Privacy Policy — AskGSC
Last updated: 22 September 2026
Service: https://askgsc.com
Operator: AskGSC (askgsc.com), operated by Daryl Bleach.
What AskGSC is
AskGSC connects to your Google account and Google Search Console (read-only), caches Search Analytics for properties you choose, and generates action plans from that cache (including via Anthropic when configured). Paid plans are billed through Stripe.
Data we process
- Account: Google account identity (name, email, Google user id) via Google sign-in.
- Search Console: OAuth tokens (stored encrypted) and Search Analytics you authorise us to read (queries, pages, clicks, impressions, CTR, position, dates) for selected properties.
- Product usage: Selected properties, plan/subscription status, and Free-tier ask usage counts.
- Billing: Stripe customer and subscription identifiers; card details are handled by Stripe, not stored on AskGSC servers.
- Technical: Standard server/security logs (IP, user agent, timestamps, error diagnostics). We avoid logging secret values.
How we use data
- Authenticate you and keep you signed in.
- Pull and cache Search Console data you connect, to answer your questions.
- Enforce Free/Starter/Pro limits and provide billing.
- Operate, secure, and improve the service.
- Comply with law when required.
We do not sell your personal data. We do not use your Search Console data to train public models as a product feature. Prompts and cache summaries may be sent to Anthropic to generate plans when that integration is enabled.
Legal bases (UK GDPR)
- Contract: providing the service you signed up for.
- Legitimate interests: security, abuse prevention, product improvement.
- Legal obligation: where the law requires retention or disclosure.
Sharing
- Google — OAuth and Search Console APIs.
- Anthropic — when generating AI plans from your prompts and cache summaries.
- Stripe — payments and subscriptions.
- Infrastructure — Cloudflare (hosting), Neon (database), R2/object storage for cache as configured.
Processors act on our instructions. We may disclose data if required by law.
International transfers
Providers may process data outside the UK/EEA. Where required, we rely on appropriate safeguards (for example standard contractual clauses) offered by those providers.
Retention
- Account and connection data: while your account is active, then deleted or anonymised within a reasonable period after closure unless law requires longer.
- Cached analytics: retained to serve plans and refreshes; removed when you disconnect or we purge stale cache.
- Billing records: retained as required for tax/accounting.
Your rights (UK)
You may request access, correction, deletion, restriction, objection, or portability where applicable, and you may complain to the ICO (ico.org.uk). Contact: hello@askgsc.com (or the support email shown on the site).
Children
AskGSC is not directed at children under 16.
Changes
We may update this policy; the “Last updated” date will change. Material changes may be notified in-product or by email when appropriate.
Contact
AskGSC — https://askgsc.com — privacy enquiries: hello@askgsc.com