We see less than
you'd expect us to.

When you sign in we get your Google email, name, and profile picture, plus a refresh token scoped only to Search Console (read-only). The refresh token is stored encrypted at rest with AES-GCM using a key in Cloudflare's secret store; we use it to pull your search analytics on your behalf and for no other purpose.

From Search Console: the last 90 days of query and page impressions, clicks, CTR, and average position. Stored in Cloudflare D1 in a project namespace tied to your user id. Queries are embedded with OpenAI's text-embedding-3-small via Cloudflare AI Gateway and stored in Vectorize, namespaced per project.

• / We don't train on your data.
• / We don't sell or share with advertisers.
• / We run no analytics or session-recording on the dashboard.
• / We never write back to Search Console.

Delete your account from the dashboard at any time. Hard-delete from D1, Vectorize, and R2 — no soft-delete, no analytics tail.

hi@bcited.ai