Back to home

Privacy Policy

Last updated: April 3, 2026

1. Introduction

GSCdaddy ("we", "us", "our") operates gscdaddy.com. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

2. Information We Collect

When you use GSCdaddy, we collect:

  • Account information: Your name, email address, and profile picture from your Google account.
  • Google Search Console data: Read-only access to your search performance data including queries, pages, clicks, impressions, and positions. We never modify your Search Console data.
  • Usage data: How you interact with our service, including pages visited and features used.
  • Payment information: Billing details are processed by our payment provider (Dodo Payments). We do not store your credit card information.

3. How We Use Your Information

  • To provide and maintain our service, including displaying your Search Console analytics and generating AI-powered recommendations.
  • To process your subscription and payments.
  • To send you service-related emails (weekly summaries, alerts, account notifications).
  • To improve our service and develop new features.

4. Data Storage and Security

  • Your data is stored on Supabase (PostgreSQL) with row-level security enabled.
  • Google OAuth tokens are encrypted at rest using AES-256-GCM encryption.
  • All connections use HTTPS/TLS encryption in transit.
  • We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Third-Party Services

We use the following third-party services:

  • Google: OAuth authentication and Search Console API access.
  • Supabase: Database and authentication infrastructure.
  • Anthropic (Claude): AI-powered recommendation generation. Your search data is sent to generate recommendations but is not stored by Anthropic.
  • Dodo Payments: Payment processing.
  • Vercel: Application hosting.

6. Google API Scopes

We request the following Google OAuth scopes:

  • email and profile — to identify your account.
  • webmasters.readonly — read-only access to your Search Console data. We cannot and do not modify anything in your Google Search Console.

7. Data Retention and Deletion

  • We retain your Search Console data for as long as your account is active.
  • You can disconnect your Google account and delete your data at any time from the Settings page.
  • Upon account deletion, all your data (including synced Search Console data, recommendations, and account information) is permanently deleted within 30 days.

8. Your Rights

You have the right to:

  • Access and export your data.
  • Request correction of inaccurate data.
  • Request deletion of your account and data.
  • Revoke Google Search Console access at any time through your Google Account settings.

9. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on our website.

11. Contact

If you have questions about this Privacy Policy, contact us at sushi@gscdaddy.com.