Skip to content
Sign inStart free trial
Docs

Data and permissions

RankUpside asks Google for your basic profile, email and read-only Search Console access. For each client it stores weekly search performance, page titles, indexing results and anything you send in, such as won deals and leads. Weekly history is kept about 16 months. You can revoke Google access, replace report links, revoke agent keys and remove clients at any time.

What it doesn't do: RankUpside can't change anything in Google, and it never stores raw lead phone numbers or emails, call recordings or webhook bodies.

Updated

What RankUpside can see

One Google permission, read-only

Google scope

View Search Console data for your verified sites

webmasters.readonly

  • Clicks, impressions and positions by page and search, 13 weeks back
  • Page titles, fetched from the client's public site
  • No edits in Search Console or anywhere in Google
  • No access to Gmail, Drive, Analytics or Ads

Revoke access any time at myaccount.google.com/permissions. Google tokens are stored encrypted.

Google access

Sign-in asks Google for openid, email, profile and webmasters.readonly: your basic profile, your email and read-only Search Console data. Nothing for Gmail, Drive or Ads.

Business Profile access is a separate, optional request (business.manage). It stays off until Google approves RankUpside's API access. Google refresh tokens are stored encrypted (AES-256-GCM).

What's stored per client

What is stored, and where it comes from
DataWhat it includesComes from
AccountYour email, name, agency name and brandingYou
Search ConsoleProperties, searches, pages, clicks, impressions, positions and URL inspection resultsGoogle, read-only
Public page dataTitles, H1, meta description, headings, links, canonical and noindex of pages with fixesThe client's public website
Market dataSearch volume, cost per click and live results snapshots (the last 12 per search)Keyword and results data providers
Your importsWon deal dates, IDs, landing pages, sources, amounts and statuses; call and form lead dates, pages, sources and durationsCSV, webhooks and call trackers you connect

How long

  • Weekly search history older than about 70 weeks (about 16 months) is trimmed on each successful sync.
  • Pausing a client keeps its data. Removing it deletes it (below).
  • Session cookies last up to 30 days. Interface preferences such as theme last up to one year.

Lead contacts

Phone numbers and emails sent with leads or won deals are used only to match a deal to its lead. They're stored as salted SHA-256 hashes. Only the last two digits of a phone number are kept, for display in your lead list.

No call recordings or transcripts are stored, and webhook bodies aren't logged. Client reports contain no hashes, contact hints or call-tracking provider names. How the data is sent in: Webhooks.

Who can see a report

Anyone with a client's report link can view that report, with no login. Reports aren't indexed by search engines. New link on the client's Client report page turns the old link off right away.

AI agents

Agent keys are read-only, limited to one client, stored as hashes and revocable in Client › Settings › AI agent. What you send to an outside AI service, by agent or by pasting a prompt, falls under that service's terms. See Connect an AI agent.

Remove and delete

  • Remove a client in its Settings › Danger zone. This deletes its synced data, revenue, leads, findings and report link. The Search Console property itself isn't touched.
  • Revoke Google access from your Google account's third-party access page. Future syncs stop; data already saved stays until you remove the client.
  • Export or delete your account: email hello@rankupside.com from the account's email address.

What we don't do

  • No sale of personal information.
  • Google data isn't used to target ads or to train general-purpose AI models, under Google's API Services User Data Policy and its Limited Use requirements.
  • No advertising trackers or third-party analytics script on this website.

The full policy is in the privacy policy; the controls are summarized on Security.

Something missing or out of date? Email hello@rankupside.com.

Questions.

Can RankUpside change my clients' Search Console or website?
No. Google access is read-only, and agent keys can only read a client's fix list. RankUpside never edits a site.
What happens to a client's data when I remove the client?
Its synced search data, revenue, leads, findings and report link are deleted. The client's Search Console property itself isn't affected.
How long is search history kept?
About 16 months of weekly data. Older weeks are trimmed on each successful sync.
Does RankUpside store my clients' customers' phone numbers?
No. Phone numbers and emails sent for lead matching are stored only as salted hashes, plus the last two digits of the phone number for display.