Read-only by design
You’re trusting GSC Boost with your search data. Here is exactly what it can access, where the data lives and how it’s protected, in plain language.
- Read-only Google access
- No credit card for the demo
- Cancel anytime
Read-only Google access
GSC Boost asks Google for read-only scopes. It can read your Search Console and Analytics data; it can’t change anything.
Tokens stay on the server
Google sends the authorization to our server, which stores the tokens. Your browser never holds your Google refresh token.
Encrypted in transit and at rest
Every connection uses TLS. The database and its backups are encrypted at rest by our hosting provider.
Row-level security
Your records are scoped to your account inside the database itself, not only in application code.
Payments by Stripe
Card details go straight to Stripe. We never see or store your full card number.
Deletion on request
Revoke Google access at any time, and ask us to delete your account and data whenever you like.
What GSC Boost can access
Google shows you exactly what GSC Boost is asking for on its own consent screen, and you can approve or decline. Signing in with Google only shares your basic profile. Search Console and Analytics access is a separate, read-only grant.
| Google scope | What it allows | When we ask |
|---|---|---|
| openid · email · profile | Your name, email address and profile picture, to create and identify your account. | When you sign in with Google |
| webmasters.readonly | Read Search Console performance data (queries, pages, clicks, impressions, CTR, position), your list of properties and URL inspection results. | When you connect Google |
| analytics.readonly | Read Google Analytics 4 reports. GSC Boost only requests reports for properties you select in the app. | On the same consent screen |
What GSC Boost can’t do: change Search Console or Analytics settings, submit or remove URLs and sitemaps, add or remove users, or act on your behalf anywhere else in your Google account.
How Google tokens are handled
When you connect Google, Google returns an authorization code to our server. The server exchanges it for tokens and stores them in our database, scoped to your account with row-level security. Your browser never receives your Google refresh token.
Tokens are used only by our server functions, only to fetch the data you ask for in the app. You can revoke access at any time from your Google Account; access stops immediately.
Where your data lives
- Database and authentication run on Supabase (managed PostgreSQL) with row-level security on user data.
- Server logic runs in Supabase Edge Functions. Third-party API keys live in server-side secrets and never ship to the browser.
- The website and app are served by Vercel over HTTPS.
- WordPress connections store your application password in an encrypted secrets vault, not in a regular table.
- Encryption: TLS for every connection; the database and backups are encrypted at rest by our provider.
AI features and third parties
When you use the AI assistant, generate a brief or run an AI visibility check, GSC Boost sends the AI provider only what that request needs, through an AI gateway. Keyword, SERP, backlink and crawl features send keywords, domains and URLs (not your Google data) to the data providers that power them.
We don’t sell your data, and we don’t use Google user data to train AI models. The full list of providers is in the app’s privacy policy.
Payments
Payments are processed by Stripe, which is certified as a PCI DSS Level 1 Service Provider. Card details go directly to Stripe; we store only references such as your Stripe customer ID, plan and subscription status.
Your controls
- Revoke Google access from your Google Account at any time.
- Delete your account and data: email support@anotherseoguru.com from the address on your account. We delete your account, stored Google tokens and workspace data; copies in backups expire on their normal schedule.
- Export your work: every table in the app exports to CSV.
Certifications
We’re a small team and don’t hold SOC 2 or ISO 27001 certifications ourselves. We build on providers that run their own audited security programs, keep our own footprint small and read-only, and are happy to answer specific questions.
Responsible disclosure
If you believe you’ve found a security issue, email support@anotherseoguru.com with “Security” in the subject, a description and steps to reproduce. Please don’t access other people’s data, degrade the service or disclose the issue publicly before we’ve had a reasonable chance to fix it. We’ll acknowledge your report and keep you updated while we work on it.
Your next customers are already searching. Let’s find them.
A free SEO audit in 24 hours
Send us your website. You get the issues that cost you customers, what to fix first and a fixed price, in your language.
GSC Boost: Search Console as a to-do list
Connect Google read-only and get the fixes that win the most clicks, ranked and estimated, for every site you manage.