Security & Privacy

All data is protected with AES-256-GCM encryption. OAuth tokens are stored encrypted. Our infrastructure runs on secure cloud servers.

Yes. Pleqo is GDPR compliant. You can export your data anytime, and when you delete your account, all your data is permanently removed.

Your data is retained as long as your account is active. When you delete your account, all data is permanently removed.

The panel at app.pleqo.com loads no analytics tag and no advertising tag at all. On the marketing site we load Google Analytics 4 through Google Consent Mode v2, with every storage type denied by default: no analytics cookie is written until you press Accept, and rejecting the banner or ignoring it keeps them switched off. Paddle sets its own cookies while you are in checkout. Every cookie we use is listed by name in our Cookie Policy.

We never sell your data, and no other customer can see inside your workspace. Running the service does mean sending data to providers, though: the prompts you configure are sent to the AI platforms we scan, and we rely on a defined set of processors for search data, email, hosting and payments. Every one of them is named in our Privacy Policy.

No. The GA4 connection only requests read-only access. Pleqo cannot modify your Analytics data. When you want to disconnect, remove it from Settings > Integrations with one click: OAuth tokens are deleted immediately.

No. Your brand data, scan results, and audit reports are never used for AI model training. Your data is processed solely to provide the service to you.

Your data is stored on secure cloud servers. All data is protected with AES-256-GCM encryption and hosted on GDPR-compliant infrastructure.

Yes. The sub-processor list is available on our Privacy Policy page. You can review our Privacy Policy on our website.

Account deletion is immediate. All your data, workspaces, scan history, and personal information are irreversibly removed.

No. The Google Search Console connection only requests read-only access. Pleqo cannot modify your Search Console properties or settings. We only read clicks, impressions, queries, and pages to combine them with AI cite data. One limit worth knowing about what we read: Search Console reports AI Overview impressions and clicks inside its web search totals rather than separately, so those numbers are your classic search performance, and the AI side of your picture is measured from the prompts you track, not from GSC. When you want to disconnect, remove it from Settings > Integrations with one click: OAuth tokens are deleted immediately.