Google API Services User Data Policy Disclosure
This page describes how l’Atelier SEO (operated by SEGUROV LIMITED LLC, 1603 Capitol Avenue, Suite 413A, 3157, Cheyenne, Wyoming 82001, USA) accesses, uses, stores, and shares Google user data obtained through Google APIs.
This disclosure is intended to comply with the Google API Services User Data Policy, including the Limited Use requirements.
1. Scopes requested
l’Atelier SEO requests the following Google OAuth scopes:
https://www.googleapis.com/auth/webmasters.readonly Google Search Console (read-only)
Why we request it: to retrieve and display, in read-only mode, the performance data (impressions, clicks, average positions, search queries) of the sites the user has validated in Google Search Console.
How we use it: these data feed the user’s unified SEO dashboard on l’Atelier SEO Platform and provide contextual information to the AI assistant “Iris” when the user asks questions about their site’s performance.
No data is modified. The Platform performs only read operations.
https://www.googleapis.com/auth/analytics.readonly Google Analytics (read-only)
Why we request it: to retrieve and display, in read-only mode, audience and traffic statistics (sessions, users, sources, behavior) for the Analytics properties the user has declared.
How we use it: these data feed the user’s unified SEO dashboard and provide contextual information to the AI assistant “Iris” when the user asks questions about traffic evolution.
No data is modified. The Platform performs only read operations.
2. Limited Use compliance
l’Atelier SEO affirms its strict compliance with the Google API Services User Data Policy Limited Use requirements:
2.1 We use Google user data only to provide user-facing features
Data obtained via Google APIs is used exclusively to provide features that are prominently visible in the user interface of the Platform (unified dashboard, SEO analyses, Iris assistant responses).
2.2 We do not transfer Google user data to third parties, except as necessary to provide the service
Data obtained via Google APIs is not transferred to third parties, with the exception of:
- Cloud hosting provider (Hetzner Online GmbH, Germany, EU) for storage of the data on our behalf, under a data processing agreement compliant with GDPR Article 28;
- Large Language Model providers (Anthropic PBC, OpenAI OpCo LLC, Google LLC, Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) solely to enable the AI assistant Iris to generate the response requested by the user. These providers act as data processors under contract and do not use the transmitted data to train their models, in accordance with their respective API terms for professional/business use;
- Compliance with applicable law, in response to a valid legal request.
No transfer of Google user data occurs for advertising, marketing, resale, or any other purpose unrelated to the user-facing service.
2.3 We do not use Google user data for advertising
Data obtained via Google APIs is never used for advertising purposes, including but not limited to: personalized advertising, retargeting, interest-based advertising, ad measurement, or any form of ad monetization.
l’Atelier SEO does not display any advertising on its Platform.
2.4 We do not use Google user data to train AI/ML models
Data obtained via Google APIs is never used to develop, improve, or train any artificial intelligence or machine learning models, whether developed by us or by third parties.
When Iris uses these data to formulate a response, the data are transmitted to Large Language Model providers only for the purpose of generating that specific response, under contractual guarantees that the data will not be used for model training.
2.5 Humans do not read Google user data, except in limited circumstances
Human access to Google user data is prohibited, except in the following limited circumstances:
- With the user’s explicit prior consent, for example when the user requests assistance from our support team;
- For security purposes, such as investigating abuse, fraud, or a security incident;
- To comply with applicable law or a valid legal request;
- When the data have been aggregated and anonymized and are used for internal operations (e.g., service monitoring, capacity planning).
3. Storage and security of Google user data
- Data obtained via Google APIs is stored on servers hosted by Hetzner Online GmbH in Germany (European Union).
- OAuth access and refresh tokens are stored encrypted at rest.
- All communications with Google APIs and with the user occur over HTTPS/TLS.
- Access to the data is restricted to authorized personnel only, on a strict need-to-know basis.
4. Data retention and deletion
- Google user data (including OAuth tokens) is retained until the user requests deletion of their account or until the user revokes access either directly from within the Platform (self-service, see section 5) or from their Google account at https://myaccount.google.com/permissions.
- Upon revocation, we manually delete the associated OAuth tokens and any previously retrieved Google user data from our servers within 30 days (deletion is immediate and automatic when the revocation is performed from within the Platform). The same applies upon an account deletion request.
- Deletion requests can be sent to contact@la-refonte.fr or via any communication channel already established with our team (WhatsApp, Slack, email, phone).
5. How users can revoke access
Users can revoke l’Atelier SEO’s access to their Google account at any time, on a self-service basis, in either of the following ways.
5.1 Directly from the Platform (self-service)
From the settings of their space on l’Atelier SEO both the free demo space and the client space users can click the “Revoke Google access” button. This immediately revokes the authorization on Google’s side and purges the associated OAuth tokens from our servers.
5.2 From their Google account
- Visiting https://myaccount.google.com/permissions;
- Selecting “l’Atelier SEO”;
- Clicking “Remove access”.
In every case, upon revocation we delete the associated OAuth tokens and any previously retrieved Google user data from our servers within 30 days (immediately when the revocation is performed from within the Platform). Users can additionally request server-side deletion of any Google user data previously retrieved by emailing contact@la-refonte.fr.
6. Contact
For any question regarding this disclosure or the way l’Atelier SEO handles Google user data:
Email: contact@la-refonte.fr
Postal address (EU representative): Rémi Segura, 13 rue de Méon, 64000 Pau, France
This disclosure supplements our Privacy Policy and our Terms of Service.