Connecting Google grants us read-only Search Console access (webmasters.readonly) — used solely to run your scan. We can't change anything in your account, and you can revoke access anytime in your Google permissions.
Your Google tokens live only in an encrypted session cookie — never in our database. Scan results are encrypted and cached for 7 days; purchased reports are deleted after 90 days.
Payments are processed by Stripe; we never see your card details. Analytics are minimal and cookie-less. We don't sell data, full stop.