Privacy policy

Information Binkley handles

• Invited-account details, organisation membership and access role.
• Website addresses, configuration and recorded website-health information.
• Reports, recommendations, support requests and approved client documents.
• Optional Google reporting information described below when an authorised member chooses to connect it.

Optional Google reporting connections

Google connections are optional and read-only. Binkley cannot use them to edit a Google account, a Search Console property or Google Analytics configuration.

Google Search Console

With permission, Binkley imports search-performance reporting such as clicks, impressions, average position, queries, pages and related reporting dimensions for an explicitly selected property.

Google Analytics

With permission, Binkley imports selected aggregate website-traffic reporting for an explicitly selected property and web stream. The current integration does not import event-level visitor records.

Why this information is used

Information is used to provide the requested client workspace: showing website condition, presenting authorised reporting, preparing reports, managing agreed work and responding to support requests. Google data is used only for the reporting features the user has connected.

Google authorisation and credential protection

Google issues an authorisation credential after the user completes its consent flow. Binkley encrypts the long-lived refresh credential before database storage. Short-lived access credentials are obtained and used only by server-side integration code. They are not displayed to clients or included in browser responses.

Retention, disconnection and deletion

Disconnecting an integration attempts to revoke the Google authorisation, removes the locally stored refresh credential and stops future synchronisation. Previously imported aggregate reporting data is retained so that existing reports and recorded periods remain understandable. A user may ask Aileron Discovery Network Ltd to review or delete retained account and reporting information, subject to legitimate record-keeping requirements. The standard retention periods and deletion timescales require owner confirmation before this policy is final.

A user can also remove Google access from their Google Account’s third-party connections settings.

Service providers and sharing

Binkley uses service providers needed to operate the product, including Vercel for application hosting and Supabase for database and authentication infrastructure. Google provides the optional reporting APIs. Information is not sold. The final processor list and international-transfer safeguards require business-owner and legal confirmation.

Security and access

Binkley uses encrypted connections, request-scoped authentication, organisation membership checks and database row-level access controls. These safeguards reduce risk but no online service can promise absolute security.

Google API Services User Data Policy

Binkley’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Contact and requests

Contact Aileron Discovery Network Ltd to ask about this policy or request access, correction or deletion. A dedicated privacy email address and postal address still require owner confirmation.

Binkley is operated by Aileron Discovery Network Ltd.