Privacy policy

GSC Magic ("we", "us") is operated by Lumi Zone. This policy explains what we collect when you use gscmagic.com and the GSC Magic MCP server, why, and the choices you have. Questions: contact@gscmagic.com.

What we collect

• Account data: your Google account email and basic profile information, used to create and identify your account.
• Authorization data: OAuth access and refresh tokens for the Google services you connect (Search Console and Google Analytics 4), and the API key you provide for Bing Webmaster Tools. These are stored encrypted.
• Search and analytics data: data returned by those services for the sites you choose to connect, such as clicks, impressions, rankings, indexing status and sessions. We cache it and, on plans that include history, store it so your agent can query it.
• Usage data: requests your AI agent makes to our server, with timestamps and error information, used to run, secure and limit the service.
• Waitlist data: if you join the waitlist, your email address. It is received through Formspree, our form provider, and used only to contact you about the launch and your launch discount.
• Website analytics: anonymous page-view statistics (pages visited, referrer, browser and country) from a self-hosted Umami instance. It uses no cookies and does not identify individual visitors.
• Billing data: if you subscribe, payments are handled by a third-party payment processor. We receive confirmation of your plan, not your full card number.

How we use it

• To provide the service: authenticate you, fetch your data and return results to the AI agent you connected.
• To keep the service secure, prevent abuse and enforce plan limits.
• To process payments and send service messages such as billing or security notices.
• To improve reliability and fix problems.

We do not sell your data and we do not use it for advertising.

Google API data

GSC Magic's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We request read-only access. We use Google user data only to provide and improve the features you see in GSC Magic, we do not transfer it to others except as needed to provide the service, comply with law or with your consent, and we do not use it to train generalized AI models.

Your AI agent (for example Claude or ChatGPT) receives the results of the queries you ask it to run. How that agent handles the data is governed by its provider's terms and privacy policy.

Sharing

We share data only with service providers that help us run GSC Magic, such as hosting, payment processing and error monitoring, under contracts that limit their use of it. We may disclose information if required by law.

Security

Access tokens are encrypted at rest and traffic uses HTTPS. No system is perfectly secure, so please tell us at once if you suspect a problem.

Retention and deletion

We keep your data while your account is active. You can disconnect a service at any time from your account or from your Google account permissions page, which stops further access. To delete your account and stored data, email us and we will do it within a reasonable time, except for records we must keep by law.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to complain to your data protection authority. Contact us to exercise these rights.

Cookies

See our cookie notice.

Changes

If we change this policy in a meaningful way we will update the date above and, where appropriate, notify you.