Privacy

Last updated 5 September 2026

This describes what we actually store, taken from the database rather than from a template. If something here is vaguer than the schema, the schema is right and this page is wrong — tell us.

What we hold

  • Your account. Email address, name, and which organisation you belong to. A password only if you set one; sign in with Google and we never see one.
  • Your Search Console grant. A refresh token, encrypted at rest, and the identifier of the property you chose. The grant is read-only — we cannot change anything on your site with it.
  • Your search performance. Impressions, clicks, positions and queries, per page and per day, as Google reports them. This is the measurement, so it is the bulk of it.
  • Your pages’ titles and descriptions, fetched from the public web as any visitor would see them, plus the first paragraph a reader meets.
  • Recommendations and their verdicts, including the ones that did not help.

What we never hold

  • Anything from your site that is not publicly visible. We fetch pages as an anonymous visitor.
  • Your visitors’ personal data. We read aggregate search statistics about pages, never about people.
  • Payment card details. If we ever take payment, a processor does.

Who else sees it

A third-party model provider receives the page title, description and the words a page is missing, in order to write replacement copy — under an agreement excluding training on our traffic. Nothing else is sent, and no search data is.

Patterns learned from your results improve other customers’ recommendations, which is the one thing here that is genuinely unusual and is set out in full under Terms. Nothing identifying you leaves your account.

How long, and how to end it

We keep search data while your account is open, because a verdict compares a window to one recorded weeks earlier and shortening that would break the measurement. Ask and we delete everything within 30 days.

Revoking is not something you need us for. Remove our access in your Google account and the connection stops working immediately, whatever we do.

See also Terms.