What we read, what we keep, and what we never do.

Last updated 5 November 2026

The short version: nothing goes on your site, Search Console is read-only and optional, and your data is never sold, shared for ads or used to train AI models.

• Nothing on your siteNo script, tag or pixel. We read public pages like any visitor.
• Search Console read-onlyWe ask only for read access. We can't change anything in your account.
• Never sold or trained onNo ads, no data brokers, no AI model training on your data.
• Delete it all, any timeClose your account and your data is removed within 30 days.

Google Search Console

Connecting Search Console is optional. If you connect it, we request the read-only Search Console permission and use it to show the queries your own pages rank for and pages missing from your sitemap. We don't request access to Gmail, Drive or anything else.

Outpublished's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect at any time in Settings or from your Google account.

AI processing

To sort pages by type and topic and to write briefs, we send the public page titles, headings and opening text of competitor and own-site pages to our AI provider through its API. Under the provider's API terms this data is not used to train its models. We never use your Search Console data for model training.

Where your data lives

Connections use HTTPS. Backups are taken nightly and test-restored. Each account's data is kept in its own separate database schema.

Who processes data for us

A small number of providers: hosting, an AI provider (page labelling and briefs), Paddle (payments, as Merchant of Record) and an email provider. The full list is in our privacy policy.

Reading competitor sites

We only read public pages, identify ourselves, and follow robots.txt.

Report a security issue

Email [email protected]. We reply within 2 working days.