Privacy policy

• Your Google account details. When you sign in with Google we receive your email address and name, and use them only to confirm you have been invited and to show who is signed in.
• Google Search Console and Google Analytics data. If you connect a site, Athena asks Google for read-only access to that site's Search Console reports (clicks, impressions, queries, pages, index status) and Google Analytics reports (sessions and referral sources). We store these reports and an encrypted access token so the data can refresh each day.
• Bing Webmaster Tools data, if you add a Bing API key, on the same read-only basis.
• What you enter. Keywords, notes, blog plans, booked calls, uploaded CSV exports and anything else you type or upload.

• Sign-in: your email address and basic profile (openid, email, profile).
• Search Console: read-only access (webmasters.readonly).
• Google Analytics: read-only access (analytics.readonly).

Athena cannot change your websites, Search Console settings or Analytics properties.

We use data received from Google APIs only to provide the features you see in Athena: charts, tables, audits, indexing checks and reports about your own sites. We do not use it for advertising, do not sell it, and do not use it to train artificial intelligence or machine learning models. People cannot read it except you, the people you have invited to the same Athena account, and the operator when needed for security, support or to comply with the law.

Athena's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Only the service providers that run Athena: Vercel, which hosts the app, and Supabase, which hosts its database. They process data on our behalf and may not use it for anything else. We do not share data with anyone else unless the law requires it.

All traffic uses HTTPS. Google access tokens are encrypted before they are stored. The database is locked so that only the app, using its own private credentials, can read it, and only invited accounts can sign in.

We keep a site's data while that site is tracked in Athena. Deleting a site from Athena deletes its data and its stored Google access. You can also remove Athena's access at any time from your Google account's third-party connections page. To have your account or any data deleted, email contact the operator of your installation and we will do it within 30 days.

Athena uses only the cookies it needs to keep you signed in and to remember which site you are viewing. There are no advertising or tracking cookies, on the app or on this website.

If this policy changes, we will update the date at the top of this page. Questions: contact the operator of your installation.