KURUMI SEO read-only privacy policy

Google data accessed and why

With the account owner’s permission, KURUMI SEO read-only accesses GA4 property and web-stream identifiers to check the correct website, aggregate Organic Search sessions and engaged sessions, and public landing-page, branch and device breakdowns.

Search Console data includes aggregate search clicks, impressions, click-through rate and position for the website, branch pages and selected search queries, sitemap metadata, and Google’s stored indexing and canonical status for selected public URLs. The integration uses these reports to monitor KURUMI’s website performance and investigate SEO issues.

The separate GBP menu client accesses the owner’s Business Profile account and location identifiers, restaurant profile metadata, aggregate profile performance, structured food-menu sections, dishes, descriptions, prices, options and menu-photo references. It uses them to verify the correct Da Nang and Hoi An profiles, review performance and prepare, publish and verify exact owner-approved menus and menu photos. It does not request customer reviews, messages or individual customer records.

The collector excludes staff and admin landing pages and URLs with query strings from GA4 report output. It does not request names, email addresses, individual visitor histories or access to Gmail, Drive or contacts.

Processing, storage and access

The desktop integration calls Google APIs over HTTPS from an authorized operator’s Windows computer. OAuth credentials and the refresh token are stored outside the website repository using Windows DPAPI protection tied to the current Windows user. This protection does not prevent access by a process already running as that user.

When the operator chooses to save a report, aggregate metrics and public URL inspection results are stored in the operator’s local KURUMI report directory outside the website repository. GBP menu snapshots, approved payloads, publication checkpoints and readback records are retained in a separate protected local directory for verification and recovery. Approved menu content and photos are submitted to Google and can appear publicly on KURUMI’s restaurant profiles. Authorized operators may use selected report content in private working documents and analysis.

Sharing and AI-assisted analysis

Authorized KURUMI operators may provide selected aggregate reports and restaurant profile or menu content to OpenAI’s Codex for SEO and profile analysis, summaries, recommendations and preparation or verification of owner-approved menus. The service processes submitted content under the applicable service terms and account settings. The reporting collectors do not publish private reports or send them to a public dashboard; approved menu publication is a separate operation.

Google user data is not sold or shared for unrelated advertising. Access and transfers are limited to operating the described reporting and restaurant-profile features, security and legal obligations.

Retention and deletion

OAuth credentials are retained on the authorized computer while each connection is needed. Saved aggregate reports, GBP snapshots, approved payloads, publication checkpoints and related work records remain until an authorized operator removes them; there is currently no automatic deletion schedule.

The account owner can request deletion of stored credentials, saved reports and derived work records by contacting KURUMI. The request will be reviewed against operational, security and legal recordkeeping needs. Revoking Google access stops future authorized API collection but does not automatically delete existing local reports or copies in private working documents and service-provider systems.

Your control and privacy contact

You can revoke the app’s connection at any time in Google Account connections. After revocation, the integration needs your permission again before collecting further Google data.

For questions or a deletion request, email kurumi.danang@gmail.com. Include the app name and enough information to identify the authorized account or report. Do not send passwords, OAuth tokens or client secrets. KURUMI may verify that you control the account before acting on a request.

Google API data policy

KURUMI SEO read-only’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Policy updates and website privacy

Changes to this policy will appear here with an updated date. Material changes to the way Google data is used require notice and renewed consent where required by Google’s policies.

For public website cookies and visitor measurement, see the KURUMI website privacy policy.

Terms of use for KURUMI applications