Start free

Privacy Policy

Last updated

Sense Console ("Sense Console", "we", "us") helps you understand your Google Search Console data and decide what to fix next. This policy explains what we collect, why, who we share it with, and how you can disconnect or delete it. If anything is unclear, email support@sense-console.ai.

Who we are

Sense Console is a trading name of Salvigo Limited, a company registered in England and Wales (company no. 07854552). Its registered office is 124 City Road, London, EC1V 2NX. Salvigo Limited is the data controller for the personal data described in this policy under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For anything about your data, contact us at support@sense-console.ai.

The short version

  • We request read-only access to Google Search Console. We cannot change your website, your Search Console settings or your Google account.
  • We store query-level search performance data for the property you choose, and an encrypted refresh token so we can refresh that data.
  • We never write to Search Console, and we never sell or share your data for advertising or any other purpose.
  • You can disconnect Google at any time, and you can delete your account and all of its data from the Account page.

Google Search Console access

When you connect Google Search Console, we ask Google for these permissions:

  • https://www.googleapis.com/auth/webmasters.readonly: read-only access to the Search Console properties you have verified. We use it to list your properties and to read search performance data for the property you select.
  • openid, email and profile: to identify which Google account is connected, so we can show it on your Account page and keep connections separate.

We do not request, and cannot use, any permission to write to Search Console, submit sitemaps, change settings, add or remove users, or access any other Google product.

What we store

  • Account details: your name and email address. Passwords are handled by our authentication provider and stored only as a secure hash.
  • Connected Google account: the Google account email address and Google account ID.
  • Search Console properties: the site addresses you have verified in Search Console and your permission level for each, so you can choose which one to analyse.
  • Search performance data: for the property you select, query-level data for two consecutive 28-day periods: each search query, and its clicks, impressions, click-through rate and average position.
  • Page data: for each of those queries, up to three pages of your site that appear for it in each period, with their clicks, impressions, click-through rate and average position, so we can name the page each opportunity is about.
  • Opportunities: the recommendations we calculate from that data, and what you do with them (for example saved, dismissed, or marked done with an optional page address you enter).
  • Results: when you mark an opportunity done, the query's clicks, impressions, click-through rate and average position for the 28 days before, and later for the 28 days after, so we can show you what changed.
  • AI explanations: short plain-English explanations of your opportunities, with suggested steps, generated by Anthropic's Claude model (see Who we share data with), and a record of how many tokens each one used so we can control costs.
  • Google refresh token: stored encrypted with AES-256-GCM, and used only to fetch fresh Search Console data. Short-lived access tokens are held in memory for the length of a request and never stored.
  • Feedback and waitlist: if you join the waitlist we store your email address. If you send feedback we store your rating, message and the page you sent it from, and email it to our team.
  • Contact form: if you use the contact form, we email your name, company name, email address and message to our team so we can reply. We do not store the message in Sense Console. To stop the form being misused, we keep a one-way scrambled (hashed) form of your IP address, never the address itself, and delete it after one day.

What we never do

  • We never write to, change or delete anything in your Search Console account or on your website.
  • We never sell your data, or share or transfer it to third parties for advertising, marketing or data brokering.
  • We never use Google user data to serve advertisements, including retargeting or interest-based ads.
  • We never use Google user data to train or improve generalised artificial intelligence or machine learning models.
  • We never allow humans to read your Google user data, except with your explicit permission for a specific support request, where needed for security (for example investigating abuse), to comply with the law, or when the data is aggregated and anonymised for internal operations.

Google API Services User Data Policy and Limited Use

Sense Console's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice, we use Google user data only to provide and improve the user-facing features of Sense Console that you can see in the app: listing your properties, importing search performance data, calculating and showing your opportunities, and explaining them.

To explain an opportunity, we send Anthropic a short summary of that one opportunity: the search query, its type and priority, summarised clicks, impressions, click-through rate and average position for the two 28-day periods, the page it relates to and your site's domain. We never send your raw Search Console data, your name, email address or any other account details. This transfer is only to provide the explanation you see in the app.

How we use your data

  • To run the service: sign you in, import your data, calculate opportunities and show them to you.
  • To explain each opportunity in plain English, with suggested steps, using Anthropic's Claude model.
  • To email you about your account, such as sign-up confirmation, password resets, the inactivity notice described under How long we keep data and, while sign-ups are invite only, invitations and waitlist updates.
  • To send a weekly digest email with your new opportunities and measured results, only in weeks when there is something new. It is on by default. Turn it off at any time from the Emails section of the Account page, or with the unsubscribe link in any digest, which works without signing in.
  • To understand how the public website is used, through Google Analytics (see Cookies below). Google Analytics does not receive your Search Console data.
  • To keep the service secure and to comply with legal obligations.

