Google data access and how to disconnect

In one paragraph

Görünür Lab can read — never change — your Google Search Console and Google Analytics 4 data for the single property you choose per connection, to provide search performance and traffic reporting and analysis to your workspace. You can disconnect at any time, in the app or at Google.

Permissions requested

Each connection asks for exactly one of these. We never request write scopes and never ask for your profile, e-mail address or any other Google data.

How connecting works

• A workspace owner or administrator opens Integrations, adds a connection (“Bağlantı kaydı ekle”) for Search Console or Analytics 4 and clicks “Google ile bağlan”.
• Google shows its own consent screen, titled Görünür Lab, listing the single read-only permission. You can decline; nothing is stored then.
• After you approve, we ask Google which properties you can access and show that list. You explicitly select one property; we never choose for you and we check your selection against Google’s live list.
• We make a small read-only test request for that property. Only when it succeeds does the connection show as connected.
• Data synchronisation is started explicitly by an administrator. Nothing runs on a schedule unless an administrator turns that on for the connection.

What is stored

• The Google access/refresh token, encrypted (AES-256-GCM), bound to your workspace and connection. It is never shown, logged or returned by our API.
• The identifier of the property you selected (for example a Search Console property or a GA4 property number) and its display name.
• Daily performance figures for that property: Search Console clicks, impressions, click-through rate and position (in total, by query and by page); Analytics sessions, active users, new users, page views, engaged sessions and engagement rate (in total, and per landing page for Organic Search).

What you can do with it today

Your workspace shows the state of each connection and each synchronisation (status, date range, number of rows), and a read-only performance view of the data that was synchronised for the selected property: Search Console clicks, impressions, click-through rate, position, daily trend, top queries and pages; Analytics sessions, users, views, engaged sessions, engagement rate, daily trend and organic landing pages. The view reads only what is already stored — opening it does not contact Google. Owners and administrators see every site of the workspace; a project manager only sees sites of the projects they are assigned to.

Who can see it

Only members of your workspace whose role permits it (project managers: only sites of their assigned projects). Client-portal accounts do not receive Google-derived data. Our staff do not read it except with your affirmative consent for a support request, to investigate abuse or a security incident, or where the law requires.

How to disconnect and revoke

• In the app: Integrations → next to the connection click “Bağlantıyı kes” (Disconnect). We call Google’s revocation endpoint for the token, delete our stored token, mark the connection revoked and stop all synchronisation. If Google cannot be reached, we still delete our copy of the token and tell you that revocation at Google could not be confirmed.
• At Google: open Google Account permissions, select Görünür Lab and choose “Remove access”. Our next request then fails, we mark the connection expired and delete the stored token.

How to delete data that was already synchronised

Disconnecting stops further access but does not erase figures already synchronised into your workspace — deleting is a separate action. Workspace owners and administrators can delete the stored data of one site, one Google service and one property: Integrations → Google data → “Verileri sil” (Delete stored data). A fresh two-step verification is required, the property id must be typed exactly, and nothing is deleted while a synchronisation of that site and service is queued or running.

The deletion is permanent and cannot be undone. It removes the synchronised figures (including search queries, pages and landing pages) and resets that property’s synchronisation progress. It does not disconnect anything and does not start a synchronisation; if the connection is still active, a later synchronisation can bring the data back from Google. The history of synchronisation runs (dates, row counts, status) and the audit record of the deletion (identifiers and counts only) are kept.

To delete a whole workspace or your account, write to destek@gorunurlab.com from the e-mail address of a workspace owner.

Limited Use

Görünür Lab’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.