Google data privacy
Your Google connection is optional and read-only. Sitecove uses it to report on your managed website’s search performance. You can disconnect the website and contact us to request deletion of its saved search data.
This notice explains how Sitecove Operations Pty Ltd handles information obtained through the Sitecove Dashboard Google Search Console integration. It supplements our general privacy policy for this connection. It does not change Agency pricing, billing, allowances or existing service agreements.
What we access
After you authorise the connection, Google provides a list of Search Console properties available to your Google account and their permission levels. We use it to identify properties covering your managed website. Only a matching property you select is connected to that website in Sitecove.
For that property, we retrieve search-performance information such as clicks, impressions, click-through rate, average position, dates, search queries, landing pages, countries and device categories. Google may omit anonymised queries or limit the available rows. We also store the access and refresh tokens needed to maintain your authorised connection.
We request only webmasters.readonly. This integration cannot edit your Search Console properties, access Gmail or Google Drive, or obtain your Google password.
How we use the information
We use this data to provide your website’s performance dashboard, comparisons, keyword observations, prioritised opportunities and saved search reports. Relevant summaries may appear in your Sitecove care reports and account notifications. Authorised Sitecove staff may review these reports to provide the website services and support you request.
The Search Console integration does not sell Google data, use it for advertising, provide it to data brokers, or send it to generative AI services. We do not use Google data to train general-purpose AI models.
Where it is stored and shared
Search data and reports are stored in Sitecove’s Cloudflare-hosted application and are separated by customer account and managed website. Stored OAuth tokens are encrypted. Operational recovery copies are encrypted and held in our protected hosting and offsite backup systems.
Our infrastructure providers process information to operate and recover the service. Cloudflare provides application hosting and storage. Resend processes transactional email where a report or account notification is sent to your authorised account contacts. We limit access to the information needed for these functions and to authorised Sitecove personnel.
Disconnecting and revoking access
Use Disconnect in the website’s Search performance section to remove its locally stored connection tokens and cancel queued or running syncs. Saved search history and reports remain available in your account until deleted.
You can also remove Sitecove’s access through your Google Account connections. Removing the Google permission can affect other Sitecove website connections authorised through the same Google account.
Retention and deletion
We retain saved search data and reports to provide your account’s reporting history. Disconnecting stops collection but does not delete that history. To request deletion of saved Search Console information, email ops@sitecove.com from your account email and identify the managed website.
We verify your authority, explain any information that must be retained, and process the deletion request. Encrypted recovery copies may contain earlier versions; their removal is handled through our backup-retention and recovery process. Search reporting data is not treated as a financial record merely because it appears in the same customer account.
Google’s data-use requirements
We handle Google API information under the Google API Services User Data Policy, including its Limited Use requirements. Any additional purpose or permission requires an updated disclosure and the required consent.
Questions or requests
Contact ops@sitecove.com about this connection, its privacy practices or a deletion request. Include your website and account email. Do not email passwords, verification codes or Google access tokens.