Who we share data with

We use a small number of service providers to run Sense Console. They process data only on our instructions:

  • Supabase: database and authentication. Data is stored in the EU West (London) region.
  • Vercel: hosting for the website and application.
  • Resend: sending account and notification emails.
  • Anthropic: generating the plain-English explanations of your opportunities. Anthropic receives only the summarised search metrics described above, never account details, and under its commercial terms does not train its models on data sent through its API.
  • Google: the Search Console API, which provides your data, and Google Analytics on our website.
  • Stripe: payment processing for subscriptions, described under Payments and Billing below.
  • Sentry: error monitoring, so we can find and fix problems. Data is stored in the EU (Germany). When something goes wrong, Sentry receives technical details of the error and, if you are signed in, your user ID only. It never receives your email address, IP address, cookies or the content of your requests.

We may also disclose information if required by law.

Payments and Billing

How payments are processed

Payments for Sense Console subscriptions are processed by Stripe. When you subscribe, you enter your payment details directly into Stripe's secure checkout. Sense Console and Salvigo Limited never receive, see or store your full card number, expiry date or security code. All payment card data is handled by Stripe, which is certified to PCI DSS Level 1, the highest standard in the payments industry.

What billing information we hold

To manage your subscription, we receive and keep a limited set of information from Stripe:

  • your name, email address and, where provided, company name and billing address
  • your VAT or tax identification number, where you provide one
  • your subscription plan, billing frequency, renewal date and status
  • a record of payments, invoices and failed payments
  • a customer reference generated by Stripe that links your Sense Console account to your Stripe record

Why we use it and our lawful basis

We use this information to provide and manage your subscription, which is necessary to perform our contract with you. We keep financial and transaction records to meet our accounting and tax obligations, which is a legal obligation. We use it to prevent fraud, recover unpaid amounts and protect our business, which is in our legitimate interests.

Stripe's role

Stripe processes payments on our behalf. Stripe also acts as an independent controller of some personal data for its own purposes, including fraud prevention and meeting its own legal and regulatory obligations. Stripe's handling of your data is governed by its own privacy policy, available at stripe.com/privacy.

International transfers

Stripe operates globally and may process your payment information outside the UK and European Economic Area, including in the United States. Where this happens, the transfer is protected by appropriate safeguards, including the UK International Data Transfer Addendum, the EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework and its UK extension.

How long we keep billing records

We keep invoices and transaction records for six years from the end of the financial year they relate to, as required by HM Revenue & Customs. Other billing information is deleted or anonymised once it is no longer needed for these purposes.

Cookies

We use essential cookies to keep you signed in, and one to remember your cookie choice. These are needed for the site to work, so they are always on.

Google Analytics cookies measure visits and page views. They are set only if you choose Accept analytics in the cookie banner. If you reject them, or never choose, Google Analytics does not run. You can change your choice at any time from Cookie settings at the bottom of every page, or here: .

How to disconnect Google

On the Account page, choose Disconnect. We immediately delete the stored Google refresh token, so we can no longer read any new data. Search data we already imported stays visible in your account until you delete it. You can also remove Sense Console's access from your Google account at any time at myaccount.google.com/permissions.

How to delete your data

On the Account page, choose Delete my account and confirm. We then:

  1. ask Google to revoke Sense Console's access to your Google account;
  2. delete your workspace, connected properties, imported search data, opportunities and their explanations, feedback and stored Google credentials, except invoices and transaction records, kept for six years;
  3. remove your waitlist entry, if any, and delete your login.

Deleted data may remain in our providers' encrypted backups for a short period until those backups expire. You can also ask us to delete your data by emailing support@sense-console.ai.

How long we keep data

We keep your data while your account is active, and delete it when you delete your account as described above. If you disconnect Google, we delete the refresh token immediately. If a subscription ends for any reason, your account moves to the Free plan and nothing is deleted. If nobody signs in to or visits an account for 6 months, we email the account owner a notice. If nobody signs in within 30 days of that notice, we delete the account in the same way as when you delete it yourself. We never delete an account with an active paid subscription for inactivity. Invoice and transaction records are kept for six years, as described under Payments and Billing.

Security

Data is encrypted in transit. Google refresh tokens are encrypted at rest with AES-256-GCM. Database access is restricted so each account can only read its own data.

Your rights

Under UK GDPR you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Email support@sense-console.ai and we will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we would appreciate the chance to put it right first.

Children

Sense Console is a business tool and is not intended for anyone under 16.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change materially affects how we use Google user data, we will tell you and ask for your consent where required.

Contact

Questions about privacy or your data: support@sense-console.ai. Post: Salvigo Limited, 124 City Road, London, EC1V 2NX.