This policy covers the SearchLight website and our local developer prototype. Public hosted Google connections are not available yet. We will update this policy and show the relevant disclosures before enabling them.
Who we are
SearchLight is a Wicked Labs product operated by SimpliFixed Technologies, operating as Wicked Labs. Contact support@wickedapi.com for privacy questions or requests.
Data on this website
The interactive demo uses synthetic examples. This website does not connect to Google, collect Google reports, create accounts, use advertising trackers, set application cookies, or store your demo selections. It does not have a submission form. Email links open your email application.
Our hosting provider, Railway, and Cloudflare when used for DNS or traffic proxying may process technical information needed to operate and protect the site, such as IP addresses, request details, browser information, and timestamps. Cloudflare's access to web requests depends on whether proxying is enabled. Our application does not log request bodies or query strings. Provider logging and retention follow the applicable service configuration and provider policies; we do not promise a fixed provider retention period.
Data in the local Google prototype
After you explicitly authorize Google access, the local prototype can read Analytics property and stream details, dimensions and metrics, traffic and event reports, and Search Console site, query, page, sitemap, and selected URL-inspection data. Some reports may contain personal or confidential information in page URLs, search queries, or custom dimensions. Request only information appropriate for your use.
Google grants use analytics.readonly and webmasters.readonly. These permissions allow reading the Google resources your account can access; they do not allow editing your site. A selection in SearchLight can further narrow requests but does not change the underlying Google grant.
How we use and share Google data
We use authorized data to provide the reports, comparisons, diagnoses, and explanations you request. When used from ChatGPT or Codex, selected tool results are delivered to that host to answer your question. You choose whether to request and share those reports. The host's own privacy, retention, and account settings govern its handling of conversation data.
We do not sell Google data, use it for advertising or retargeting, or use it to train unrelated general-purpose AI models. SearchLight's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Human access to Google data is limited to purposes allowed by that policy, such as your affirmative authorization for specific support or necessary security or legal needs.
Storage and security
The local prototype stores Google credentials in your local user profile. Windows token storage uses Windows user-bound encryption. On Unix platforms the current prototype uses a file restricted to the owner, rather than encrypted token storage. Treat your device, backups, and any exported reports accordingly. Google tokens are not intended to appear in reports or be passed to the AI host.
We do not operate a public hosted Google-token database for this website. Before introducing hosted connections, we will disclose the storage providers, retention periods, account controls, and security arrangements that actually apply.
Retention, disconnect, and deletion
Local tokens remain until you remove them or revoke the grant. Reports you save locally and results already delivered to an AI host remain under your control or that host's policies. Revoking access does not erase earlier exports or conversation history. See our disconnect guide.
If you email us, we receive the address, message, and attachments you send. We use them to answer your request and keep relevant correspondence while needed for support, security, or legal obligations. Ask us to delete correspondence at support@wickedapi.com; tell us what to locate, and do not send credentials. We may need to verify that you are entitled to the requested information.
Your choices
You can use the demo without signing in, decline Google authorization, revoke Google access, remove local credentials and reports, or request access, correction, or deletion of information you have sent us. Rights may also apply under the laws where you live; contact us to exercise them.
Children and changes
SearchLight is intended for adults managing websites or apps and is not directed to children. We may update this policy as the product changes. Material changes to Google data use will be disclosed before that new use and will require consent where applicable.