Privacy Policy

Groptim uses your email address and authentication information to create your account and keep your reports associated with it. When you use Google sign-in, Google can also provide your name and profile picture as part of your sign-in profile.

Our Supabase database stores your account profile, submitted domains, saved audit reports, visibility results, report settings and local purchase, pass and audit-credit records. These records support sign-in, report history, paid access and usage limits.

To run an audit, Groptim retrieves publicly available website content and sends relevant website content, domains, brand information, search queries and prompts to the AI and search providers configured for the service. Those providers process the requests to return the answers and search results used in your report. Do not submit confidential material for an audit.

Supabase provides authentication and database services. Where checkout is available, Paddle processes payments and retains its own transaction records. Groptim stores order and pass information, but does not store your full card number or security code.

The providers explain their own handling of personal information in the Supabase Privacy Policy and Paddle Privacy Policy.

Google sign-in identifies you; it does not grant access to Search Console. Connecting Search Console is a separate, optional authorization for read-only data. It only covers website properties that the connected Google account is already permitted to access.

When connected, Groptim stores the connection email, any selected property reference and an encrypted refresh token. The server uses that token to retrieve Search Console data for the relevant report. Weekly brand-search metrics are fetched for display, not saved as a separate analytics history. Search Console analytics are not sent to AI providers.

We use Google account data only for the sign-in and Search Console features you authorize. We do not sell that data, use it for advertising or use it to train AI models. Transfers are limited to providing those features, security needs or legal requirements. Human access is limited to your specific consent, security investigations or legal requirements.

Our handling of Google account data is subject to the Google API Services User Data Policy, including its Limited Use requirements. We will ask for consent before using Google data for a new purpose beyond the authorization and disclosures you accepted.

You can disconnect Search Console in Groptim. This removes the stored connection and attempts to revoke its Google token. You can also review or remove access from your Google Account connections.

Authentication cookies keep you signed in. Your appearance preference is stored in your browser. Payment and authentication providers may use their own cookies when you use their services. Technical logs and usage-limit records help operate the service and investigate errors or abuse.

Account records are scoped to their owner. Sensitive integration tokens are encrypted before database storage and used on the server. These safeguards do not make any online service risk-free.

You can request permanent deletion from Profile after signing in. The flow requires an email verification code and an explicit deletion confirmation.

Successful deletion removes your Groptim authentication account, profile, saved reports, report settings, stored connections and associated local orders, passes and credit records. Unused credits and access to saved reports are lost. We also attempt to revoke the stored Search Console token. This does not delete your Google account or automatically issue a refund.

Payment-provider receipts and records are not removed by deleting your Groptim account. Copies in operational logs or backups may not be erased immediately and remain subject to the relevant providers' retention processes. Account deletion cannot remove reports or PDFs you have already downloaded or shared.

Read the account-deletion details.

You can view your saved reports in your account and download available PDFs, disconnect Search Console without deleting your account, or use the account-deletion flow. Removing Google access does not by itself delete information already saved in Groptim.

We keep account and report information while your account remains active, subject to the deletion process and retention limits described above. This page will be updated when our data practices change; the date at the top identifies the latest revision.