Privacy Policy
Last updated: July 7, 2026
Goodfellas Tech (“we”, “us”) provides SEO analysis for websites you own or manage. This policy explains what data we access, how we use and protect it, and your choices. Questions: info@goodfellastech.com.
Google user data we access
When you connect your Google account, we request read-only access to:
- Google Search Console (
webmasters.readonly) — impressions, clicks, click-through rate, average position, and queries for the properties you choose. - Google Analytics 4 (
analytics.readonly) — engagement metrics used to prioritize which pages to improve.
We only ever read this data. We never post, modify, or delete anything in your Google account.
How we use it
Google Search Console and Analytics data is used solely to generate SEO recommendations for your own websites and to show you the resulting analysis. We do not use it for any other purpose.
How we protect and store it
- Your Google authorization token and any other third-party credentials are encrypted at rest using application-level encryption. Decryption happens only inside our backend job worker at the moment of running your analysis.
- Credentials are never exposed to your browser and are never logged.
- Access is scoped per account; other customers cannot see your data.
Support access to your account
To investigate a problem you report — or a fault we detect — authorized SearchLift staff may access your account. We keep this tightly bounded:
- Only platform administrators can do it, and only after recording a written reason.
- The default is read-only: staff view your account state without signing in as you. Signing in as you requires a separate, explicit confirmation and is used only when read-only access isn't enough to diagnose the problem.
- Every session is time-limited (30 minutes) and recorded — who accessed the account, when, and why.
- Staff cannot delete your account, change your billing, change your password, or connect or disconnect your credentials while accessing it. Support access is for diagnosis, not for acting on your behalf.
- Your Google Search Console and Analytics data remains subject to the Limited Use terms below; support access does not change how that data may be used.
Limited Use
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not:
- sell your Google user data;
- use it for advertising;
- transfer or disclose it to third parties except as needed to provide the service, to comply with applicable law, or as part of a merger or acquisition;
- allow humans to read it, except with your explicit consent, for security or to comply with the law, or where the data is aggregated and anonymized.
We do not use Google user data to develop, improve, or train generalized or non-personalized AI/ML models.
Data sharing
We use infrastructure sub-processors (hosting, database, and the AI model provider used to draft SEO suggestions) strictly to operate the service. We do not sell your data to anyone.
Retention and deletion
You can disconnect a data source at any time, which revokes the stored token and stops further access. You may also revoke access directly from your Google Account permissions page. On request to info@goodfellastech.com, we will delete the data associated with your account.
Changes
We may update this policy; material changes will be reflected by the “Last updated” date above.