Privacy Policy

Bulk Stats Checker (“we”, “our”, “the app”) is a read-only Google Search Console dashboard. We collect the minimum data required to show you your search performance and nothing else. We do not sell your data, share it with advertisers, or use it to train machine-learning models.

• Google account information — your name, email address, and profile picture, provided by Google when you sign in.
• Google Search Console data — clicks, impressions, CTR, average position, indexing coverage, and query/page/country/device breakdowns for the properties you have access to in Search Console. We sync this automatically each day.
• OAuth refresh token — to sync your data without requiring you to re-authenticate each day. Encrypted at rest using AES-256-GCM. Never sent to the browser.
• Optional integration credentials — if you configure Resend (email alerts), Slack, Telegram, or IndexNow in Settings, those API keys are stored encrypted at rest. You can remove them at any time.
• Usage data — standard server logs (IP address, request path, timestamp) retained for up to 30 days for debugging and security purposes.

• We do not access your Google Analytics data.
• We do not read or store your emails or Google Drive files.
• We do not track you across other websites.
• We do not use third-party advertising or tracking pixels.
• We do not use your data to train AI or ML models.

• To display your Search Console metrics inside the dashboard.
• To detect drops, gains, and opportunities and surface them to you.
• To send alerts you configure (email, Slack, or Telegram).
• To generate reports you request (PDF, CSV, or scheduled summaries).
• To maintain your account and authenticate you on return visits.

We access Google Search Console data exclusively through the official webmasters.readonly OAuth scope. This scope is read-only — we cannot make changes to your Search Console settings or properties.

• All data is stored in a PostgreSQL database hosted on Neon (US East region) with encryption at rest.
• OAuth refresh tokens and integration API keys are encrypted with AES-256-GCM before being written to the database. The encryption key is stored separately as a server-side environment variable.
• All traffic is served over HTTPS (TLS 1.2+).
• The app runs on Vercel infrastructure with SOC 2 Type II compliance.

We do not sell, rent, or share your personal data with third parties, except:

• Infrastructure providers — Neon (database), Vercel (hosting). Both are bound by data processing agreements.
• Google — your OAuth token is used to call the Google Search Console API on your behalf.
• Legal requirements — if required by law or a valid court order, we may disclose data to government authorities.

• Access — all your data is visible inside the dashboard.
• Correction — contact us to correct inaccurate account information.
• Deletion — you can delete your account and all associated data at any time from Settings → Delete account. Deletion is immediate and permanent.
• Revoke access — you can revoke our access to your Google account at any time at myaccount.google.com/permissions. This stops future syncs but does not delete data already stored — use the account deletion flow for that.

We retain your Search Console data for as long as your account is active. When you delete your account, all data — metrics, keywords, alerts, integrations, and your OAuth token — is permanently deleted within 24 hours.

Bulk Stats Checker is intended for professional and business use. We do not knowingly collect data from anyone under 16 years of age. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

We may update this policy as the product evolves. Significant changes will be communicated by email or an in-app notice. The “last updated” date at the top of this page reflects the most recent revision.

Questions about this policy or your data? Email us at coloradoproelectricians@gmail.com.