Privacy policy
What Falcu does
Falcu lets marketing agencies give AI assistants (such as Claude, ChatGPT or Cursor) read-only access to the Google Search Console, Google Analytics 4 and Google Business Profile data of the clients they manage.
Data we access from Google
- Search Console (
webmasters.readonly): list of sites and search performance data. - Google Analytics (
analytics.readonly): list of properties and report data. - Google Business Profile (
business.manage): list of locations, performance metrics and reviews. Used read-only. - Basic profile (
openid email profile): to identify the connected Google account.
We never modify your Google data. We do not request write access in this version.
How we use it
Google data is used only to answer requests made by the account holder through their own AI assistant and to display their connections in the dashboard. We do not store Search Console, Analytics or Business Profile data: it is fetched from Google when your AI asks and kept in server memory for at most a few hours to respect Google quotas, never written to our database.
Falcu's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train AI models.
Storage and security
Google OAuth tokens are encrypted at rest (AES-256-GCM). Our managed Postgres database holds only account data: your login, workspace, client names, the list of connected properties and encrypted tokens. Access to production systems is restricted. Data sent to an AI assistant is processed by that assistant under its own terms.
Retention and deletion
Removing a Google connection deletes its tokens and the related stored data. Deleting your account deletes all workspace data within 30 days. You can also revoke access anytime at myaccount.google.com/permissions.
Sub-processors
Hosting and database (Vercel, Supabase), payments (Stripe), sign-in emails (Resend). A data processing agreement (DPA) is available on request.
Contact
Questions or deletion requests: privacy@falcu.app.