Legal

App Privacy Policy

Last updated: 7 September 2026

This Privacy Policy applies specifically to the 23point4 SEO reporting application hosted at https://23point4.netlify.app/ (the “App”), and to the personal information and Google API data processed in connection with that App. It is not a general privacy notice for the 23point4.uk marketing website.

23point4 respects your privacy and is committed to protecting the information we use to provide our SEO reporting service.

This Privacy Policy explains what information 23point4 collects, how we use it, how we protect it, and your rights in relation to that information.

1. Who we are

23point4 is a UK-based business that provides SEO reporting services through the App, hosted at https://23point4.netlify.app/.

This policy is published on our main marketing website, 23point4.uk, for ease of access — but 23point4.uk is a separate marketing website and is not the App described in this policy.

If you have any questions about this Privacy Policy or how your information is handled, you can contact us at:

Email: 23point4.uk@gmail.com
Website: https://23point4.uk

For the purposes of applicable UK data protection law, 23point4 is responsible for the personal information it processes in connection with the App.

2. Information we collect

The information we process depends on how you use the App.

Information provided by website owners

When a website is added to the App, we may hold information such as:

  • Your name or business name;
  • Your email address;
  • Your website address;
  • Login credentials required to access your App report;
  • The Google Analytics 4 property associated with your website;
  • The Google Search Console property associated with your website; and
  • Information necessary to administer and maintain your account.

Website owners are added to the App manually and with their agreement.

Information obtained from Google

With your authorisation, the App can access information from your Google Analytics 4 and Google Search Console properties using Google's APIs.

The Google permissions requested by the App are:

  • https://www.googleapis.com/auth/analytics.readonly
  • https://www.googleapis.com/auth/webmasters.readonly

These permissions are read-only. The App does not use them to modify your Google Analytics or Google Search Console properties.

Depending on the information available for your website, the information accessed may include:

Google Search Console data, including:

  • Search queries;
  • Clicks;
  • Impressions;
  • Click-through rate;
  • Average search position;
  • Pages;
  • Countries;
  • Devices; and
  • Other search-performance information made available through the authorised Search Console property.

Google Analytics 4 data, including:

  • Users;
  • Sessions and traffic information;
  • Pages and screens;
  • Events;
  • Conversions;
  • Acquisition information;
  • Geographic and device information; and
  • Other website-performance information made available through the authorised Analytics property.

The exact information displayed in a report depends on the configuration of the relevant Google property and the data available through Google's APIs.

3. How we use Google data

We use Google data solely to provide SEO reporting and analysis for the website owner who authorised access.

This includes:

  • Producing SEO and website-performance reports;
  • Presenting search-performance information in an understandable format;
  • Identifying trends and changes in search visibility and website traffic;
  • Helping identify areas where a website's search-engine visibility may be improved; and
  • Providing information and analysis that assists with SEO decision-making.

We do not use Google data for advertising, retargeting, credit assessment, data brokerage, or any unrelated commercial purpose.

We do not sell Google data.

We do not use Google data to train, develop or improve artificial intelligence or machine-learning models.

We do not combine Google data obtained from one client's properties with another client's data for the purpose of creating commercial products or datasets.

4. How Google data is stored

The App does not maintain a separate database containing the raw Google Analytics or Google Search Console data retrieved through the APIs.

Google data is retrieved for the purpose of generating the relevant SEO report. Information contained within a client's report may subsequently be displayed through the App.

Client reports are protected behind a user ID and password and are not intended to be publicly accessible.

We take reasonable technical and organisational measures to protect information against unauthorised access, alteration, disclosure or destruction.

5. Google API Services and Limited Use

23point4's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Google data is used only to provide the SEO reporting functionality described in this Privacy Policy and is not transferred or used for purposes unrelated to that service.

23point4 does not sell Google user data or transfer it to advertising platforms, data brokers or other information resellers.

Access to Google data is limited to what is necessary to provide the functionality of the service.

6. Sharing information with third parties

23point4 does not sell, rent or trade personal information or Google data.

