Privacy Policy

Last updated: July 22, 2026

We collect information you provide directly, such as when you fill out our contact form, request access to our AI Cookbook, or communicate with us via email.

Scopes requested. When you choose to connect a Google account, Magnet requests two read-only scopes: Google Search Console (https://www.googleapis.com/auth/webmasters.readonly) and Google Analytics (https://www.googleapis.com/auth/analytics.readonly). Both are presented together in a single consent screen, but you may decline either one individually and continue using Magnet with only the other, or with neither.

What we access. With the Search Console scope we read performance data — clicks, impressions, click-through rate, average position, and your top search queries. With the Analytics scope we read reporting data — sessions, users, engagement, and the traffic-channel breakdown. In both cases we read only the specific property you select after connecting, and both scopes are read-only: Magnet cannot modify anything in your Google account.

How we use it. This data is rendered only inside the connecting workspace's own "Google Data" tab and, when that workspace runs an audit, inside that workspace's AEO Audit report and its print PDF. When a Search Console connection exists, the same read-only query data is also used as an input to Magnet's own keyword-traffic estimates for that workspace. Google user data is never used for advertising, never sold, never used to train AI or machine-learning models, and never transferred to third parties except to the infrastructure providers that host and operate Magnet on our behalf under contractual confidentiality and security obligations, or where required by law.

How we store it. OAuth access and refresh tokens are encrypted at rest with AES-256-GCM before being persisted. Periodic snapshots of the fetched metrics are stored in the application database, scoped to the connecting workspace only and never readable from another workspace.

Retention & deletion. A workspace member can disconnect the Google account at any time from the Google Data tab. Disconnecting immediately deletes the stored connection and its encrypted tokens, and Magnet stops fetching any further Google data. Metric snapshots collected before disconnection are retained for that workspace's own historical trend charts for up to 12 months, after which they are automatically deleted; they are deleted immediately if the workspace is deleted. You may request deletion of all Google-derived data for your workspace at any time by emailing dev@projecta.ai, and we will complete the deletion within 30 days. You can also revoke Magnet's access directly from your Google Account at https://myaccount.google.com/permissions.

Magnet's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use the information we collect to respond to your inquiries, provide our services, and improve our offerings. We do not sell your personal information to third parties.

We may update this privacy policy from time to time. If we materially change how we access, use, store, or share Google user data, we will update the "Last updated" date above, notify affected users by email, and — where the change expands our use of Google user data — prompt you to review and consent to the updated policy before that use begins.

If you have questions about this privacy policy, please contact us at dev@projecta.ai.