SeoPilot Auth Broker helps WordPress sites connect to a Google account with read-only access to Google Search Console and Google Analytics.
When you approve access, Google gives this service an access token and a refresh token. We pass them straight to the WordPress site that asked for them, inside an encrypted ticket that expires after two minutes and can only be opened by that site. We then forget them.
Nothing. We do not keep tokens, Google account data, Search Console data or Analytics data, and we do not have access to your reports. The tokens live only in your own WordPress database.
Your site periodically sends its refresh token to this service so we can obtain a fresh access token from Google (this requires our client secret). The token is used for that single request and not stored.
webmasters (Search Console) and siteverification (Google Site Verification), used only to verify the requesting site and submit its sitemap, and analytics.readonly (Google Analytics, read-only). We do not use them for anything else.
Use "Disconnect" in the plugin, or visit myaccount.google.com/permissions.
Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.