Privacy Policy

1. Introduction

Welcome to Authority Radar, operated by Authority Radar, India. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS platform at authorityradar.com. We're committed to protecting your personal data and your right to privacy. If you have any questions or concerns about this policy, please contact us.

2. Information We Collect

We may collect information about you in a variety of ways:

Cookies and local storage

The app uses temporary browser storage only to complete the Google sign in popup. This stores a short lived connection ID so we can finish the connection on our server. Tokens are never stored in the browser.

3. Google User Data We Access

When you connect Google Search Console or Google Analytics 4 to Authority Radar, we access the data described below through two read only OAuth scopes. These are the scopes shown on the Google consent screen:

• https://www.googleapis.com/auth/webmasters.readonly (Search Console, read only)
• https://www.googleapis.com/auth/analytics.readonly (Google Analytics, read only)

Authority Radar never modifies, writes to, or deletes anything in your Search Console or Google Analytics account. Both scopes are read only.

Search Console (connected property only)

• Queries, pages, clicks, impressions, CTR, and average position
• Country and device breakdowns
• Index and URL inspection status for the connected property

Google Analytics 4 (connected property only)

• Daily sessions, users, engaged sessions, engagement rate, and session duration
• Key events (conversions) and revenue
• Traffic channel group (for example Organic Search, Direct, Referral, AI Assistant)
• Session source and medium
• Landing pages and key event names
• Country and device category

Account level metadata (to connect your property)

• List of properties you can access (used for the property picker)
• Property ID and property name
• Time zone and currency

OAuth tokens

We store the access and refresh tokens needed to fetch the data listed above. Tokens are exchanged server side and are never exposed to the browser.

What we do not collect

We do not collect individual user level or user ID level data. We do not collect IP addresses or any user-level identifiers from Google data. We do not collect personally identifiable information from GA4 reports. We only request aggregated report rows.

4. How We Use Google User Data

We use the Google data described above only to:

• Show you your own search performance and traffic reports inside Authority Radar
• Show how AI assistants (for example ChatGPT, Gemini, Perplexity, Copilot) refer visitors to your site and which landing pages they land on
• Compare your AI visibility metrics with your own real traffic and key events
• Identify pages whose traffic is declining so we can recommend fixes
• Send you notifications about your connection status (for example reconnect needed)

Our use of this data is limited to providing and improving these user facing features for you.

5. Limited Use Disclosure

Authority Radar's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

In particular, we commit to the following:

• We only use Google user data to provide and improve user facing features visible in the app.
• We do not sell Google user data.
• We do not use Google user data for advertising, retargeting, personalized or interest based ads.
• We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.
• We do not transfer Google user data to third parties, except as needed to provide the service (our infrastructure processors, listed below), to comply with law, or as part of a merger or acquisition with notice to users.
• Our staff does not read Google user data, except with your explicit consent for a specific support request, for security investigations, or where required by law.

6. Data Storage, Security and Retention for Google User Data

Where your data is stored

Data from your connected Google and Bing services is stored in our database hosted in an EU data center.

How we protect it

• OAuth tokens are encrypted at rest.
• All data is encrypted in transit using HTTPS/TLS.
• Access is restricted so each user only sees their own projects, or projects shared with them through team access.
• OAuth tokens are exchanged server side and are never exposed to the browser.

Retention and deletion

• Google Analytics 4 data is deleted immediately and permanently when you disconnect the property or delete the project.
• Google Search Console data is deleted immediately when you disconnect the property. If the connection stops working (you revoked access in your Google account, the token expired, or errors occur) and is not reconnected within 7 days, the data is deleted automatically after 7 days.
• Bing Webmaster Tools data is deleted immediately when you disconnect.
• When a subscription ends, syncing stops immediately from the next day, and all Google Search Console, Google Analytics 4, and Bing Webmaster Tools data is deleted within 7 days.

After deletion, remaining copies in encrypted backups are overwritten within 7 days.

Authority Radar does not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.

7. Microsoft Bing Webmaster Tools Data

With your authorization, we access the following data from Bing Webmaster Tools:

• Clicks, impressions, and average positions by query and page
• Crawl statistics and crawl issues
• Per URL index status

We use this data to show whether a page is indexed in Bing (Bing's index is used by Microsoft Copilot and other AI search tools) and to show your Bing search performance.

Bing does not provide historical backfill, so your Bing history starts on the day you connect.

Retention and deletion follow the same rules as the Google retention section above. Bing data is deleted immediately when you disconnect.

Authentication uses Microsoft OAuth (read scope) or a user provided Bing API key. API keys are stored encrypted and are deleted on disconnect.

8. Your Choices: Revoking Access and Deleting Your Data

You can stop our access and delete your connected data in any of these ways:

1. In Authority Radar: Go to Project, Integrations, and click Disconnect on the Google Search Console, Google Analytics 4, or Bing card. Deletion then follows the retention section above.
2. In Google: Revoke Authority Radar at https://myaccount.google.com/permissions. Authority Radar detects the revoked token, marks the connection as needing reconnection, and deletes the data per the retention section.
3. By email: Send a deletion request to support@authorityradar.com from your account email. We respond within 30 days and delete all remaining data, including your account data.

Disconnecting stops all further data collection from that source.

9. Use of Your Information

We use your information to provide a smooth, efficient, and customized experience, including:

• Create and manage your account
• Process transactions and send confirmations/invoices
• Send technical notices, updates, security alerts, and administrative messages
• Respond to comments, questions, and support requests
• Monitor and analyze trends, usage, and activity
• Detect, investigate, and prevent fraud and protect rights and property
• Personalize and improve the Service and its features

For Google user data specifically, our use is limited to what is described in the How We Use Google User Data section above.

10. Disclosure of Your Information

Google user data

Google user data is handled under the Limited Use commitments in the Limited Use Disclosure section above. We do not sell Google user data, and we do not use it for advertising.

Sub-processors

We use a small number of sub-processors to run the service: our database and application hosting, located in an EU data center, and our email provider, which is used only to send service notifications (for example connection status).

11. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. OAuth tokens are encrypted at rest, all data is encrypted in transit using HTTPS/TLS, and access is restricted so each user only sees their own projects (or projects shared with them through team access).

12. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal data:

We aim to respond within one month. To exercise these rights, contact us using the details below.

13. Policy for Children

We do not knowingly solicit information from or market to children under the age of 13. If you learn that any data has been collected from children under 13, please contact us using the contact information provided below.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time as we deem necessary in our sole discretion. When we do, we will post the updated policy on this page and update the "Last Updated" date at the top of this Privacy Policy. We encourage you to review this Privacy Policy periodically for any changes.