Account, billing and privacy
Privacy and your data
What Semhack reads from Google, what it stores, how pages are fetched, and where to read the full policy.
Google Search Console
- Semhack asks for read-only access (
webmasters.readonly). It can’t change anything in Search Console or your Google account. - It reads the list of properties you can access, so you can pick clients, and imports search performance (queries, pages, clicks, impressions, CTR and position) for the properties you pick.
- Google sign-in tokens are stored encrypted (AES-256-GCM) and used only to fetch that data.
- You can revoke access at any time at myaccount.google.com/permissions (opens in a new tab).
Websites you audit
Audits fetch public pages as SemhackBot through a guarded fetcher that refuses private and internal network addresses. Site audits obey robots.txt. See the crawler page for how to identify or block it.
Inside your workspace
- Everything you see, from audits and clients to briefs and alerts, belongs to your workspace and is only shown to its members.
- Brief share links are the only way to show something to people outside the workspace, and you can turn each one off.
- AI drafts are off unless your workspace turns them on. See AI drafts for what is sent.
- “Was this helpful?” votes on these help pages are anonymous counts.
The full privacy policy covers retention, service providers and your rights.