Privacy Policy

Last updated: November 1, 2026

SearchCon ("we") lets you query your own Google Search Console, Google Analytics and Bing Webmaster Tools data from AI assistants such as ChatGPT and Claude. This policy explains what we access, what we keep, and your choices.

Google user data we access

When you sign in with Google you grant us read-only access to:

• Basic profile (name, email address, profile picture) to create your account.
• Google Search Console (webmasters.readonly): search performance, URL inspection and sitemap data for properties your Google account can access.
• Google Analytics (analytics.readonly, optional): GA4 property lists and report data such as sessions, key events and revenue.

Bing data we access

If you choose to connect Bing Webmaster Tools, you sign in with your Microsoft account and grant us read-only access (webmaster.read) to the search traffic, crawl, URL and sitemap reports for the sites in your Bing Webmaster Tools account. We cannot change your Bing settings or submit anything to Bing.

How we use it

We request Search Console, Analytics and Bing data only when you, through a connected AI assistant, ask a question that needs it. The response is passed to that AI assistant to answer you and is not stored in our database. To make repeated questions faster we may hold an identical response in server memory for up to 10 minutes, after which it is discarded.

What we store

• Your account details (Google ID, name, email, avatar URL) and plan.
• An encrypted Google refresh token so we can fetch data when you ask, plus the list of permissions you granted.
• If you connect Bing, an encrypted Bing refresh token. Disconnecting Bing deletes it.
• A count of requests per day (tool name and time only, no data or questions) to enforce plan limits.
• Connection records for the AI apps you authorize (hashed tokens, app name).

Sharing

Data you request is sent to the AI assistant you connected (for example OpenAI's ChatGPT or Anthropic's Claude), which handles it under its own privacy policy. We do not sell your data, use it for advertising, or share it with anyone else. Payments are processed by Stripe; we never see your card details.

Limited Use

SearchCon's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to train AI or machine-learning models, and humans at SearchCon do not read it except with your permission, for security, or to comply with law.

Your choices

• Disconnect on your account page revokes our Google access and every AI connection.
• Delete account removes your account, token and usage records.
• You can also revoke access at myaccount.google.com/permissions.

Security

Traffic is encrypted with HTTPS. Google tokens are encrypted at rest, AI-app tokens are short-lived and signed, and refresh tokens are stored only as hashes.

Contact

Questions? Email hello@searchcon.co.