We use Netlify to host and deliver the App. Information required to deliver a client's report may therefore be processed through Netlify's infrastructure.

Client-specific Google account identifiers are not displayed publicly within the reports.

We may disclose information where necessary:

  • To comply with a legal obligation;
  • To protect the security or integrity of the service;
  • To prevent fraud, abuse or unauthorised access; or
  • Where disclosure is otherwise permitted or required by law.

We do not provide client Google Analytics or Search Console data to third parties for their own independent marketing or advertising purposes.

7. Google authorisation

When you connect a Google Analytics or Google Search Console property to the App, Google asks you to authorise the requested permissions.

The App only requests read-only access to the Google properties required to provide the reporting service.

You can withdraw the App's access to your Google account through your Google Account security settings or by contacting us.

Withdrawing access will prevent the App from obtaining new data from the affected Google property, although information already incorporated into an existing report may remain available until that report is deleted in accordance with our retention policy.

8. Data retention

We retain client account information and reports only for as long as reasonably necessary to provide the service.

Unless a different period has been agreed with you, we intend to retain client reports and associated account information for up to 12 months after the last report update or the end of the client relationship, whichever is applicable.

You may request deletion of your information at any time.

Where information is no longer required, it will be securely deleted or otherwise disposed of in an appropriate manner, subject to any legal obligations requiring us to retain it.

9. Account and report security

Access to client reports is restricted through user ID and password authentication.

We take reasonable steps to prevent unauthorised access to client accounts and reports. However, no internet-based service can be guaranteed to be completely secure.

You are responsible for keeping your App login credentials confidential and should contact us promptly if you believe that your account has been accessed without authorisation.

10. Lawful basis for processing

Under UK data protection law, we process personal information using the lawful basis appropriate to the particular processing activity.

This may include:

  • Contract: where processing is necessary to provide an agreed service;
  • Consent: where you have specifically authorised access to information, including authorising access to Google Analytics or Google Search Console;
  • Legitimate interests: where processing is necessary for legitimate business purposes, such as maintaining and securing the service, provided those interests are not overridden by your rights and interests; and
  • Legal obligation: where processing is necessary for us to comply with the law.

Where we rely on consent, you can withdraw that consent at any time.

11. Your data protection rights

Depending on the circumstances, UK data protection law gives you rights including:

  • The right to request access to personal information we hold about you;
  • The right to request correction of inaccurate or incomplete information;
  • The right to request deletion of your personal information;
  • The right to request restriction of processing;
  • The right to object to certain processing;
  • The right to data portability where applicable; and
  • The right to withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at: 23point4.uk@gmail.com

We may need to verify your identity before fulfilling a request.

12. Deleting your data

You can request deletion of your App account, reports and associated personal information by contacting us at 23point4.uk@gmail.com.

If you have authorised the App to access your Google Analytics or Search Console properties, you can also withdraw that authorisation through your Google Account.

Once Google authorisation has been withdrawn, the App will no longer be able to obtain new information from the affected Google properties.

13. International data transfers

Some of the service providers used to operate the App may process information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protection law and that appropriate safeguards are in place where required.

14. Cookies and similar technologies

The App may use cookies or similar technologies that are necessary to operate the App, maintain user sessions, authenticate users or provide security.

Where non-essential cookies or similar technologies are used, we will provide the appropriate information and obtain consent where required by applicable law.

15. Children's information

The App is intended for website owners and businesses and is not directed at children.

We do not knowingly collect personal information from children for the purpose of providing the service.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the service, applicable law, or the way we process information.

Where a change materially affects how we use Google data or other personal information, we will update this policy before introducing the new use where required.

The latest version of this policy will always be available at https://23point4.uk/privacy-policy/.

17. Complaints

If you have concerns about how we have handled your personal information, please contact us first at: 23point4.uk@gmail.com

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)
Website: https://ico.org.uk/

You can find information about making a complaint directly through the ICO's website.

Google API data statement

The use of information received from Google APIs by 23point4 adheres to the Google API Services User Data Policy, including the Limited Use requirements.