Account privacy

Who provides it

WRP Consultoria e Informática Ltda, CNPJ 66.300.125/0001-45, R. Copaíba, Lote 01, Bloco B, Sala 408, Águas Claras, Brasília/DF, CEP 71919-540, Brazil, operates this account. Contact and personal data requests: eu@wendelmaques.com.

Account data and purpose

• We keep your verified email, account identifier, supplied profile, access methods and preferences to provide the account and recover access. Passwords are stored as hashes. Passkeys use a public key.
• Sessions, sign-in codes, identity links and security events let us check access and prevent abuse. The session uses an HttpOnly cookie on the application domain.
• Work data, documents and purchases also follow the policy of the application where you use them. Google sign-in does not give automatic access to another customer's data.

Sign in with Google

• When you choose Sign in with Google, you allow access to your Google account identifier, verified email and basic profile. The profile can include your name, given name, family name, photo, language and Google Workspace organisation domain.
• We use this data to identify your account, give you access and display your profile. We store the link and profile fields in the account system. Google confirms your identity. We do not receive your Google password.
• Sign-in requests only openid, email and profile. It does not give access to Gmail, Drive, Calendar, contacts or Search Console. Additional integrations request their own permission when you choose to connect them.
• Sign-in tokens are used on the server to check your identity. We do not keep access or refresh tokens from this sign-in to query other Google services.
• We do not sell data received from Google. We do not use it for personalised advertising or to train general artificial intelligence models. Internal access is limited to service operation, authorised support, security and legal obligations.
• We keep the link and profile while needed for your account. Unlinking Google prevents new access through that link. It does not delete your account, the imported profile, product data or required security and billing records.
• You can remove the connection in your Google Account settings at https://myaccount.google.com/connections. To request access, correction or deletion of data we keep, write to eu@wendelmaques.com. Include the product and account email. Do not send a password or token.
• Our use and transfer of information received from Google APIs follow the Google API Services User Data Policy, including its Limited Use requirements where applicable: https://developers.google.com/terms/api-services-user-data-policy.

Search Console in PageAudit

• When you connect Search Console, PageAudit requests webmasters.readonly permission. Google permits reading properties you can access. The import assistant displays those properties and imports only the ones you select.
• We keep the property, query period, collection date, search queries, pages, clicks, impressions, click-through rate, average position and Google's original response. The overview covers 28 days and up to 50 queries and 50 pages. It does not represent all Search Console data.
• You can select up to 20 queries to track. Each collection reads a rolling 28-day window. We keep earlier series until deletion. We use the results to show performance and detect drops in clicks or position. Collection runs when you connect and can repeat daily. We do not change your Google property or promise a position, traffic or indexing.
• Access and refresh tokens are encrypted on the server and linked to your account. Each imported website receives only the link needed to query the selected property. Tokens are not sent to the browser, public reports or the artificial intelligence provider.
• When an email alert is enabled, Amazon Web Services (SES) receives the domain, search term and click or position values included in the message, plus the recipient's email address. It uses this data to deliver the alert. Search Console results are not included in public reports, advertising or AI requests.
• Disconnecting a website in PageAudit removes that website's local credential and stops new collection. Earlier samples, series and alerts remain stored until deletion. To revoke permission at Google, remove the connection at https://myaccount.google.com/connections. Request deletion of results at eu@wendelmaques.com.

Sharing Google user data

• These disclosures cover the Google account data and any Google integration data described in this policy. They also cover raw responses, summaries and aggregated or derived data.
• WRP processes this data to provide the features you request. Our hosting and storage providers supply the servers we operate. They process stored data to provide that infrastructure. Authorised operators can access data when needed for service operation, security or support you request.
• Google receives the requests and credentials needed to confirm your identity or read a service you connect. Amazon Web Services Simple Email Service (SES) receives your email address and message contents to deliver account messages and enabled alerts. The integration sections describe any Google metrics included in alerts.
• For a purchase you request, the payment providers identified in this policy can receive the name and email used for billing, including those imported at sign-in. They do not receive your Google access tokens, refresh tokens or imported performance reports.
• We do not sell Google user data or disclose it to data brokers or advertisers. We do not use it for advertising, credit decisions or AI model training. We do not send Google API responses, imported performance reports or tokens to AI providers.
• We disclose data to authorities only when required by applicable law. We limit such disclosure to what is required. Hosting and email providers can process data outside your country. Their role is to supply the services described here.

Protecting Google user data

• HTTPS encrypts data between your browser and our service, and between our service and Google's APIs. This includes Google sign-in, permission requests and imported reports.
• The server checks your session and permission before it returns private data. Account and product identifiers restrict access to the records you are allowed to use. Private responses are not stored in shared public caches.
• For optional Google integrations, access and refresh tokens are encrypted before storage with AES-256-GCM. The encryption binds each token to its product, account and Google service. Server configuration holds the encryption keys separately from the encrypted records.
• Google tokens stay on the server. They are not included in browser storage, public reports or AI requests. Sign-in sessions use Secure and HttpOnly cookies. State validation, short expiry and single-use callbacks protect the Google authorization flow.
• Stored profile fields and report metrics are protected by server access controls and account checks. You can revoke Google access and request deletion as described in this policy.

Purpose and legal basis

We process data needed to provide the service you request and protect access. Optional permissions are requested in the context of the feature. We meet legal obligations and handle personal data requests under the Brazilian data protection law (LGPD).

Storage and third parties

• Servers we operate store account data. Access requires authentication and is limited to the service purpose.
• Google receives sign-in and permission requests. Amazon Web Services (SES) delivers account codes, invitations and notices. These providers can process data in other countries under their contracts and applicable safeguards.
• We do not send passwords, sign-in codes or Google tokens to advertising platforms. Data needed for a purchase follows the conditions shown by the application at payment.

Retention and deletion

We keep data while needed for the account and the purposes described here. Codes and sessions expire. Unlinking a provider does not close the account. To request deletion, write to eu@wendelmaques.com. We can keep records required by law or needed for security, with restricted access.

Your rights

Request confirmation of processing, access, correction, sharing information or deletion at eu@wendelmaques.com. We can check your identity before responding. You can also revoke Google permission at https://myaccount.google.com/connections.