Start free (opens in a new tab)
PricingStart free → (opens in a new tab)
Legal

Google User Data & API Services

Last updated: July 19, 2026

This disclosure explains how CiteCue ("CiteCue", "we", "us", or "our") accesses, uses, stores, and shares data from your Google account when you connect Google Analytics or Google Search Console to app.citecue.com (the "Service"). It supplements our Privacy Policy and applies specifically to data obtained through Google APIs.

Connecting Google is optional. The Service works without it; you connect Google only to unlock the features described below, and you can disconnect at any time.

1. Google services we connect to

  • Google Analytics 4 — read-only, via the Google Analytics Data API. Powers AI Referrals: identifying the human visitors who arrive on your site from ChatGPT, Perplexity, and other AI surfaces.
  • Google Search Console — read-only. Powers index status checks in AI Readiness and imports your existing search keywords as prompt ideas.

2. Scopes we request and why

We request the minimum, mostly read-only scopes needed to provide the features above. We do not request write access to your Analytics or Search Console data.

  • openid, email, profile — to sign you in and identify your CiteCue account.
  • https://www.googleapis.com/auth/analytics.readonly — to read Google Analytics 4 reports (traffic sources, sessions, and related metrics) so we can surface AI-referred traffic.
  • https://www.googleapis.com/auth/webmasters.readonly — to read Search Console index status and search-analytics data for the properties you choose.

3. What data we access

  • Your Google account's basic profile (name, email address) to create and identify your CiteCue account.
  • The list of Google Analytics and Search Console properties you have access to, so you can choose which ones to connect.
  • Aggregated, read-only metrics from the properties you connect — such as sessions, traffic sources, referrers, impressions, clicks, queries, and index coverage.

We only read the properties you explicitly select. We do not access Gmail, Google Drive, Contacts, or any other Google service.

4. How we use Google user data

We use the data described above solely to provide user-facing features of the Service:

  • attribute and report human visits that originate from AI assistants ("AI Referrals");
  • check whether your pages are indexed and surface AI-readiness fixes;
  • suggest prompts and keywords derived from your existing search performance;
  • display these insights to you inside your CiteCue dashboard and reports.

We do not use Google user data for advertising, and we do not use it to train generalized AI or machine learning models.

5. Limited Use

CiteCue's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (opens in a new tab), including the Limited Use requirements. Specifically:

  • we only use the data to provide or improve the user-facing features described above;
  • we do not transfer or sell the data to third parties for advertising, resale, or other purposes;
  • we do not use the data for personalized advertisements;
  • we do not allow humans to read the data unless we have your affirmative consent for specific messages, it is necessary for security purposes (such as investigating abuse) or to comply with applicable law, or the data is aggregated and anonymized for internal operations;
  • we do not use the data to train generalized or non-personalized AI/ML models.

6. How we store and protect the data

OAuth tokens and the data we retrieve are stored encrypted in transit and at rest on infrastructure hosted with Cloudflare. Access is restricted to authorized systems and personnel under contractual and technical safeguards. We retrieve data on your behalf using the access you grant and cache only what is needed to render your dashboards and reports.

7. How we share the data

We do not sell Google user data and we do not share it except with service providers (such as hosting and infrastructure) that process it on our behalf under contractual safeguards, or where required by law. Data is shown only to you and the members of your CiteCue account.

8. Data retention and deletion

We retain Google user data only as long as needed to provide the Service. When you disconnect Google or delete your CiteCue account, we revoke the stored tokens and delete the associated Google data within a reasonable period, except where retention is required by law.

9. Revoking access

You can revoke CiteCue's access to your Google data at any time:

10. Contact

Questions about how we handle Google user data? Contact us at info@citecue.com.