An agency can sign up directly with a Google account, or use Lantern through an application built on it.
Your account
When you sign up or sign in with Google, Lantern receives your name, email address and Google account ID. It uses them only to create your account and recognise you when you return. Signing in gives Lantern no access to your Google data.
Data from Google
When an agency connects a Google account, Lantern requests access to Google Analytics (analytics.readonly and analytics.edit), Google Search Console (webmasters.readonly and webmasters), site verification (siteverification.verify_only) and Google Business Profile (business.manage), plus the account's email address to identify the connection. Lantern uses this access only to read the performance figures that appear in the agency's reports: sessions, users and engagement from Google Analytics; clicks, impressions and search positions from Search Console; views, calls, direction requests, website clicks and reviews from Business Profile. Lantern uses analytics.edit for one thing only: when someone in the agency presses “Create a property” for a client whose site has no Google Analytics, Lantern creates that property and its web data stream in the Google Analytics account they choose. It never changes or deletes an existing property. Lantern uses webmasters and siteverification.verify_only for one thing only: when someone in the agency presses “Add this site” for a client whose site is not in Search Console, Lantern asks Google to confirm the agency's ownership of that site and adds it to their Search Console. It never removes a site or changes its settings. Lantern uses the Business Profile permission to create anything in one case only: when someone in the agency confirms that a client's storefront qualifies and presses “Create Business Profile”, Lantern creates that location, with the name, address, phone and category they enter, in the Business Profile account they choose. It never edits or deletes an existing profile.
Lantern's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Google user data is used only to produce the reports the agency asked for; it is not sold, not used for advertising, not used to train AI or machine-learning models, and not shared with anyone other than the agency that connected the account.
Other sources
Agencies may also connect Qwairy with their own API key, and Hushlab with a reporting token, which gives Lantern monthly click counts for their ads and no visitor data. Lantern uses its own DataForSEO account for site audits, backlinks and search rankings: the website addresses and keywords an agency enters are sent to DataForSEO to run those checks. Lantern also reads public Core Web Vitals figures from Google’s Chrome UX Report with its own key.
How data is stored
OAuth tokens and API keys are encrypted at rest. Report figures are stored so reports can be compiled; compiled reports are stored as PDFs in private cloud storage and shared only through links that expire within minutes.
Removing access and deleting data
An agency can remove Lantern's access to a Google account at any time at myaccount.google.com/permissions; Lantern stops syncing immediately. To have your account or the data from a connection deleted, email [email protected], or ask the agency that connected it; it is deleted within 30 days of the request.