AEORank Privacy Policy & Google API Services Limited Use Disclosure (2026)

AEORank is a privacy-first technical SEO, AEO, and GEO diagnostic platform that processes website telemetry and optional read-only Google Search Console OAuth 2.0 data strictly to generate your customer dashboard reports. We encrypt all OAuth credentials with AES-256-GCM and never sell, share, or use private Search Console data for third-party model training.

1. Scope of Data Collection & Diagnostic Processing

AEORank collects only the minimum technical telemetry required to audit public web pages across our 62 deterministic SEO, AEO, and GEO checks, deliver your requested PDF and Excel diagnostic reports, and maintain your Drift Guard subscription account. Public trial scans inspect publicly accessible HTTP headers, HTML metadata, /robots.txt, /sitemap.xml, and /llms.txt files.

2. Google API Services User Data Policy (Limited Use Compliance)

AEORank's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, when you optionally connect your Google Search Console account via 1-Click OAuth 2.0:

Read-Only Scope Only: AEORank requests only the read-only scope (https://www.googleapis.com/auth/webmasters.readonly) and basic account email identification to verify domain ownership and display 28-day search performance metrics inside your private dashboard.
Authenticated Encryption at Rest: OAuth refresh and access tokens are encrypted using AES-256-GCM bound to your unique subscription identifier (AAD) before storage.
Strict Tenant Isolation & Zero External Training: Your Google Search Console queries, impressions, clicks, and CTR metrics are strictly isolated to your authenticated subscription and are never shared with other users, advertisers, or external AI training pipelines.
1-Click Revocation & Deletion: You can disconnect Google Search Console at any time directly from /en/dashboard (or via Google Account Security settings), which immediately purges stored OAuth tokens and cached Search Console snapshots.

3. Data Retention, Security Headers & Contact Information

All AEORank web properties enforce Strict-Transport-Security (HSTS), Content-Security-Policy frame protections, and cryptographic session cookies. For privacy inquiries, data export requests, or immediate account deletion, contact our engineering team at support@aeorank.app.