The controller is FlexBio Technologie GmbH, Otto-Hahn-Straße 7a, 37574 Einbeck, Germany; info@flexbio.de. Data protection inquiries may be sent to datenschutz@flexbio.de. The general information in Sections 1 to 9 of our general Privacy Policy also applies where it expressly relates to the app.

Purpose and access. The application is used for the internal analysis of the visibility of flexbio.de in Google web search. An authorized person grants the Search Console read-only scope webmasters.readonly in their Google Account. On Google’s side, this scope is not limited to flexbio.de. The application first reads the list of Search Console properties accessible to the account and their permission levels in order to determine access to sc-domain:flexbio.de. It does not store this property list. It does not request performance data for any other properties. For sc-domain:flexbio.de, it retrieves, for each completed month, one domain-wide web search aggregate without any breakdown by search query, individual page, or user. No write access to Search Console or the website is requested.

Insofar as personal data is processed in this context, the legal basis is Art. 6(1)(f) GDPR (legitimate interests). The legitimate interest of FlexBio Technologie GmbH is to analyze and improve the discoverability of its own website on the basis of limited, domain-wide search metrics.

Storage. The application stores locally one monthly file containing the source, property, reporting month and start/end dates, search type (web), aggregation type, data state, retrieval time, as well as clicks, impressions, click-through rate, and average position. If no data is available, the value no_data is recorded instead of the metrics. Individual search queries, page URLs, contact requests, and raw Google API responses are not stored in monthly files by this connector. The refresh token required for continued sign-in and the client ID are kept outside the project folder in the local Windows user environment; the token is encrypted for this user with Windows DPAPI. It is transmitted to Google for subsequent retrievals and is not written to the monthly file.

Recipients and analysis. The monthly files may be read by local processes and AI agents. Depending on the FlexBio agent used, the stored domain-wide Search Console monthly metrics may be transmitted via direct connections to Anthropic (Claude) or OpenAI (ChatGPT) for internal SEO analysis. Retrieval from Google itself does not involve an AI model. FlexBio uses the values for internal SEO analyses and reports, not for personalized advertising or the sale of data.

Retention and revocation. The monthly files generated by the connector are retained for 24 full months after the end of the respective reporting month and are then deleted automatically. This period does not govern the retention of separate analyses, reports, memory entries, or backups. The local token, protected and bound to the user, is stored only for as long as it is required for the connection; when local disconnection is explicitly selected, Google’s OAuth authorization for the entire Cloud project is revoked first, and the token is then removed. Disconnection does not immediately delete existing monthly files; they are removed automatically after the period stated above. You can also revoke the application’s access in your Google Account. Revocation prevents further authorized retrievals but does not automatically delete the local token or monthly files already stored. To have local data removed earlier, please contact datenschutz@flexbio.de.

Your rights of access, rectification, erasure, restriction of processing, and to lodge a complaint with a data protection supervisory authority are explained in Section 3 of the Privacy Policy.