Privacy Policy

Account information. When you create an account, we collect the information needed to authenticate and operate your account (such as your email address and authentication identifiers), handled through our authentication provider.

Project information. Information you enter about your projects (such as site domain, market, and content goals) so the Service can generate recommendations.

Google user data. If you connect a Google Search Console property, we access a limited, read-only subset of your Google data — described in the dedicated section below.

Usage and analytics. We collect limited product-analytics and error-monitoring data (such as events, device/browser information, and error diagnostics) to operate, secure, and improve the Service. We use this to understand how the product is used and to fix problems.

When you connect a Google Search Console property to Lavan.tools, we access a limited, read-only subset of your Google account data using the https://www.googleapis.com/auth/webmasters.readonly scope.

What we access. With your explicit consent, we read Search Console performance data for the property you choose to connect: search queries, impressions, clicks, click-through rate, and average position, along with the list of verified properties on your account (so you can select one to connect). We request read-only access. We do not modify, add to, or delete any data in your Search Console account.

How we use it. We use this performance data solely to generate content-strategy recommendations for you — for example, identifying which pages to create or improve based on your own search performance. We do not use your Google user data for advertising, and we do not use it to train machine-learning or AI models.

How we store it. We store the performance data associated with your connected property, and an encrypted OAuth token that lets us refresh access. Authentication tokens are encrypted at rest using industry-standard encryption (AES-256-GCM). Tokens are never exposed to your browser and are never written to our application logs.

How we protect it.Access to your data is scoped to your account; other users cannot access your connected property's data. Tokens are encrypted at rest, transmitted over HTTPS, and used only server-side to call Google's APIs on your behalf.

Whether we share it. We do not sell your Google user data and we do not share it with third parties. It is used only to provide the Lavan.tools features described above. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How to disconnect and delete.You can disconnect a Search Console property at any time from within Lavan.tools. Disconnecting revokes our stored access (on a best-effort basis with Google) and deletes the stored data we hold for that property — the connection record, the encrypted tokens, and the stored performance metrics for that property. You can also revoke Lavan.tools' access directly from your Google account at https://myaccount.google.com/permissions.