Privacy Policy

Account information: registration email, display name, avatar, password (stored as a salted hash), two-factor settings, and similar.

Usage information: the sites, articles, materials, server and domain configuration you create, and operational data needed to run the Service.

Technical & log information: IP address, browser/device information, access times, and operation logs (for security auditing and troubleshooting).

Payment information: wallet balance, top-up and spending records, cryptocurrency transaction identifiers; we do not store full card details.

Third-party platform authorizations: the authorization tokens obtained when you connect Google Search Console, Bing Webmaster Tools, or similar webmaster platforms to GOCO, and the site data retrieved from those platforms (see Section 5).

To provide, maintain, and improve the Service, including generating, building, deploying sites and analytics.

To keep accounts and the platform secure — authentication, risk control, abuse detection, and security auditing (e.g. records of sign-ins and sensitive actions).

To process payments, quotas, and license codes, and to send service-related notifications (verification, security alerts, expiry reminders).

For troubleshooting, improving the experience, and meeting legal obligations, consistent with applicable law.

We use cookies and local storage to keep you signed in, remember preferences (language, theme, column visibility), and ensure security (session and anti-CSRF tokens).

Some essential cookies are necessary for the Service to function; you can manage cookies in your browser, but disabling them may break some features.

We do not sell your personal information. We share it only: with your consent; with infrastructure providers necessary to deliver the Service (e.g. cloud computing, email delivery, human verification); or where required by law or to protect legitimate interests.

Such third parties may process data only to the extent needed to provide services to us and are bound by confidentiality obligations.

The Webmaster Tools feature lets you voluntarily connect a Google account (via Google OAuth), a Bing Webmaster Tools API key, or credentials for other search-engine platforms to GOCO so that GOCO can manage your websites on those platforms on your behalf. A connection is always initiated by you, and you can disconnect it at any time from the Webmaster Tools page.

When you authorize with Google we request only the following scopes: Google Search Console (https://www.googleapis.com/auth/webmasters — to view and manage your Search Console properties, submit sitemaps and URLs, and read indexing status and search performance data), Site Verification (https://www.googleapis.com/auth/siteverification — to complete website ownership verification on your behalf), and your Google account email address (used only to label the connected account in the interface).

Information obtained from Google is used solely to provide those features to you: verifying ownership of your sites, submitting sitemaps and URLs, and displaying index coverage and search performance. We do not use it for advertising, sell or transfer it to third parties, use it to train generalized artificial-intelligence or machine-learning models, or allow humans to read it (except with your explicit consent, for security investigations, to comply with the law, or where the data is aggregated and cannot identify you).

Authorization tokens are stored in our database, used only server-side when running sync tasks you trigger or schedule, and protected by access controls tied to your account; site data retrieved from Google is kept only for as long as needed to display it to you. When you disconnect a connection we delete the token stored for it; data handling after account closure is described in Section 7. You can also revoke GOCO's access at any time from your Google Account's Third-party apps & services page (https://myaccount.google.com/permissions).

GOCO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We apply reasonable technical and organizational measures to protect your data, such as encryption in transit, password hashing, encryption of sensitive fields, and access controls.

No system can guarantee absolute security; please safeguard your credentials and enable two-factor authentication for stronger protection.

We retain your data for as long as necessary to provide the Service and meet legal obligations.

You may close your account; afterwards we delete or anonymize related data per our retention policy, except where law requires retention.

Subject to applicable law, you may access, correct, or delete your personal information, or restrict/object to certain processing.

You can update your profile, email, and security options in account settings, or make a request via the contact below.

We may update this Privacy Policy from time to time. Updates will be posted on this page with an effective date.

For questions about this Policy or your data, contact us at gococms@gmail.com.