Privacy Policy

We collect only the information needed to provide the Service:

• Google account information. When you sign in with Google, we receive your name, email address, and profile picture (via the OpenID Connect openid, email, and profile scopes) to create and identify your account.
• Google Search Console data (webmasters.readonly). Read-only access to the Search Console properties you own or are authorized for: search-analytics metrics (queries, pages, clicks, impressions, click-through rate, average position) and URL inspection / index-status results.
• Google Analytics data (analytics.readonly). Read-only access to your Google Analytics 4 properties and their aggregated report data.
• Web Search Indexing. When you explicitly choose to do so, we use the Web Search Indexing API (indexing scope) to submit URLs from properties you own to Google for (re)indexing.
• Authentication tokens. The OAuth access and refresh tokens Google issues, stored so the Service can retrieve your data on your behalf without asking you to sign in repeatedly.
• Technical and session data. A single signed session cookie that keeps you logged in, plus standard server logs used for security and diagnostics.

• To authenticate you and maintain your signed-in session.
• To retrieve, display, and analyze your Search Console and Analytics performance data within the Service.
• To submit URLs to Google for indexing when you request it.
• To operate, maintain, secure, troubleshoot, and improve the Service.

We do not use your Google user data for advertising, and we do not sell it.

SEO Console Official’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We access only the Google user data required to provide the features you actively use.
• We do not transfer or sell this data to third parties for advertising, resale, credit assessment, or any other unrelated purpose.
• We do not use the data for serving personalized or targeted advertisements.
• Humans do not read your Google user data, except where you give explicit consent to resolve a specific support issue, where required for security or to comply with applicable law, or where the data has been aggregated and anonymized for internal operations.

• Your account details and synced performance data are stored in a managed PostgreSQL database.
• All traffic between your browser and the Service is served over encrypted HTTPS/TLS, and our database provider encrypts data at rest.
• Your session cookie is cryptographically signed to prevent tampering.
• OAuth tokens are treated as credentials and are used only to call Google APIs on your behalf.

We do not sell your personal information or your Google user data. We share information only in these limited cases:

• Service providers (subprocessors). The infrastructure that runs the Service — our hosting provider (Vercel) and our managed database provider — process data solely to operate the Service on our behalf.
• Google APIs. We send requests to Google services to fulfill the actions you take (for example, reading your Search Console metrics or submitting a URL for indexing).
• Legal requirements. Where required by applicable law, regulation, legal process, or enforceable governmental request.

We retain your account information and synced data for as long as your account is active. You are in control of your data:

• You can revoke the Service’s access to your Google account at any time from your Google Account permissions page. Once revoked, the stored tokens can no longer access your data.
• To delete your account together with your stored profile, tokens, and synced performance data, contact us at tinledoihoa@gmail.com and we will remove it.

The Service uses a single essential, signed session cookie for authentication. We do not use third-party advertising or cross-site tracking cookies.

The Service is intended for website owners and professionals and is not directed to children. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be reflected on this page.

If you have any questions about this Privacy Policy or how your data is handled, contact us at tinledoihoa@gmail.com.