Privacy Policy

This policy explains what AI Search Connector does with your data, and in particular with the Google account data you choose to share. AI Search Connector is operated by LLM PULSE SL, which is the data controller for the processing described here.

1. Who we are

LLM PULSE SL
NIF: B27561133
Passeig de Gracia 53, Atico 1a
08007 Barcelona, Spain
Email: support@aisearchconnector.com

2. What Google user data we access

You connect your own Google account on purpose, and Google shows you what is being requested before you agree. We ask for two read-only permissions:

Google Search Console (webmasters.readonly)

• The list of sites your Google account can access, so you can choose one.
• Search performance for the site you choose: search queries, pages, clicks, impressions, click-through rate, and average position.

Google Analytics (analytics.readonly)

• The list of Google Analytics 4 properties your account can access, so you can choose one.
• Aggregated report data for the property you choose, such as sessions, users, pages, and where the traffic came from.

3. Why we use it

Only to produce the reports you asked for, inside the reporting portal you connected the account to. Your Search Console and Analytics figures appear next to that portal's own data so you can see them together. If you choose to, your most searched Search Console queries can also become prompts that the portal tracks in AI assistants. We do not use your Google data for advertising, we do not use it to build profiles, and we do not use it to train machine learning or artificial intelligence models.

4. Limited Use

5. Data protection and security

We treat the Google user data you share with us as sensitive data. These are the measures that protect it.

Encryption in transit

• All traffic between your browser and AI Search Connector or your reporting portal, and between our servers and Google's APIs, is encrypted with HTTPS (TLS). Plain HTTP requests are redirected to HTTPS, and our sites tell browsers to use HTTPS only (HSTS).

Encryption at rest

• The OAuth access and refresh tokens that let us read your Google data are encrypted in our database with AES-256-GCM. The encryption key is kept apart from the database, so a copy of the database alone does not reveal them. Tokens never appear in our interface or in our logs.
• Backups are encrypted before they leave our servers (database backups with AES-256) and are stored in the European Union.

Where your data is stored

• The Search Console and Analytics figures we fetch are stored in our database, so your reports load quickly and can show history. The database runs on dedicated servers in a data center in Germany, and it accepts connections only from those servers: it cannot be reached from the internet.

Access control and least privilege

• We request only two read-only permissions, so AI Search Connector cannot change anything in your Google account.
• Your Google data is shown only to the signed-in users of the reporting portal account you connected it to, within that account's projects and the permissions its owner gives each team member.
• Only the few engineers who operate the service can reach our production systems. Server access uses individual SSH keys, password logins are disabled, the servers run a firewall, and repeated failed login attempts are blocked automatically. Console sessions on our production servers are recorded for review, and staff actions in our admin tools are kept in an audit log.
• People at LLM PULSE SL do not read your Google data, except when you ask us to (for example to answer a support request), when it is needed for security, such as investigating abuse, when the law requires it, or in aggregated form to operate the service.

Retention and deletion

• We keep your Google data only while the connection is active, and we delete it when the connection is removed. Encrypted backups expire automatically, so removed data is gone from every backup within three months. Section 7 explains how to remove access and ask for deletion.

Security incidents

• If a security incident affects your personal data, we will notify the supervisory authority and the people affected, as the GDPR requires.

6. Who we share it with

We do not sell your data, and we do not share it with third parties for their own purposes or for advertising. Your Google data is visible to you and to the account that runs the reporting portal you connected to, which is the party you already share your reporting with. That account can also see it in its reports, exports and API.

Service providers process it on our instructions and under contract: hosting and backups in the European Union, error monitoring, AI model providers that power the portal's assistant and run the prompts you choose to track, and data providers that collect AI answers for those prompts.

We may disclose data if the law requires it, and we will tell you unless we are legally prevented from doing so.

7. How long we keep it, and how to delete it

We keep the connection and its data for as long as the connection is active. When you disconnect the account, we delete the connection and its stored token, and we delete the Google data we had fetched for that property. Encrypted backups expire automatically, within three months.

You can remove access in two ways, and either one works on its own:

• Ask your portal provider to disconnect the account.
• Remove our access from your Google Account at myaccount.google.com/permissions.

To have data we already fetched deleted, write to support@aisearchconnector.com and we will do it.

8. Your rights

Under the GDPR you can ask us for a copy of your personal data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Write to support@aisearchconnector.com. You also have the right to complain to the Spanish data protection authority (AEPD) or to the authority where you live.

9. Changes to this policy

If we change how we handle your Google data, we will update this page and change the date at the top. If the change is significant, we will tell the account that owns the connection.

10. Contact

LLM PULSE SL, Passeig de Gracia 53, Atico 1a, 08007 Barcelona, Spain.
support@aisearchconnector.com