Privacy Policy | Visibility100x

This Privacy Policy explains what information Visibility100x ("we", "us") collects when you use our website, free tools and services, and how we use and protect it. By using the site you agree to this policy.

Information we collect

Information you provide. When you request an audit report by email, submit the contact form, or sign in, we collect the email address, name, website URL and any message you send.
URLs you submit. When you run an audit or a free tool, we fetch and analyze the public pages at the URL you enter in order to produce your report.
Usage data. Standard server logs (IP address, browser type, pages requested, timestamps) used for security, rate limiting and diagnostics.
Cookies. If you sign in, we set a first party session cookie so you stay logged in. We do not use third party advertising cookies.
Google account data, if you choose to connect one. Optional, read only, and set out in full in Google account data below.

How we use information

To run the audits and tools you request and deliver your report.
To respond to enquiries and provide our services.
To send the specific report or sign in link you asked for.
To secure the service, prevent abuse and enforce rate limits.

What we do not do

We do not sell your personal information. We only audit public pages at the URLs you submit, we do not attempt to access private, internal or authenticated pages. Our audit engine refuses private and internal network addresses.

Google account data

Connecting a Google account is optional. Every audit, tool and report on Visibility100x works without one. If you do connect, you sign in at Google through Google OAuth, so we never see or store your Google password, and we ask only for read only permissions. We never create, change or delete anything in your Google account, and we never post or send anything on your behalf.

What we access

Google Search Console. The list of properties your Google account can access, so you can choose the one that matches the site you added. For the property you choose, we read search performance for a recent window: clicks, impressions, click through rate and average position, broken down by search query and by page.
Google Analytics. The list of Google Analytics 4 properties your account can access, so you can choose one. For the property you choose, we read sessions, users, new users, engaged sessions, conversions and page views, along with your traffic by channel and your top landing pages.
Your Google email address. Read from the sign in token and shown in your dashboard, so you can see which Google account is connected. It does not sign you in to Visibility100x, and we do not use it for marketing.

The permissions requested are webmasters.readonly, analytics.readonly, openid and email. All four are read only, and they are the narrowest permissions Google publishes for reading this data. You choose which property each site reads from, and we read no other property.

How we use it

Only to produce the reports and dashboards you asked for, in your own account. Your search performance and traffic figures are shown beside the results of our audit, used to work out which pages and queries to put in front of you first, and kept as a record so you can see how the numbers move over time. We store the figures Google returns as a snapshot against your site, so the dashboard can show them without calling Google every time you open a page.

What we never do with it

We never sell or rent your Google data, and we never transfer it to anyone else for their own purposes.
We never use it for advertising, ad targeting or building audiences.
We never use it to train or improve any AI or machine learning model, ours or anyone else's. Your Google data is never sent to an AI provider.
Nobody here reads your Google data except where you have given us permission, where it is necessary for security or to fix a fault you have reported to us, where the law requires it, or where the data has been aggregated and made anonymous.

Storing it, and taking it back

The token that lets us read on your behalf is encrypted with AES 256 GCM before it is stored, never held in plain text, and access tokens are short lived. You can disconnect at any time from Connections in your dashboard: that asks Google to withdraw the grant, deletes the stored tokens, and stops any further reading straight away. You can also remove our access yourself at your Google Account permissions page. Report snapshots already saved to your account stay in your reports after you disconnect, and are removed when you delete the site or your account, or when you ask us to remove them at hello@visibility100x.com.

Limited Use

Visibility100x's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Third parties

We rely on a small number of processors to run the service, which may include: Google PageSpeed Insights (to measure Core Web Vitals for a URL you submit), AI providers such as OpenAI and Anthropic (only when you run an AI visibility check), an email delivery provider (to send reports and sign in links), and our hosting and database provider. These process data only to provide their function to us.

Data retention

We keep audit results and account information for as long as needed to provide the service and for legitimate business or legal purposes. You can ask us to delete your account and associated data at any time.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, or object to certain processing. To exercise any of these, email us at hello@visibility100x.com.

Security

We use industry standard measures to protect your information. Any keys used to publish changes to a customer's site under a managed plan are scoped, revocable and stored in a secrets manager, never your primary login.