How your data is handled
What MeasureScale reads, what it keeps, what your AI assistant sees and how to disconnect or delete your account.
This page describes what MeasureScale does with your data today. The privacy policy is the binding statement.
The short version
- MeasureScale only reads your Google data. It never changes anything in your Google account.
- MeasureScale keeps no long-term copy of your Search Console or GA4 data. It keeps short-lived cached results only.
- You can disconnect Google at any time from Connections in the portal.
- Your AI assistant sees the results of MeasureScale’s analysis.
- To delete your account, email hello@measurescale.com.
What your AI assistant sees
Your assistant receives the results of MeasureScale’s analysis. These are tables of searches, pages and numbers. They also include notes on how to read them.
Your assistant never sees your Google sign-in tokens or your Google password.
Your assistant’s provider handles those results under its own terms. Choose an assistant and a plan whose data terms suit you.
When you disconnect Google
- MeasureScale removes its access at Google.
- It deletes the stored sign-in tokens for that Google account.
- It removes that Google account’s properties from MeasureScale.
Cached results are not deleted at disconnect. They expire on their normal schedule, within 72 hours. See connect Search Console and GA4.
When you remove an AI app or API key
Removing an AI app under AI apps stops its access at once. Revoking an API key under API keys makes requests with it fail at once.
An AI app’s approval also ends on its own after 30 days without use. It always ends after 90 days. See how long an approval lasts.
Deleting your account
The portal does not offer account deletion. To ask for deletion, email hello@measurescale.com.
Google permissions
MeasureScale asks Google only for read-only access. See Google permissions.
Technical details
What MeasureScale stores
| Data | Why | How it is protected |
|---|---|---|
| Your Google refresh token and the permissions you granted | To read Search Console and GA4 for you | Envelope encryption, described below |
| Short-lived Google access tokens | To avoid a token exchange on every call | Encrypted, kept until 5 minutes before Google expires them |
| Cached query results | To answer repeat questions faster and protect Google quotas | Encrypted, deleted after 1 to 72 hours. See data windows |
| Your property list and GA4 links | To show and use your properties | Stored in your account |
| Your annotations, content groups, topic clusters and experiments | You create these with the write tools | Stored in your account |
| Usage records | To count your allowance | Tool name, units, time, status and the app or key used. No Google data |
| API keys | To check a key when it is used | Only a SHA-256 hash of each key |
| Account events | To keep an audit trail, for example “Google connected” or “API key created” | Stored in your account |
MeasureScale does not keep a long-term copy of your Search Console or GA4 data. The cache is the only place Google results stay, and it is short-lived.
How tokens are encrypted
MeasureScale encrypts each Google token with its own 256-bit key using AES-256-GCM. Google Cloud KMS protects those keys. Each encrypted token is bound to your account and your Google account. A token copied to another account cannot be decrypted.
MeasureScale decrypts a token only to call Google for you. Google tokens never leave MeasureScale.
What MeasureScale logs
The service logs one line for each Google request, with fixed fields only. Logs never contain response bodies, queries, rows, page URLs or tokens. A property appears in logs only as a short one-way hash.