Privacy policy

Account and workspace information

DamnVisible uses your DamnBase account identifier and email, workspace membership, the websites and keywords you choose, public website crawl results, and the action plans and completion evidence you create. This information supports sign-in, workspace access and the reports you request. We also store collection status, errors, supplier task references and cost records to troubleshoot failures and enforce collection limits.

Google Search Console data we access and collect

Connecting Google Search Console is optional and requires your authorization. DamnVisible requests the read-only Search Console permission (webmasters.readonly). We read the list of properties your Google account can access and their permission levels, then import search performance for the property selected for your site: dates, search queries, page URLs, countries, devices, clicks, impressions, click-through rates and average positions. We save Google access and refresh tokens, their expiry and the property list to maintain the connection. This integration does not request Gmail, Google Drive or Google Contacts access, or permission to change Search Console settings.

How we use Google user data

We use Search Console data to display your site's search reports, discover queries and pages that may need attention, prioritize rule-based opportunities, and save evidence for action plans and later performance comparisons. While your authorization remains valid, server-side synchronization updates these reports even when you are not signed in. These are the purposes of the Google connection. We do not sell Google user data, use it for advertising or credit decisions, or use or transfer it to develop or train general-purpose AI or machine-learning models. The current SEO recommendations use rules and saved evidence.

Sharing, service providers and human access

Google data and reports are available to members of your workspace according to their roles. Supabase stores application data and credentials; Vercel processes application requests and hosts the service; DamnBase provides account access. These services process information for the functions described here. When you request or schedule external research or ranking checks, the domains and keywords selected for that task are sent to DataForSEO, including a query you chose from Search Console. We do not send Google authorization tokens or imported Search Console performance metrics to DataForSEO. A PageSpeed request sends the selected public page URL to Google. Human access to Google user data is limited to support with your permission, necessary security or abuse investigations, or compliance with applicable law. We do not disclose Google data to advertising platforms, data brokers or information resellers.

Storage and protection

Workspace data, including imported Google data, is stored in Supabase infrastructure, which may process data outside your country. The production application and Google API connections use HTTPS. Database access is restricted by workspace roles and row-level policies. Google access and refresh tokens are encrypted in Supabase Vault and can be read only by authorized server operations, rather than by workspace members through the client API. We use session cookies to keep you signed in and a preference cookie for your chosen language.

Data retention, revocation and deletion

We retain saved reports, Google data and action evidence while needed for your workspace's reporting and history; the beta currently has no automatic age-based deletion schedule for saved reports. You can revoke DamnVisible's access at any time through your Google Account connections. Revocation stops further authorized collection but does not automatically erase stored credentials, imported reports or evidence already copied into action plans. To request deletion of your Google connection, credentials, imported Google data or other DamnVisible workspace data, email support@damnvisible.com and identify the account, workspace and site concerned. We verify your identity and authority before processing the request. Limited security and cost records, and infrastructure backups, may be retained where needed for security, accounting or applicable legal obligations; ask us about any retention that applies to your request. Deleting DamnVisible workspace data does not itself delete your separate DamnBase account.

Google API Limited Use

DamnVisible's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This also applies to reports and other information derived from that data.

Google API Services User Data Policy ↗

Manage Google account connections ↗

Updates and contact

We will update this page when our data practices change. Before using Google user data for a new purpose, we will notify affected users and obtain any required consent. For questions about this policy or your data, email support@damnvisible.com.