# How your data is handled

> What MeasureScale reads, what it keeps, what your AI assistant sees and how to disconnect or delete your account.

This page describes what MeasureScale does with your data today. The [privacy policy](https://measurescale.com/privacy) is the binding statement.

## The short version

- MeasureScale only reads your Google data. It never changes anything in your Google account.
- MeasureScale keeps no long-term copy of your Search Console or GA4 data. It keeps short-lived cached results only.
- You can disconnect Google at any time from **Connections** in the portal.
- Your AI assistant sees the results of MeasureScale's analysis.
- To delete your account, email [hello@measurescale.com](mailto:hello@measurescale.com).

## What your AI assistant sees

Your assistant receives the results of MeasureScale's analysis. These are tables of searches, pages and numbers. They also include notes on how to read them.

Your assistant never sees your Google sign-in tokens or your Google password.

Your assistant's provider handles those results under its own terms. Choose an assistant and a plan whose data terms suit you.

## When you disconnect Google

1. MeasureScale removes its access at Google.
2. It deletes the stored sign-in tokens for that Google account.
3. It removes that Google account's properties from MeasureScale.

Cached results are not deleted at disconnect. They expire on their normal schedule, within 72 hours. See [connect Search Console and GA4](/getting-started/connect-google/#disconnect-a-google-account).

## When you remove an AI app or API key

Removing an AI app under **AI apps** stops its access at once. Revoking an API key under **API keys** makes requests with it fail at once.

An AI app's approval also ends on its own after 30 days without use. It always ends after 90 days. See [how long an approval lasts](/getting-started/ai-client-setup/#how-long-an-approval-lasts).

## Deleting your account

The portal does not offer account deletion. To ask for deletion, email [hello@measurescale.com](mailto:hello@measurescale.com).

## Google permissions

MeasureScale asks Google only for read-only access. See [Google permissions](/safety/google-permissions/).

## Technical details

### What MeasureScale stores

| Data | Why | How it is protected |
|---|---|---|
| Your Google refresh token and the permissions you granted | To read Search Console and GA4 for you | Envelope encryption, described below |
| Short-lived Google access tokens | To avoid a token exchange on every call | Encrypted, kept until 5 minutes before Google expires them |
| Cached query results | To answer repeat questions faster and protect Google quotas | Encrypted, deleted after 1 to 72 hours. See [data windows](/concepts/data-windows/#caching) |
| Your property list and GA4 links | To show and use your properties | Stored in your account |
| Your annotations, content groups, topic clusters and experiments | You create these with the [write tools](/concepts/read-and-write-tools/) | Stored in your account |
| Usage records | To count your [allowance](/concepts/usage-and-plans/) | Tool name, units, time, status and the app or key used. No Google data |
| API keys | To check a key when it is used | Only a SHA-256 hash of each key |
| Account events | To keep an audit trail, for example "Google connected" or "API key created" | Stored in your account |

MeasureScale does not keep a long-term copy of your Search Console or GA4 data. The cache is the only place Google results stay, and it is short-lived.

### How tokens are encrypted

MeasureScale encrypts each Google token with its own 256-bit key using AES-256-GCM. Google Cloud KMS protects those keys. Each encrypted token is bound to your account and your Google account. A token copied to another account cannot be decrypted.

MeasureScale decrypts a token only to call Google for you. Google tokens never leave MeasureScale.

### What MeasureScale logs

The service logs one line for each Google request, with fixed fields only. Logs never contain response bodies, queries, rows, page URLs or tokens. A property appears in logs only as a short one-way hash.