Privacy Policy

Last updated: September 7, 2026

Overview

Brambyl is a WordPress plugin that connects to your Google Search Console account to diagnose and repair SEO indexing issues. This privacy policy explains what data we collect and how we use it.

What Data We Collect

• Google Search Console data: When you connect your Google account, Brambyl reads your search analytics (clicks, impressions, CTR, position), sitemap status, and URL inspection results. This data is stored in your WordPress database on your own server.
• License key: If you purchase PRO, your license key and site URL are sent to our license validation server at Brambyl.com to verify your subscription.
• Email address: Your WordPress admin email is used for weekly reports and critical alerts. You can change this in the plugin settings.

What We Do NOT Collect

• We do not have access to your Google account credentials. OAuth tokens are stored encrypted in your WordPress database.
• We do not collect or transmit your website content, user data, or customer data.
• We do not use analytics or tracking on the plugin itself.
• We do not sell or share your data with third parties.

Google API Data Use

Brambyl uses the Google Search Console API. The plugin requests access to your Search Console data via OAuth. All API calls are made directly from your WordPress server to Google — no data passes through our servers. The plugin uses the scope https://www.googleapis.com/auth/webmasters which allows reading your GSC data and submitting sitemaps on your behalf.

OAuth Tokens

When you connect your Google account, an OAuth refresh token is stored in your WordPress database, encrypted using your site's WordPress salt. This token is used to refresh your access token periodically. You can disconnect at any time from the plugin settings, which deletes all tokens.

Repair Operations

PRO repair tools modify your WordPress database (SEO plugin indexable tables, rewrite rules, robots.txt files). All repairs generate scoped rollback SQL before execution, stored in your WordPress database. No repair data is transmitted to our servers.

Data Storage

All data is stored in your WordPress database on your own server. We do not have a cloud backend. The only external API calls are:

• Google Search Console API (your data, your account)
• IndexNow API (URL submissions to search engines — PRO only)
• Our license server at Brambyl.com (license key validation only)

Data Deletion

To delete all Brambyl data: uninstall the plugin from your WordPress admin. This removes all database tables, options, and cached data. Alternatively, use the "Disconnect" button in plugin settings to remove Google tokens while keeping diagnostic data.

Contact

Questions about privacy? Email info@Brambyl.com.

← Back to Brambyl.com