Privacy Policy
Görünür Lab is an online platform where SEO agencies and in-house teams manage clients, projects, tasks and search-visibility data. This policy explains which personal data and Google user data we handle, why, how it is protected, and the choices you have. Questions: destek@gorunurlab.com.
Information we handle
- Account data: your name, e-mail address, role and workspace membership. Passwords are stored only as salted hashes. Two-step verification secrets are stored encrypted and recovery codes only as keyed hashes.
- Workspace content you enter: clients, contacts, projects, sites, tasks and comments.
- Security records: a session cookie, and an audit log of security-relevant actions (who did what, when, from which IP address and request ID). Audit records never contain passwords, tokens or Google performance data.
- Google user data, only if you connect Google Search Console or Google Analytics — described in the next section.
Google user data we access
If — and only if — you choose to connect a Google service, Görünür Lab asks Google for one read-only permission per connection. We request no other scope: no write access, and not your Google profile, e-mail address, contacts, Gmail, Drive or any other Google data.
| Google permission (scope) | What we read | Why |
|---|---|---|
Search Console, read-only https://www.googleapis.com/auth/webmasters.readonly | The list of Search Console properties your Google account can access (so you can pick one). For the one property you pick: daily search performance — clicks, impressions, click-through rate and average position — in total, by search query and by page. | To show search performance reporting and analysis for that site to the members of your workspace. |
Google Analytics, read-only https://www.googleapis.com/auth/analytics.readonly | The list of Google Analytics 4 accounts and properties you can access (so you can pick one) and the chosen property’s time zone and available fields. For the one property you pick: daily sessions, active users, new users, page views, engaged sessions and engagement rate, and the same measures per landing page for Organic Search traffic. | To relate a site’s organic search performance to its organic traffic and engagement in the same reports. |
How we use Google user data
Görünür Lab’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- To list the properties you can choose from and to verify, on Google’s live list, that you have access to the property you picked before anything is synchronised.
- To synchronise the data above for that one property into your workspace and to provide search performance and traffic reporting and analysis features to the workspace members who are authorised to see them.
- We do not use Google user data for advertising, and we do not sell it or transfer it to advertising platforms, data brokers or information resellers.
- We do not use Google user data to develop, improve or train artificial-intelligence or machine-learning models, and we do not send it to third-party AI models for inference or analysis. If this ever changes, we will review and update this policy and the Google data access page before any such feature is enabled.
- Our staff do not read your Google user data unless you give affirmative consent for a specific support request, it is necessary to investigate abuse or a security incident, or the law requires it.
Sharing and transfer
- Inside your workspace, Google-derived data is available only to workspace members whose role permits it. Client-portal accounts do not receive Google-derived data.
- We use infrastructure service providers to host the service. They process data only on our behalf, to operate the service, and not for their own purposes.
- We transfer Google user data to others only to provide or improve the user-facing features described here with your consent, for security purposes, to comply with applicable law, or as part of a merger, acquisition or sale of assets after notifying affected users.
Storage and protection
- Google access and refresh tokens are encrypted at rest (AES-256-GCM) with keys held separately from the database, bound to your workspace and connection, and are never written to logs, audit records or API responses.
- Data is sent over HTTPS. Each workspace’s data is isolated at the database level (row-level security), access follows role-based permissions, and two-step verification is mandatory for workspace owners and administrators.
- No system is perfectly secure. If a breach affects your data we will notify you as the law requires.
Retention and deletion
- Tokens: kept while the connection is active. They are deleted when you disconnect, and when Google reports that the permission was revoked or has expired.
- Synchronised Google data: kept in your workspace until it is deleted. Disconnecting stops all further access to Google immediately, but does not by itself erase data that was already synchronised.
- Workspace owners and administrators can delete the stored Google data of one site, one Google service and one property themselves (Integrations → Google data → “Verileri sil” / Delete stored data), after a fresh two-step verification and by typing the property id. The deletion is permanent and separate from disconnecting. If the connection is still active, a later synchronisation can bring the data back from Google. The history of synchronisation runs (dates, row counts, status — no Google content) is kept.
- Deletion of a whole workspace or of your account is done on request: write to destek@gorunurlab.com.
- Audit records are append-only and kept as a security record; they contain no tokens and no Google performance data. A deletion of stored Google data is recorded by identifiers and row counts only.
Your choices and rights
- Disconnect a Google connection at any time in the app (Integrations → “Bağlantıyı kes” / Disconnect). We then ask Google to revoke the token and delete our copy. You can also remove Görünür Lab’s access yourself at Google Account permissions.
- Depending on where you live, you may have rights to access, correct or delete your personal data and to object to its processing. Contact destek@gorunurlab.com.
Cookies
We use only the essential session cookie needed to keep you signed in. We do not use advertising or third-party analytics cookies or trackers.
Children
Görünür Lab is a business tool and is not directed at children.
Changes
If this policy changes materially we update the date above and, where the change affects how we use Google user data, tell workspace owners in the app or by e-mail.
Contact
Görünür Lab — destek@gorunurlab.com
TURGUT VARLI, Büyükdere Cad. Levent Loft Residence No:201/6, Levent, İstanbul, Türkiye