Who operates this service
getaudit is a project by dee-young ma / Maxuod. Contact deeyoung_ma@maxuod.com for privacy questions or data requests. The public product site and Mac app have their own privacy information.
What Google shares with us
Google sign-in provides an account identifier, email address and profile name. Read-only Search Console authorization lets the service list accessible properties and read performance data for the property you select. This flow does not request Gmail, Drive or Google Analytics access.
What we save and why
The service stores account and session records, selected websites, encrypted Google authorization tokens, review jobs, Search Console responses, captured public HTML and text, evidence hashes, reports and task progress. They support sign-in, authorized collection, report history and your review workflow.
How Google data is used
Google information is used to provide and maintain the review features you choose. It is not sold, used for personalized advertising or used to train general-purpose AI models. This hosted review currently uses rule-based suggestions and does not send your GSC data to an AI model. Use and transfer of Google API information must follow the Google API Services User Data Policy, including its Limited Use requirements.
Who receives information
Google receives the normal sign-in and API requests. Our hosting and storage providers process data needed to operate this service. Public websites receive ordinary requests when the review reads their pages; those requests carry no customer Google token or login cookie. Support handling is limited to information you choose to provide.
Cookies and browser storage
Essential session and authorization cookies keep you signed in and protect the Google return flow. Session cookies are HttpOnly, and production cookies use Secure and SameSite controls. Your language choice can be saved in browser storage. Customer reports and Google tokens are not stored in localStorage. No advertising or authored analytics scripts are included in this workspace.
Protection and practical limits
Google tokens are encrypted before database storage, and private routes check the signed-in account and website ownership. Connections use HTTPS in the public service. Report content is not separately end-to-end encrypted by this application. Hosting access controls, backup practices and your own handling of exported copies also matter.
Signing out and disconnecting
Signing out ends the current application session; it does not delete reports. Disconnecting Search Console clears the stored Google connection, stops its pending work and attempts Google-side revocation. The app reports if remote revocation fails. You can also remove access from your Google account’s connected-app controls. Saved reports remain unless deleted.
Retention and data requests
Saved account details, projects and reviews are retained to support your workspace until they are deleted. To request access, correction or deletion, contact deeyoung_ma@maxuod.com using the account email. We will confirm the relevant records and any retention needed for a specific request. Copies you export or share are under your control; deleting a server record does not recall those copies.
Changes
If the service changes how it uses Google information, this notice and the relevant in-product explanation must be updated before that new use. Additional authorization will be requested where required.
Related privacy controls
You can also delete your workspace from its account controls. This removes the active account’s saved projects, reports, tasks, sessions and stored Google connection. It does not recall previously exported copies or establish immediate removal from separately retained backups.